Oct 2 18:48:33.189417 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 18:48:33.189454 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 18:48:33.189477 kernel: efi: EFI v2.70 by EDK II Oct 2 18:48:33.189492 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 18:48:33.189505 kernel: ACPI: Early table checksum verification disabled Oct 2 18:48:33.189519 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 18:48:33.189535 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 18:48:33.189549 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 18:48:33.189563 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 18:48:33.189576 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 18:48:33.189594 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 18:48:33.189609 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 18:48:33.189622 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 18:48:33.189636 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 18:48:33.189653 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 18:48:33.189671 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 18:48:33.189686 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 18:48:33.189701 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 18:48:33.189715 kernel: printk: bootconsole [uart0] enabled Oct 2 18:48:33.189729 kernel: NUMA: Failed to initialise from firmware Oct 2 18:48:33.189744 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 18:48:33.189758 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 18:48:33.189839 kernel: Zone ranges: Oct 2 18:48:33.189859 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 18:48:33.189875 kernel: DMA32 empty Oct 2 18:48:33.189890 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 18:48:33.189909 kernel: Movable zone start for each node Oct 2 18:48:33.189940 kernel: Early memory node ranges Oct 2 18:48:33.189958 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 18:48:33.189973 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 18:48:33.189987 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 18:48:33.190002 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 18:48:33.190016 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 18:48:33.190030 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 18:48:33.190045 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 18:48:33.190059 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 18:48:33.190074 kernel: psci: probing for conduit method from ACPI. Oct 2 18:48:33.190088 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 18:48:33.190107 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 18:48:33.190122 kernel: psci: Trusted OS migration not required Oct 2 18:48:33.190143 kernel: psci: SMC Calling Convention v1.1 Oct 2 18:48:33.190159 kernel: ACPI: SRAT not present Oct 2 18:48:33.190174 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 18:48:33.190193 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 18:48:33.190209 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 18:48:33.190224 kernel: Detected PIPT I-cache on CPU0 Oct 2 18:48:33.190240 kernel: CPU features: detected: GIC system register CPU interface Oct 2 18:48:33.190255 kernel: CPU features: detected: Spectre-v2 Oct 2 18:48:33.190270 kernel: CPU features: detected: Spectre-v3a Oct 2 18:48:33.190285 kernel: CPU features: detected: Spectre-BHB Oct 2 18:48:33.190300 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 18:48:33.190315 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 18:48:33.190330 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 18:48:33.190345 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 18:48:33.190364 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 18:48:33.190379 kernel: Policy zone: Normal Oct 2 18:48:33.190397 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:48:33.190413 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 18:48:33.190428 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 18:48:33.190444 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 18:48:33.190459 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 18:48:33.190474 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 18:48:33.190490 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 18:48:33.190506 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 18:48:33.190524 kernel: trace event string verifier disabled Oct 2 18:48:33.190540 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 18:48:33.190556 kernel: rcu: RCU event tracing is enabled. Oct 2 18:48:33.190571 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 18:48:33.190587 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 18:48:33.190602 kernel: Tracing variant of Tasks RCU enabled. Oct 2 18:48:33.190618 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 18:48:33.190633 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 18:48:33.190648 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 18:48:33.190664 kernel: GICv3: 96 SPIs implemented Oct 2 18:48:33.190679 kernel: GICv3: 0 Extended SPIs implemented Oct 2 18:48:33.190694 kernel: GICv3: Distributor has no Range Selector support Oct 2 18:48:33.190712 kernel: Root IRQ handler: gic_handle_irq Oct 2 18:48:33.190727 kernel: GICv3: 16 PPIs implemented Oct 2 18:48:33.190742 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 18:48:33.190757 kernel: ACPI: SRAT not present Oct 2 18:48:33.190801 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 18:48:33.190851 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 18:48:33.190870 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 18:48:33.190886 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 18:48:33.190901 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 18:48:33.190917 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 18:48:33.190932 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 18:48:33.190952 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 18:48:33.190968 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 18:48:33.190983 kernel: Console: colour dummy device 80x25 Oct 2 18:48:33.190999 kernel: printk: console [tty1] enabled Oct 2 18:48:33.191015 kernel: ACPI: Core revision 20210730 Oct 2 18:48:33.191030 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 18:48:33.191046 kernel: pid_max: default: 32768 minimum: 301 Oct 2 18:48:33.191062 kernel: LSM: Security Framework initializing Oct 2 18:48:33.191077 kernel: SELinux: Initializing. Oct 2 18:48:33.191093 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:48:33.191112 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:48:33.191128 kernel: rcu: Hierarchical SRCU implementation. Oct 2 18:48:33.191143 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 18:48:33.191159 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 18:48:33.191174 kernel: Remapping and enabling EFI services. Oct 2 18:48:33.191189 kernel: smp: Bringing up secondary CPUs ... Oct 2 18:48:33.191205 kernel: Detected PIPT I-cache on CPU1 Oct 2 18:48:33.191220 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 18:48:33.191236 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 18:48:33.191255 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 18:48:33.191271 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 18:48:33.191286 kernel: SMP: Total of 2 processors activated. Oct 2 18:48:33.191301 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 18:48:33.191317 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 18:48:33.191332 kernel: CPU features: detected: CRC32 instructions Oct 2 18:48:33.191347 kernel: CPU: All CPU(s) started at EL1 Oct 2 18:48:33.191362 kernel: alternatives: patching kernel code Oct 2 18:48:33.191378 kernel: devtmpfs: initialized Oct 2 18:48:33.191397 kernel: KASLR disabled due to lack of seed Oct 2 18:48:33.191413 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 18:48:33.191429 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 18:48:33.191454 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 18:48:33.191473 kernel: SMBIOS 3.0.0 present. Oct 2 18:48:33.191489 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 18:48:33.191505 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 18:48:33.191521 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 18:48:33.191538 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 18:48:33.191554 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 18:48:33.191570 kernel: audit: initializing netlink subsys (disabled) Oct 2 18:48:33.191586 kernel: audit: type=2000 audit(0.247:1): state=initialized audit_enabled=0 res=1 Oct 2 18:48:33.191606 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 18:48:33.191622 kernel: cpuidle: using governor menu Oct 2 18:48:33.191639 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 18:48:33.191655 kernel: ASID allocator initialised with 32768 entries Oct 2 18:48:33.191671 kernel: ACPI: bus type PCI registered Oct 2 18:48:33.191691 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 18:48:33.191707 kernel: Serial: AMBA PL011 UART driver Oct 2 18:48:33.191723 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 18:48:33.191739 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 18:48:33.191755 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 18:48:33.210831 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 18:48:33.210876 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 18:48:33.210894 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 18:48:33.210912 kernel: ACPI: Added _OSI(Module Device) Oct 2 18:48:33.210937 kernel: ACPI: Added _OSI(Processor Device) Oct 2 18:48:33.210954 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 18:48:33.210970 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 18:48:33.210986 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 18:48:33.211002 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 18:48:33.211018 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 18:48:33.211035 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 18:48:33.211051 kernel: ACPI: Interpreter enabled Oct 2 18:48:33.211067 kernel: ACPI: Using GIC for interrupt routing Oct 2 18:48:33.211087 kernel: ACPI: MCFG table detected, 1 entries Oct 2 18:48:33.211104 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 18:48:33.211493 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 18:48:33.211689 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 18:48:33.211917 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 18:48:33.212108 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 18:48:33.214891 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 18:48:33.214939 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 18:48:33.214958 kernel: acpiphp: Slot [1] registered Oct 2 18:48:33.214975 kernel: acpiphp: Slot [2] registered Oct 2 18:48:33.214991 kernel: acpiphp: Slot [3] registered Oct 2 18:48:33.215007 kernel: acpiphp: Slot [4] registered Oct 2 18:48:33.215024 kernel: acpiphp: Slot [5] registered Oct 2 18:48:33.215040 kernel: acpiphp: Slot [6] registered Oct 2 18:48:33.215056 kernel: acpiphp: Slot [7] registered Oct 2 18:48:33.215072 kernel: acpiphp: Slot [8] registered Oct 2 18:48:33.215091 kernel: acpiphp: Slot [9] registered Oct 2 18:48:33.215108 kernel: acpiphp: Slot [10] registered Oct 2 18:48:33.215124 kernel: acpiphp: Slot [11] registered Oct 2 18:48:33.215140 kernel: acpiphp: Slot [12] registered Oct 2 18:48:33.215156 kernel: acpiphp: Slot [13] registered Oct 2 18:48:33.215172 kernel: acpiphp: Slot [14] registered Oct 2 18:48:33.215188 kernel: acpiphp: Slot [15] registered Oct 2 18:48:33.215204 kernel: acpiphp: Slot [16] registered Oct 2 18:48:33.215221 kernel: acpiphp: Slot [17] registered Oct 2 18:48:33.215237 kernel: acpiphp: Slot [18] registered Oct 2 18:48:33.215257 kernel: acpiphp: Slot [19] registered Oct 2 18:48:33.215273 kernel: acpiphp: Slot [20] registered Oct 2 18:48:33.215289 kernel: acpiphp: Slot [21] registered Oct 2 18:48:33.215305 kernel: acpiphp: Slot [22] registered Oct 2 18:48:33.215321 kernel: acpiphp: Slot [23] registered Oct 2 18:48:33.215337 kernel: acpiphp: Slot [24] registered Oct 2 18:48:33.215353 kernel: acpiphp: Slot [25] registered Oct 2 18:48:33.215369 kernel: acpiphp: Slot [26] registered Oct 2 18:48:33.215385 kernel: acpiphp: Slot [27] registered Oct 2 18:48:33.215404 kernel: acpiphp: Slot [28] registered Oct 2 18:48:33.215421 kernel: acpiphp: Slot [29] registered Oct 2 18:48:33.215437 kernel: acpiphp: Slot [30] registered Oct 2 18:48:33.215453 kernel: acpiphp: Slot [31] registered Oct 2 18:48:33.215469 kernel: PCI host bridge to bus 0000:00 Oct 2 18:48:33.215687 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 18:48:33.215911 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 18:48:33.216088 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 18:48:33.216264 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 18:48:33.216478 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 18:48:33.216700 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 18:48:33.219031 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 18:48:33.219263 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 18:48:33.219456 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 18:48:33.219656 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 18:48:33.219917 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 18:48:33.220113 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 18:48:33.220306 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 18:48:33.220497 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 18:48:33.220687 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 18:48:33.220903 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 18:48:33.221103 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 18:48:33.221294 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 18:48:33.221484 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 18:48:33.221676 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 18:48:33.221877 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 18:48:33.222072 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 18:48:33.222246 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 18:48:33.222273 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 18:48:33.222291 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 18:48:33.222308 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 18:48:33.222325 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 18:48:33.222341 kernel: iommu: Default domain type: Translated Oct 2 18:48:33.222357 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 18:48:33.222373 kernel: vgaarb: loaded Oct 2 18:48:33.222389 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 18:48:33.222406 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 18:48:33.222426 kernel: PTP clock support registered Oct 2 18:48:33.222442 kernel: Registered efivars operations Oct 2 18:48:33.222459 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 18:48:33.222475 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 18:48:33.222491 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 18:48:33.222507 kernel: pnp: PnP ACPI init Oct 2 18:48:33.222699 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 18:48:33.222723 kernel: pnp: PnP ACPI: found 1 devices Oct 2 18:48:33.222740 kernel: NET: Registered PF_INET protocol family Oct 2 18:48:33.222761 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 18:48:33.234862 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 18:48:33.234893 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 18:48:33.234911 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 18:48:33.234928 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 18:48:33.234945 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 18:48:33.234962 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:48:33.234978 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:48:33.234995 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 18:48:33.235020 kernel: PCI: CLS 0 bytes, default 64 Oct 2 18:48:33.235036 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 18:48:33.235052 kernel: kvm [1]: HYP mode not available Oct 2 18:48:33.235069 kernel: Initialise system trusted keyrings Oct 2 18:48:33.235086 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 18:48:33.235102 kernel: Key type asymmetric registered Oct 2 18:48:33.235118 kernel: Asymmetric key parser 'x509' registered Oct 2 18:48:33.235134 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 18:48:33.235150 kernel: io scheduler mq-deadline registered Oct 2 18:48:33.235171 kernel: io scheduler kyber registered Oct 2 18:48:33.235187 kernel: io scheduler bfq registered Oct 2 18:48:33.235457 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 18:48:33.235484 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 18:48:33.235501 kernel: ACPI: button: Power Button [PWRB] Oct 2 18:48:33.235518 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 18:48:33.235536 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 18:48:33.235736 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 18:48:33.235764 kernel: printk: console [ttyS0] disabled Oct 2 18:48:33.235804 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 18:48:33.235822 kernel: printk: console [ttyS0] enabled Oct 2 18:48:33.235838 kernel: printk: bootconsole [uart0] disabled Oct 2 18:48:33.235855 kernel: thunder_xcv, ver 1.0 Oct 2 18:48:33.235871 kernel: thunder_bgx, ver 1.0 Oct 2 18:48:33.235887 kernel: nicpf, ver 1.0 Oct 2 18:48:33.235903 kernel: nicvf, ver 1.0 Oct 2 18:48:33.236109 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 18:48:33.236300 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T18:48:32 UTC (1696272512) Oct 2 18:48:33.236324 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 18:48:33.236341 kernel: NET: Registered PF_INET6 protocol family Oct 2 18:48:33.236358 kernel: Segment Routing with IPv6 Oct 2 18:48:33.236374 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 18:48:33.236391 kernel: NET: Registered PF_PACKET protocol family Oct 2 18:48:33.236407 kernel: Key type dns_resolver registered Oct 2 18:48:33.236423 kernel: registered taskstats version 1 Oct 2 18:48:33.236446 kernel: Loading compiled-in X.509 certificates Oct 2 18:48:33.236463 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 18:48:33.236480 kernel: Key type .fscrypt registered Oct 2 18:48:33.236497 kernel: Key type fscrypt-provisioning registered Oct 2 18:48:33.236513 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 18:48:33.236530 kernel: ima: Allocated hash algorithm: sha1 Oct 2 18:48:33.236546 kernel: ima: No architecture policies found Oct 2 18:48:33.236562 kernel: Freeing unused kernel memory: 34560K Oct 2 18:48:33.236578 kernel: Run /init as init process Oct 2 18:48:33.236598 kernel: with arguments: Oct 2 18:48:33.236614 kernel: /init Oct 2 18:48:33.236630 kernel: with environment: Oct 2 18:48:33.236646 kernel: HOME=/ Oct 2 18:48:33.236662 kernel: TERM=linux Oct 2 18:48:33.236678 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 18:48:33.236699 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:48:33.236721 systemd[1]: Detected virtualization amazon. Oct 2 18:48:33.236743 systemd[1]: Detected architecture arm64. Oct 2 18:48:33.236760 systemd[1]: Running in initrd. Oct 2 18:48:33.236799 systemd[1]: No hostname configured, using default hostname. Oct 2 18:48:33.236819 systemd[1]: Hostname set to . Oct 2 18:48:33.236838 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:48:33.236856 systemd[1]: Queued start job for default target initrd.target. Oct 2 18:48:33.236874 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:48:33.236892 systemd[1]: Reached target cryptsetup.target. Oct 2 18:48:33.236914 systemd[1]: Reached target paths.target. Oct 2 18:48:33.236932 systemd[1]: Reached target slices.target. Oct 2 18:48:33.236949 systemd[1]: Reached target swap.target. Oct 2 18:48:33.236966 systemd[1]: Reached target timers.target. Oct 2 18:48:33.236984 systemd[1]: Listening on iscsid.socket. Oct 2 18:48:33.237002 systemd[1]: Listening on iscsiuio.socket. Oct 2 18:48:33.237019 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 18:48:33.237038 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 18:48:33.237059 systemd[1]: Listening on systemd-journald.socket. Oct 2 18:48:33.237077 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:48:33.237095 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:48:33.237112 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:48:33.237130 systemd[1]: Reached target sockets.target. Oct 2 18:48:33.237148 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:48:33.237165 systemd[1]: Finished network-cleanup.service. Oct 2 18:48:33.237183 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 18:48:33.237200 systemd[1]: Starting systemd-journald.service... Oct 2 18:48:33.237222 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:48:33.237240 systemd[1]: Starting systemd-resolved.service... Oct 2 18:48:33.237258 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 18:48:33.237275 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:48:33.237293 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 18:48:33.237310 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 18:48:33.237328 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 18:48:33.237347 kernel: audit: type=1130 audit(1696272513.153:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.237368 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 18:48:33.237387 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 18:48:33.237404 kernel: audit: type=1130 audit(1696272513.192:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.237422 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 18:48:33.237438 kernel: Bridge firewalling registered Oct 2 18:48:33.237454 kernel: SCSI subsystem initialized Oct 2 18:48:33.237475 systemd-journald[308]: Journal started Oct 2 18:48:33.237563 systemd-journald[308]: Runtime Journal (/run/log/journal/ec2bb614c953c33e9b9098ddceb2a7e0) is 8.0M, max 75.4M, 67.4M free. Oct 2 18:48:33.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.146909 systemd-modules-load[309]: Inserted module 'overlay' Oct 2 18:48:33.210876 systemd-modules-load[309]: Inserted module 'br_netfilter' Oct 2 18:48:33.259097 systemd[1]: Started systemd-journald.service. Oct 2 18:48:33.259156 kernel: audit: type=1130 audit(1696272513.257:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.266238 systemd-resolved[310]: Positive Trust Anchors: Oct 2 18:48:33.266265 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:48:33.282032 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 18:48:33.282070 kernel: device-mapper: uevent: version 1.0.3 Oct 2 18:48:33.266320 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:48:33.298026 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 18:48:33.299728 systemd-modules-load[309]: Inserted module 'dm_multipath' Oct 2 18:48:33.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.303915 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:48:33.315190 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:48:33.328830 kernel: audit: type=1130 audit(1696272513.304:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.327593 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 18:48:33.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.344199 systemd[1]: Starting dracut-cmdline.service... Oct 2 18:48:33.357162 kernel: audit: type=1130 audit(1696272513.332:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.363226 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:48:33.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.379804 kernel: audit: type=1130 audit(1696272513.365:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.387398 dracut-cmdline[332]: dracut-dracut-053 Oct 2 18:48:33.403512 dracut-cmdline[332]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:48:33.643815 kernel: Loading iSCSI transport class v2.0-870. Oct 2 18:48:33.658339 kernel: iscsi: registered transport (tcp) Oct 2 18:48:33.684019 kernel: iscsi: registered transport (qla4xxx) Oct 2 18:48:33.684099 kernel: QLogic iSCSI HBA Driver Oct 2 18:48:33.848594 systemd-resolved[310]: Defaulting to hostname 'linux'. Oct 2 18:48:33.850979 kernel: random: crng init done Oct 2 18:48:33.852610 systemd[1]: Started systemd-resolved.service. Oct 2 18:48:33.865526 kernel: audit: type=1130 audit(1696272513.853:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.854535 systemd[1]: Reached target nss-lookup.target. Oct 2 18:48:33.921211 systemd[1]: Finished dracut-cmdline.service. Oct 2 18:48:33.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:33.928359 systemd[1]: Starting dracut-pre-udev.service... Oct 2 18:48:33.935198 kernel: audit: type=1130 audit(1696272513.923:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:34.022817 kernel: raid6: neonx8 gen() 6366 MB/s Oct 2 18:48:34.040805 kernel: raid6: neonx8 xor() 4755 MB/s Oct 2 18:48:34.058813 kernel: raid6: neonx4 gen() 6486 MB/s Oct 2 18:48:34.076808 kernel: raid6: neonx4 xor() 4940 MB/s Oct 2 18:48:34.094805 kernel: raid6: neonx2 gen() 5752 MB/s Oct 2 18:48:34.112803 kernel: raid6: neonx2 xor() 4536 MB/s Oct 2 18:48:34.130803 kernel: raid6: neonx1 gen() 4450 MB/s Oct 2 18:48:34.148810 kernel: raid6: neonx1 xor() 3624 MB/s Oct 2 18:48:34.166804 kernel: raid6: int64x8 gen() 3399 MB/s Oct 2 18:48:34.184803 kernel: raid6: int64x8 xor() 2091 MB/s Oct 2 18:48:34.202804 kernel: raid6: int64x4 gen() 3774 MB/s Oct 2 18:48:34.220815 kernel: raid6: int64x4 xor() 2187 MB/s Oct 2 18:48:34.238805 kernel: raid6: int64x2 gen() 3590 MB/s Oct 2 18:48:34.256807 kernel: raid6: int64x2 xor() 1952 MB/s Oct 2 18:48:34.274811 kernel: raid6: int64x1 gen() 2767 MB/s Oct 2 18:48:34.294351 kernel: raid6: int64x1 xor() 1452 MB/s Oct 2 18:48:34.294395 kernel: raid6: using algorithm neonx4 gen() 6486 MB/s Oct 2 18:48:34.294419 kernel: raid6: .... xor() 4940 MB/s, rmw enabled Oct 2 18:48:34.296176 kernel: raid6: using neon recovery algorithm Oct 2 18:48:34.314820 kernel: xor: measuring software checksum speed Oct 2 18:48:34.317807 kernel: 8regs : 9365 MB/sec Oct 2 18:48:34.320804 kernel: 32regs : 11075 MB/sec Oct 2 18:48:34.324355 kernel: arm64_neon : 9567 MB/sec Oct 2 18:48:34.324386 kernel: xor: using function: 32regs (11075 MB/sec) Oct 2 18:48:34.414826 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 18:48:34.453941 systemd[1]: Finished dracut-pre-udev.service. Oct 2 18:48:34.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:34.463000 audit: BPF prog-id=7 op=LOAD Oct 2 18:48:34.463000 audit: BPF prog-id=8 op=LOAD Oct 2 18:48:34.466062 kernel: audit: type=1130 audit(1696272514.454:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:34.465803 systemd[1]: Starting systemd-udevd.service... Oct 2 18:48:34.503437 systemd-udevd[508]: Using default interface naming scheme 'v252'. Oct 2 18:48:34.514663 systemd[1]: Started systemd-udevd.service. Oct 2 18:48:34.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:34.523799 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 18:48:34.581580 dracut-pre-trigger[520]: rd.md=0: removing MD RAID activation Oct 2 18:48:34.692579 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 18:48:34.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:34.696763 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:48:34.807179 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:48:34.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:34.941824 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 18:48:34.941882 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 18:48:34.956652 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 18:48:34.956984 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 18:48:34.965796 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:5a:d4:16:4e:dd Oct 2 18:48:34.968945 (udev-worker)[569]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:48:34.972265 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 18:48:34.974810 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 18:48:34.983834 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 18:48:34.990224 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 18:48:34.990286 kernel: GPT:9289727 != 16777215 Oct 2 18:48:34.990310 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 18:48:34.992426 kernel: GPT:9289727 != 16777215 Oct 2 18:48:34.997464 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 18:48:34.997517 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:48:35.074817 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (568) Oct 2 18:48:35.141750 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 18:48:35.257041 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:48:35.301053 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 18:48:35.313243 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 18:48:35.318288 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 18:48:35.323449 systemd[1]: Starting disk-uuid.service... Oct 2 18:48:35.344600 disk-uuid[669]: Primary Header is updated. Oct 2 18:48:35.344600 disk-uuid[669]: Secondary Entries is updated. Oct 2 18:48:35.344600 disk-uuid[669]: Secondary Header is updated. Oct 2 18:48:35.353850 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:48:36.372807 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:48:36.372939 disk-uuid[670]: The operation has completed successfully. Oct 2 18:48:36.654473 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 18:48:36.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:36.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:36.654690 systemd[1]: Finished disk-uuid.service. Oct 2 18:48:36.670817 systemd[1]: Starting verity-setup.service... Oct 2 18:48:36.723818 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 18:48:36.809565 systemd[1]: Found device dev-mapper-usr.device. Oct 2 18:48:36.815487 systemd[1]: Mounting sysusr-usr.mount... Oct 2 18:48:36.829280 systemd[1]: Finished verity-setup.service. Oct 2 18:48:36.835794 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 18:48:36.835849 kernel: audit: type=1130 audit(1696272516.829:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:36.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:36.912818 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 18:48:36.914540 systemd[1]: Mounted sysusr-usr.mount. Oct 2 18:48:36.918112 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 18:48:36.924612 systemd[1]: Starting ignition-setup.service... Oct 2 18:48:36.929366 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 18:48:36.971526 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:48:36.971605 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:48:36.971630 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:48:36.989828 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:48:37.022416 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 18:48:37.048282 systemd[1]: Finished ignition-setup.service. Oct 2 18:48:37.052944 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 18:48:37.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.084815 kernel: audit: type=1130 audit(1696272517.048:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.293963 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 18:48:37.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.303000 audit: BPF prog-id=9 op=LOAD Oct 2 18:48:37.305817 kernel: audit: type=1130 audit(1696272517.296:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.306404 systemd[1]: Starting systemd-networkd.service... Oct 2 18:48:37.312357 kernel: audit: type=1334 audit(1696272517.303:21): prog-id=9 op=LOAD Oct 2 18:48:37.363812 systemd-networkd[1183]: lo: Link UP Oct 2 18:48:37.363835 systemd-networkd[1183]: lo: Gained carrier Oct 2 18:48:37.367422 systemd-networkd[1183]: Enumeration completed Oct 2 18:48:37.385012 kernel: audit: type=1130 audit(1696272517.368:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.367950 systemd-networkd[1183]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:48:37.368122 systemd[1]: Started systemd-networkd.service. Oct 2 18:48:37.370065 systemd[1]: Reached target network.target. Oct 2 18:48:37.380834 systemd-networkd[1183]: eth0: Link UP Oct 2 18:48:37.380842 systemd-networkd[1183]: eth0: Gained carrier Oct 2 18:48:37.388158 systemd[1]: Starting iscsiuio.service... Oct 2 18:48:37.409459 systemd[1]: Started iscsiuio.service. Oct 2 18:48:37.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.420305 systemd-networkd[1183]: eth0: DHCPv4 address 172.31.25.160/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 18:48:37.425330 systemd[1]: Starting iscsid.service... Oct 2 18:48:37.428017 kernel: audit: type=1130 audit(1696272517.410:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.439181 iscsid[1188]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:48:37.439181 iscsid[1188]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 18:48:37.439181 iscsid[1188]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 18:48:37.439181 iscsid[1188]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 18:48:37.439181 iscsid[1188]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:48:37.463722 iscsid[1188]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 18:48:37.476045 systemd[1]: Started iscsid.service. Oct 2 18:48:37.489355 kernel: audit: type=1130 audit(1696272517.476:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.479594 systemd[1]: Starting dracut-initqueue.service... Oct 2 18:48:37.527912 systemd[1]: Finished dracut-initqueue.service. Oct 2 18:48:37.538865 kernel: audit: type=1130 audit(1696272517.528:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.530288 systemd[1]: Reached target remote-fs-pre.target. Oct 2 18:48:37.540687 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:48:37.544133 systemd[1]: Reached target remote-fs.target. Oct 2 18:48:37.550358 systemd[1]: Starting dracut-pre-mount.service... Oct 2 18:48:37.582145 systemd[1]: Finished dracut-pre-mount.service. Oct 2 18:48:37.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.593840 kernel: audit: type=1130 audit(1696272517.582:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.746102 ignition[1097]: Ignition 2.14.0 Oct 2 18:48:37.746132 ignition[1097]: Stage: fetch-offline Oct 2 18:48:37.746529 ignition[1097]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:48:37.746678 ignition[1097]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:48:37.767436 ignition[1097]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:48:37.770260 ignition[1097]: Ignition finished successfully Oct 2 18:48:37.773597 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 18:48:37.786765 kernel: audit: type=1130 audit(1696272517.774:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.777214 systemd[1]: Starting ignition-fetch.service... Oct 2 18:48:37.809696 ignition[1207]: Ignition 2.14.0 Oct 2 18:48:37.809726 ignition[1207]: Stage: fetch Oct 2 18:48:37.810134 ignition[1207]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:48:37.810196 ignition[1207]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:48:37.831538 ignition[1207]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:48:37.833974 ignition[1207]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:48:37.850897 ignition[1207]: INFO : PUT result: OK Oct 2 18:48:37.855705 ignition[1207]: DEBUG : parsed url from cmdline: "" Oct 2 18:48:37.855705 ignition[1207]: INFO : no config URL provided Oct 2 18:48:37.859671 ignition[1207]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 18:48:37.859671 ignition[1207]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 18:48:37.859671 ignition[1207]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:48:37.866937 ignition[1207]: INFO : PUT result: OK Oct 2 18:48:37.866937 ignition[1207]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 18:48:37.873843 ignition[1207]: INFO : GET result: OK Oct 2 18:48:37.873843 ignition[1207]: DEBUG : parsing config with SHA512: f82cdecec5d151b9b0208668d453e71ec16b2326c1d01a07710ea99efedc3c9534d6731af68b08efb44e9a9a37931dd5265b1e8437e985c7a20d982997c303be Oct 2 18:48:37.918741 unknown[1207]: fetched base config from "system" Oct 2 18:48:37.919015 unknown[1207]: fetched base config from "system" Oct 2 18:48:37.920273 ignition[1207]: fetch: fetch complete Oct 2 18:48:37.919031 unknown[1207]: fetched user config from "aws" Oct 2 18:48:37.920287 ignition[1207]: fetch: fetch passed Oct 2 18:48:37.920375 ignition[1207]: Ignition finished successfully Oct 2 18:48:37.931110 systemd[1]: Finished ignition-fetch.service. Oct 2 18:48:37.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:37.934361 systemd[1]: Starting ignition-kargs.service... Oct 2 18:48:37.967797 ignition[1213]: Ignition 2.14.0 Oct 2 18:48:37.967828 ignition[1213]: Stage: kargs Oct 2 18:48:37.968191 ignition[1213]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:48:37.968251 ignition[1213]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:48:37.983666 ignition[1213]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:48:37.986057 ignition[1213]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:48:37.989400 ignition[1213]: INFO : PUT result: OK Oct 2 18:48:37.994660 ignition[1213]: kargs: kargs passed Oct 2 18:48:37.994765 ignition[1213]: Ignition finished successfully Oct 2 18:48:37.999160 systemd[1]: Finished ignition-kargs.service. Oct 2 18:48:38.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:38.004016 systemd[1]: Starting ignition-disks.service... Oct 2 18:48:38.033705 ignition[1219]: Ignition 2.14.0 Oct 2 18:48:38.033735 ignition[1219]: Stage: disks Oct 2 18:48:38.034137 ignition[1219]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:48:38.034196 ignition[1219]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:48:38.049507 ignition[1219]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:48:38.052018 ignition[1219]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:48:38.054608 ignition[1219]: INFO : PUT result: OK Oct 2 18:48:38.059837 ignition[1219]: disks: disks passed Oct 2 18:48:38.059982 ignition[1219]: Ignition finished successfully Oct 2 18:48:38.064352 systemd[1]: Finished ignition-disks.service. Oct 2 18:48:38.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:38.067744 systemd[1]: Reached target initrd-root-device.target. Oct 2 18:48:38.071324 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:48:38.074576 systemd[1]: Reached target local-fs.target. Oct 2 18:48:38.077620 systemd[1]: Reached target sysinit.target. Oct 2 18:48:38.084411 systemd[1]: Reached target basic.target. Oct 2 18:48:38.089702 systemd[1]: Starting systemd-fsck-root.service... Oct 2 18:48:38.150029 systemd-fsck[1227]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 18:48:38.160194 systemd[1]: Finished systemd-fsck-root.service. Oct 2 18:48:38.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:38.164710 systemd[1]: Mounting sysroot.mount... Oct 2 18:48:38.195807 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 18:48:38.198167 systemd[1]: Mounted sysroot.mount. Oct 2 18:48:38.201346 systemd[1]: Reached target initrd-root-fs.target. Oct 2 18:48:38.215520 systemd[1]: Mounting sysroot-usr.mount... Oct 2 18:48:38.219670 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 18:48:38.222749 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 18:48:38.225364 systemd[1]: Reached target ignition-diskful.target. Oct 2 18:48:38.243174 systemd[1]: Mounted sysroot-usr.mount. Oct 2 18:48:38.258028 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 18:48:38.262918 systemd[1]: Starting initrd-setup-root.service... Oct 2 18:48:38.286177 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1244) Oct 2 18:48:38.294045 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:48:38.294108 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:48:38.296284 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:48:38.296332 initrd-setup-root[1249]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 18:48:38.306802 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:48:38.312053 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 18:48:38.331952 initrd-setup-root[1275]: cut: /sysroot/etc/group: No such file or directory Oct 2 18:48:38.351091 initrd-setup-root[1283]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 18:48:38.370323 initrd-setup-root[1291]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 18:48:38.611109 systemd[1]: Finished initrd-setup-root.service. Oct 2 18:48:38.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:38.615842 systemd[1]: Starting ignition-mount.service... Oct 2 18:48:38.623252 systemd[1]: Starting sysroot-boot.service... Oct 2 18:48:38.653707 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 18:48:38.653940 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 18:48:38.689008 systemd[1]: Finished sysroot-boot.service. Oct 2 18:48:38.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:38.706513 ignition[1311]: INFO : Ignition 2.14.0 Oct 2 18:48:38.706513 ignition[1311]: INFO : Stage: mount Oct 2 18:48:38.710143 ignition[1311]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:48:38.710143 ignition[1311]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:48:38.727545 ignition[1311]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:48:38.730109 ignition[1311]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:48:38.733725 ignition[1311]: INFO : PUT result: OK Oct 2 18:48:38.740700 ignition[1311]: INFO : mount: mount passed Oct 2 18:48:38.742504 ignition[1311]: INFO : Ignition finished successfully Oct 2 18:48:38.745668 systemd[1]: Finished ignition-mount.service. Oct 2 18:48:38.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:38.750450 systemd[1]: Starting ignition-files.service... Oct 2 18:48:38.774764 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 18:48:38.799829 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1319) Oct 2 18:48:38.805795 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:48:38.805866 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:48:38.808131 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:48:38.815848 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:48:38.820799 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 18:48:38.856435 ignition[1338]: INFO : Ignition 2.14.0 Oct 2 18:48:38.856435 ignition[1338]: INFO : Stage: files Oct 2 18:48:38.859999 ignition[1338]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:48:38.859999 ignition[1338]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:48:38.873050 systemd-networkd[1183]: eth0: Gained IPv6LL Oct 2 18:48:38.877866 ignition[1338]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:48:38.880810 ignition[1338]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:48:38.885262 ignition[1338]: INFO : PUT result: OK Oct 2 18:48:38.891014 ignition[1338]: DEBUG : files: compiled without relabeling support, skipping Oct 2 18:48:38.895266 ignition[1338]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 18:48:38.898151 ignition[1338]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 18:48:38.947995 ignition[1338]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 18:48:38.951131 ignition[1338]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 18:48:38.955289 unknown[1338]: wrote ssh authorized keys file for user: core Oct 2 18:48:38.957693 ignition[1338]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 18:48:38.961614 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 18:48:38.965793 ignition[1338]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 18:48:39.191982 ignition[1338]: INFO : GET result: OK Oct 2 18:48:39.823977 ignition[1338]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 18:48:39.829099 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 18:48:39.829099 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 18:48:39.829099 ignition[1338]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 18:48:39.922079 ignition[1338]: INFO : GET result: OK Oct 2 18:48:40.183256 ignition[1338]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 18:48:40.191687 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 18:48:40.191687 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:48:40.191687 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:48:40.191687 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 18:48:40.191687 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:48:40.215075 ignition[1338]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4183444323" Oct 2 18:48:40.215075 ignition[1338]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4183444323": device or resource busy Oct 2 18:48:40.215075 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4183444323", trying btrfs: device or resource busy Oct 2 18:48:40.215075 ignition[1338]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4183444323" Oct 2 18:48:40.231913 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1342) Oct 2 18:48:40.231955 ignition[1338]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4183444323" Oct 2 18:48:40.231955 ignition[1338]: INFO : op(3): [started] unmounting "/mnt/oem4183444323" Oct 2 18:48:40.231955 ignition[1338]: INFO : op(3): [finished] unmounting "/mnt/oem4183444323" Oct 2 18:48:40.231955 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 18:48:40.231955 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:48:40.231955 ignition[1338]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Oct 2 18:48:40.257821 systemd[1]: mnt-oem4183444323.mount: Deactivated successfully. Oct 2 18:48:40.326653 ignition[1338]: INFO : GET result: OK Oct 2 18:48:41.290954 ignition[1338]: DEBUG : file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Oct 2 18:48:41.296545 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:48:41.296545 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:48:41.296545 ignition[1338]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Oct 2 18:48:41.347136 ignition[1338]: INFO : GET result: OK Oct 2 18:48:42.616365 ignition[1338]: DEBUG : file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Oct 2 18:48:42.621584 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:48:42.621584 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 18:48:42.621584 ignition[1338]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Oct 2 18:48:42.764558 ignition[1338]: INFO : GET result: OK Oct 2 18:48:43.489368 ignition[1338]: DEBUG : file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Oct 2 18:48:43.494280 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 18:48:43.494280 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 18:48:43.494280 ignition[1338]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 18:48:43.590548 ignition[1338]: INFO : GET result: OK Oct 2 18:48:43.752634 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 18:48:43.756743 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 18:48:43.756743 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 18:48:43.756743 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 18:48:43.767459 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 18:48:43.767459 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 18:48:43.767459 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:48:43.786933 ignition[1338]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1046704146" Oct 2 18:48:43.789941 ignition[1338]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1046704146": device or resource busy Oct 2 18:48:43.789941 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1046704146", trying btrfs: device or resource busy Oct 2 18:48:43.789941 ignition[1338]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1046704146" Oct 2 18:48:43.799924 ignition[1338]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1046704146" Oct 2 18:48:43.805821 ignition[1338]: INFO : op(6): [started] unmounting "/mnt/oem1046704146" Oct 2 18:48:43.805821 ignition[1338]: INFO : op(6): [finished] unmounting "/mnt/oem1046704146" Oct 2 18:48:43.805821 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 18:48:43.805821 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 18:48:43.805821 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:48:43.815411 systemd[1]: mnt-oem1046704146.mount: Deactivated successfully. Oct 2 18:48:43.842074 ignition[1338]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3943149114" Oct 2 18:48:43.845037 ignition[1338]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3943149114": device or resource busy Oct 2 18:48:43.845037 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3943149114", trying btrfs: device or resource busy Oct 2 18:48:43.845037 ignition[1338]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3943149114" Oct 2 18:48:43.855180 ignition[1338]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3943149114" Oct 2 18:48:43.855180 ignition[1338]: INFO : op(9): [started] unmounting "/mnt/oem3943149114" Oct 2 18:48:43.860392 ignition[1338]: INFO : op(9): [finished] unmounting "/mnt/oem3943149114" Oct 2 18:48:43.860392 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 18:48:43.860392 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 18:48:43.860392 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:48:43.881638 systemd[1]: mnt-oem3943149114.mount: Deactivated successfully. Oct 2 18:48:43.898821 ignition[1338]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2031515321" Oct 2 18:48:43.901876 ignition[1338]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2031515321": device or resource busy Oct 2 18:48:43.901876 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2031515321", trying btrfs: device or resource busy Oct 2 18:48:43.901876 ignition[1338]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2031515321" Oct 2 18:48:43.911738 ignition[1338]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2031515321" Oct 2 18:48:43.911738 ignition[1338]: INFO : op(c): [started] unmounting "/mnt/oem2031515321" Oct 2 18:48:43.918654 ignition[1338]: INFO : op(c): [finished] unmounting "/mnt/oem2031515321" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(14): [started] processing unit "prepare-critools.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(14): op(15): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(14): op(15): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(14): [finished] processing unit "prepare-critools.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 18:48:43.918654 ignition[1338]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-critools.service" Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:48:43.979667 ignition[1338]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:48:44.015166 ignition[1338]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:48:44.015166 ignition[1338]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:48:44.015166 ignition[1338]: INFO : files: files passed Oct 2 18:48:44.015166 ignition[1338]: INFO : Ignition finished successfully Oct 2 18:48:44.026294 systemd[1]: Finished ignition-files.service. Oct 2 18:48:44.039315 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 18:48:44.039380 kernel: audit: type=1130 audit(1696272524.028:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.041273 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 18:48:44.043345 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 18:48:44.046944 systemd[1]: Starting ignition-quench.service... Oct 2 18:48:44.076741 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 18:48:44.124995 kernel: audit: type=1130 audit(1696272524.077:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.125038 kernel: audit: type=1131 audit(1696272524.077:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.077002 systemd[1]: Finished ignition-quench.service. Oct 2 18:48:44.131714 initrd-setup-root-after-ignition[1363]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 18:48:44.137532 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 18:48:44.166287 kernel: audit: type=1130 audit(1696272524.138:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.140391 systemd[1]: Reached target ignition-complete.target. Oct 2 18:48:44.163506 systemd[1]: Starting initrd-parse-etc.service... Oct 2 18:48:44.220031 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 18:48:44.220457 systemd[1]: Finished initrd-parse-etc.service. Oct 2 18:48:44.240633 kernel: audit: type=1130 audit(1696272524.222:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.242321 kernel: audit: type=1131 audit(1696272524.231:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.232617 systemd[1]: Reached target initrd-fs.target. Oct 2 18:48:44.242398 systemd[1]: Reached target initrd.target. Oct 2 18:48:44.244598 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 18:48:44.246420 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 18:48:44.293874 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 18:48:44.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.305413 systemd[1]: Starting initrd-cleanup.service... Oct 2 18:48:44.311819 kernel: audit: type=1130 audit(1696272524.292:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.334865 systemd[1]: Stopped target nss-lookup.target. Oct 2 18:48:44.338429 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 18:48:44.342071 systemd[1]: Stopped target timers.target. Oct 2 18:48:44.345264 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 18:48:44.347507 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 18:48:44.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.352042 systemd[1]: Stopped target initrd.target. Oct 2 18:48:44.365684 kernel: audit: type=1131 audit(1696272524.349:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.359931 systemd[1]: Stopped target basic.target. Oct 2 18:48:44.364627 systemd[1]: Stopped target ignition-complete.target. Oct 2 18:48:44.375031 systemd[1]: Stopped target ignition-diskful.target. Oct 2 18:48:44.379613 systemd[1]: Stopped target initrd-root-device.target. Oct 2 18:48:44.383511 systemd[1]: Stopped target remote-fs.target. Oct 2 18:48:44.386914 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 18:48:44.390337 systemd[1]: Stopped target sysinit.target. Oct 2 18:48:44.393527 systemd[1]: Stopped target local-fs.target. Oct 2 18:48:44.396717 systemd[1]: Stopped target local-fs-pre.target. Oct 2 18:48:44.400910 systemd[1]: Stopped target swap.target. Oct 2 18:48:44.404111 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 18:48:44.404392 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 18:48:44.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.411031 systemd[1]: Stopped target cryptsetup.target. Oct 2 18:48:44.433633 kernel: audit: type=1131 audit(1696272524.408:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.435308 kernel: audit: type=1131 audit(1696272524.419:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.419359 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 18:48:44.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.419603 systemd[1]: Stopped dracut-initqueue.service. Oct 2 18:48:44.421876 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 18:48:44.422213 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 18:48:44.432991 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 18:48:44.433357 systemd[1]: Stopped ignition-files.service. Oct 2 18:48:44.450717 systemd[1]: Stopping ignition-mount.service... Oct 2 18:48:44.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.475751 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 18:48:44.476578 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 18:48:44.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.481242 systemd[1]: Stopping sysroot-boot.service... Oct 2 18:48:44.495635 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 18:48:44.497945 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 18:48:44.501518 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 18:48:44.501832 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 18:48:44.513384 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 18:48:44.513568 systemd[1]: Finished initrd-cleanup.service. Oct 2 18:48:44.546159 ignition[1376]: INFO : Ignition 2.14.0 Oct 2 18:48:44.546159 ignition[1376]: INFO : Stage: umount Oct 2 18:48:44.549686 ignition[1376]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:48:44.549686 ignition[1376]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:48:44.577653 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 18:48:44.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.577918 systemd[1]: Stopped sysroot-boot.service. Oct 2 18:48:44.588460 ignition[1376]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:48:44.588460 ignition[1376]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:48:44.595050 ignition[1376]: INFO : PUT result: OK Oct 2 18:48:44.600023 ignition[1376]: INFO : umount: umount passed Oct 2 18:48:44.602695 ignition[1376]: INFO : Ignition finished successfully Oct 2 18:48:44.605928 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 18:48:44.606886 systemd[1]: Stopped ignition-mount.service. Oct 2 18:48:44.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.610472 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 18:48:44.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.610580 systemd[1]: Stopped ignition-disks.service. Oct 2 18:48:44.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.613210 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 18:48:44.613478 systemd[1]: Stopped ignition-kargs.service. Oct 2 18:48:44.616958 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 18:48:44.617067 systemd[1]: Stopped ignition-fetch.service. Oct 2 18:48:44.618937 systemd[1]: Stopped target network.target. Oct 2 18:48:44.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.622015 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 18:48:44.622134 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 18:48:44.624151 systemd[1]: Stopped target paths.target. Oct 2 18:48:44.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.625767 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 18:48:44.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.629879 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 18:48:44.633311 systemd[1]: Stopped target slices.target. Oct 2 18:48:44.634942 systemd[1]: Stopped target sockets.target. Oct 2 18:48:44.636701 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 18:48:44.636766 systemd[1]: Closed iscsid.socket. Oct 2 18:48:44.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.638361 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 18:48:44.638434 systemd[1]: Closed iscsiuio.socket. Oct 2 18:48:44.640026 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 18:48:44.640135 systemd[1]: Stopped ignition-setup.service. Oct 2 18:48:44.643531 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 18:48:44.643640 systemd[1]: Stopped initrd-setup-root.service. Oct 2 18:48:44.646954 systemd[1]: Stopping systemd-networkd.service... Oct 2 18:48:44.649498 systemd[1]: Stopping systemd-resolved.service... Oct 2 18:48:44.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.651887 systemd-networkd[1183]: eth0: DHCPv6 lease lost Oct 2 18:48:44.705000 audit: BPF prog-id=9 op=UNLOAD Oct 2 18:48:44.655519 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 18:48:44.656346 systemd[1]: Stopped systemd-networkd.service. Oct 2 18:48:44.658693 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 18:48:44.658792 systemd[1]: Closed systemd-networkd.socket. Oct 2 18:48:44.662083 systemd[1]: Stopping network-cleanup.service... Oct 2 18:48:44.663734 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 18:48:44.663889 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 18:48:44.720000 audit: BPF prog-id=6 op=UNLOAD Oct 2 18:48:44.666012 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 18:48:44.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.666129 systemd[1]: Stopped systemd-sysctl.service. Oct 2 18:48:44.669700 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 18:48:44.669833 systemd[1]: Stopped systemd-modules-load.service. Oct 2 18:48:44.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.683730 systemd[1]: Stopping systemd-udevd.service... Oct 2 18:48:44.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.686053 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 18:48:44.686429 systemd[1]: Stopped systemd-resolved.service. Oct 2 18:48:44.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.708601 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 18:48:44.709002 systemd[1]: Stopped systemd-udevd.service. Oct 2 18:48:44.727199 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 18:48:44.727292 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 18:48:44.730058 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 18:48:44.730154 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 18:48:44.739185 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 18:48:44.739294 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 18:48:44.741173 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 18:48:44.741348 systemd[1]: Stopped dracut-cmdline.service. Oct 2 18:48:44.748575 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 18:48:44.748687 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 18:48:44.774576 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 18:48:44.797761 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 18:48:44.797944 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 18:48:44.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.806322 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 18:48:44.806511 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 18:48:44.812217 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 18:48:44.814470 systemd[1]: Stopped network-cleanup.service. Oct 2 18:48:44.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.818355 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 18:48:44.820831 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 18:48:44.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:44.824968 systemd[1]: Reached target initrd-switch-root.target. Oct 2 18:48:44.830039 systemd[1]: Starting initrd-switch-root.service... Oct 2 18:48:44.855299 systemd[1]: Switching root. Oct 2 18:48:44.881327 systemd-journald[308]: Journal stopped Oct 2 18:48:50.590369 systemd-journald[308]: Received SIGTERM from PID 1 (systemd). Oct 2 18:48:50.602646 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 18:48:50.602764 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 18:48:50.602850 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 18:48:50.602949 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 18:48:50.602985 kernel: SELinux: policy capability open_perms=1 Oct 2 18:48:50.603016 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 18:48:50.603045 kernel: SELinux: policy capability always_check_network=0 Oct 2 18:48:50.603077 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 18:48:50.603110 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 18:48:50.603143 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 18:48:50.603178 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 18:48:50.603213 systemd[1]: Successfully loaded SELinux policy in 92.498ms. Oct 2 18:48:50.603433 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.125ms. Oct 2 18:48:50.603473 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:48:50.603507 systemd[1]: Detected virtualization amazon. Oct 2 18:48:50.603541 systemd[1]: Detected architecture arm64. Oct 2 18:48:50.603574 systemd[1]: Detected first boot. Oct 2 18:48:50.603613 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:48:50.603645 systemd[1]: Populated /etc with preset unit settings. Oct 2 18:48:50.603677 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:48:50.603713 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:48:50.603747 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:48:50.603802 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 18:48:50.603837 kernel: audit: type=1334 audit(1696272530.082:82): prog-id=12 op=LOAD Oct 2 18:48:50.603867 kernel: audit: type=1334 audit(1696272530.085:83): prog-id=3 op=UNLOAD Oct 2 18:48:50.603901 kernel: audit: type=1334 audit(1696272530.087:84): prog-id=13 op=LOAD Oct 2 18:48:50.603929 kernel: audit: type=1334 audit(1696272530.090:85): prog-id=14 op=LOAD Oct 2 18:48:50.603960 kernel: audit: type=1334 audit(1696272530.090:86): prog-id=4 op=UNLOAD Oct 2 18:48:50.603988 kernel: audit: type=1334 audit(1696272530.090:87): prog-id=5 op=UNLOAD Oct 2 18:48:50.604021 kernel: audit: type=1334 audit(1696272530.092:88): prog-id=15 op=LOAD Oct 2 18:48:50.604051 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 18:48:50.604083 kernel: audit: type=1334 audit(1696272530.092:89): prog-id=12 op=UNLOAD Oct 2 18:48:50.604116 systemd[1]: Stopped iscsiuio.service. Oct 2 18:48:50.604152 kernel: audit: type=1334 audit(1696272530.095:90): prog-id=16 op=LOAD Oct 2 18:48:50.604184 kernel: audit: type=1334 audit(1696272530.097:91): prog-id=17 op=LOAD Oct 2 18:48:50.604213 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 18:48:50.604311 systemd[1]: Stopped iscsid.service. Oct 2 18:48:50.604346 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 18:48:50.604381 systemd[1]: Stopped initrd-switch-root.service. Oct 2 18:48:50.604411 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 18:48:50.604441 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 18:48:50.604477 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 18:48:50.604510 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 18:48:50.604543 systemd[1]: Created slice system-getty.slice. Oct 2 18:48:50.604573 systemd[1]: Created slice system-modprobe.slice. Oct 2 18:48:50.604608 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 18:48:50.604638 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 18:48:50.604672 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 18:48:50.604704 systemd[1]: Created slice user.slice. Oct 2 18:48:50.604735 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:48:50.604783 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 18:48:50.604821 systemd[1]: Set up automount boot.automount. Oct 2 18:48:50.604854 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 18:48:50.604884 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 18:48:50.604921 systemd[1]: Stopped target initrd-fs.target. Oct 2 18:48:50.604952 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 18:48:50.604982 systemd[1]: Reached target integritysetup.target. Oct 2 18:48:50.605012 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:48:50.605045 systemd[1]: Reached target remote-fs.target. Oct 2 18:48:50.605079 systemd[1]: Reached target slices.target. Oct 2 18:48:50.605109 systemd[1]: Reached target swap.target. Oct 2 18:48:50.605139 systemd[1]: Reached target torcx.target. Oct 2 18:48:50.605171 systemd[1]: Reached target veritysetup.target. Oct 2 18:48:50.605201 systemd[1]: Listening on systemd-coredump.socket. Oct 2 18:48:50.605232 systemd[1]: Listening on systemd-initctl.socket. Oct 2 18:48:50.605262 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:48:50.605295 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:48:50.605325 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:48:50.605354 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 18:48:50.605390 systemd[1]: Mounting dev-hugepages.mount... Oct 2 18:48:50.605421 systemd[1]: Mounting dev-mqueue.mount... Oct 2 18:48:50.605454 systemd[1]: Mounting media.mount... Oct 2 18:48:50.605486 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 18:48:50.605517 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 18:48:50.605547 systemd[1]: Mounting tmp.mount... Oct 2 18:48:50.605583 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 18:48:50.605613 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 18:48:50.605645 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:48:50.605678 systemd[1]: Starting modprobe@configfs.service... Oct 2 18:48:50.605708 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 18:48:50.605737 systemd[1]: Starting modprobe@drm.service... Oct 2 18:48:50.605767 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 18:48:50.613244 systemd[1]: Starting modprobe@fuse.service... Oct 2 18:48:50.613372 systemd[1]: Starting modprobe@loop.service... Oct 2 18:48:50.613407 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 18:48:50.613439 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 18:48:50.613468 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 18:48:50.613510 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 18:48:50.613540 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 18:48:50.613569 systemd[1]: Stopped systemd-journald.service. Oct 2 18:48:50.613599 systemd[1]: Starting systemd-journald.service... Oct 2 18:48:50.613629 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:48:50.613661 systemd[1]: Starting systemd-network-generator.service... Oct 2 18:48:50.613691 systemd[1]: Starting systemd-remount-fs.service... Oct 2 18:48:50.613721 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:48:50.613752 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 18:48:50.613808 systemd[1]: Stopped verity-setup.service. Oct 2 18:48:50.613859 systemd[1]: Mounted dev-hugepages.mount. Oct 2 18:48:50.613891 systemd[1]: Mounted dev-mqueue.mount. Oct 2 18:48:50.613921 systemd[1]: Mounted media.mount. Oct 2 18:48:50.613950 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 18:48:50.613981 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 18:48:50.614012 systemd[1]: Mounted tmp.mount. Oct 2 18:48:50.614044 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:48:50.614096 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 18:48:50.614133 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 18:48:50.614163 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 18:48:50.614194 systemd[1]: Finished modprobe@drm.service. Oct 2 18:48:50.614228 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 18:48:50.614259 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 18:48:50.614293 systemd[1]: Finished systemd-network-generator.service. Oct 2 18:48:50.614324 systemd[1]: Finished systemd-remount-fs.service. Oct 2 18:48:50.614354 systemd[1]: Reached target network-pre.target. Oct 2 18:48:50.614388 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 18:48:50.614419 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 18:48:50.614452 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 18:48:50.614483 systemd[1]: Starting systemd-random-seed.service... Oct 2 18:48:50.614513 kernel: loop: module loaded Oct 2 18:48:50.614551 systemd-journald[1483]: Journal started Oct 2 18:48:50.614649 systemd-journald[1483]: Runtime Journal (/run/log/journal/ec2bb614c953c33e9b9098ddceb2a7e0) is 8.0M, max 75.4M, 67.4M free. Oct 2 18:48:45.673000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 18:48:50.620915 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 18:48:50.620989 kernel: fuse: init (API version 7.34) Oct 2 18:48:50.621040 systemd[1]: Finished modprobe@configfs.service. Oct 2 18:48:45.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:48:45.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:48:45.846000 audit: BPF prog-id=10 op=LOAD Oct 2 18:48:50.630321 systemd[1]: Started systemd-journald.service. Oct 2 18:48:45.846000 audit: BPF prog-id=10 op=UNLOAD Oct 2 18:48:45.846000 audit: BPF prog-id=11 op=LOAD Oct 2 18:48:45.846000 audit: BPF prog-id=11 op=UNLOAD Oct 2 18:48:50.082000 audit: BPF prog-id=12 op=LOAD Oct 2 18:48:50.085000 audit: BPF prog-id=3 op=UNLOAD Oct 2 18:48:50.087000 audit: BPF prog-id=13 op=LOAD Oct 2 18:48:50.090000 audit: BPF prog-id=14 op=LOAD Oct 2 18:48:50.090000 audit: BPF prog-id=4 op=UNLOAD Oct 2 18:48:50.090000 audit: BPF prog-id=5 op=UNLOAD Oct 2 18:48:50.092000 audit: BPF prog-id=15 op=LOAD Oct 2 18:48:50.092000 audit: BPF prog-id=12 op=UNLOAD Oct 2 18:48:50.095000 audit: BPF prog-id=16 op=LOAD Oct 2 18:48:50.097000 audit: BPF prog-id=17 op=LOAD Oct 2 18:48:50.097000 audit: BPF prog-id=13 op=UNLOAD Oct 2 18:48:50.097000 audit: BPF prog-id=14 op=UNLOAD Oct 2 18:48:50.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.109000 audit: BPF prog-id=15 op=UNLOAD Oct 2 18:48:50.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.412000 audit: BPF prog-id=18 op=LOAD Oct 2 18:48:50.413000 audit: BPF prog-id=19 op=LOAD Oct 2 18:48:50.413000 audit: BPF prog-id=20 op=LOAD Oct 2 18:48:50.435000 audit: BPF prog-id=17 op=UNLOAD Oct 2 18:48:50.436000 audit: BPF prog-id=16 op=UNLOAD Oct 2 18:48:50.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.583000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 18:48:50.583000 audit[1483]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffe3bf6bf0 a2=4000 a3=1 items=0 ppid=1 pid=1483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:50.583000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 18:48:50.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:46.056368 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:48:50.081041 systemd[1]: Queued start job for default target multi-user.target. Oct 2 18:48:46.064532 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:48:50.101986 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 18:48:46.064603 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:48:50.628311 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:48:46.064675 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 18:48:50.630818 systemd[1]: Finished systemd-random-seed.service. Oct 2 18:48:46.064705 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 18:48:50.633048 systemd[1]: Reached target first-boot-complete.target. Oct 2 18:48:46.064820 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 18:48:50.637379 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 18:48:46.064855 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 18:48:46.065315 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 18:48:46.065407 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:48:46.065444 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:48:46.066415 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 18:48:46.066509 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 18:48:46.066559 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 18:48:50.649254 systemd[1]: Starting systemd-journal-flush.service... Oct 2 18:48:46.066599 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 18:48:46.066648 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 18:48:46.066686 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 18:48:49.246766 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:49Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:48:49.247334 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:49Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:48:49.247573 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:49Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:48:49.248072 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:49Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:48:49.248181 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:49Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 18:48:49.248314 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2023-10-02T18:48:49Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 18:48:50.662758 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:48:50.668464 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 18:48:50.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.668805 systemd[1]: Finished modprobe@loop.service. Oct 2 18:48:50.671112 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 18:48:50.673562 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 18:48:50.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.675651 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 18:48:50.675996 systemd[1]: Finished modprobe@fuse.service. Oct 2 18:48:50.683088 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 18:48:50.696962 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 18:48:50.728196 systemd-journald[1483]: Time spent on flushing to /var/log/journal/ec2bb614c953c33e9b9098ddceb2a7e0 is 82.423ms for 1149 entries. Oct 2 18:48:50.728196 systemd-journald[1483]: System Journal (/var/log/journal/ec2bb614c953c33e9b9098ddceb2a7e0) is 8.0M, max 195.6M, 187.6M free. Oct 2 18:48:50.822910 systemd-journald[1483]: Received client request to flush runtime journal. Oct 2 18:48:50.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.793282 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:48:50.825433 systemd[1]: Finished systemd-journal-flush.service. Oct 2 18:48:50.859481 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:48:50.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.863756 systemd[1]: Starting systemd-udev-settle.service... Oct 2 18:48:50.896181 udevadm[1518]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 18:48:50.918549 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 18:48:50.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:50.923033 systemd[1]: Starting systemd-sysusers.service... Oct 2 18:48:51.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:51.009013 systemd[1]: Finished systemd-sysusers.service. Oct 2 18:48:51.619350 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 18:48:51.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:51.622000 audit: BPF prog-id=21 op=LOAD Oct 2 18:48:51.622000 audit: BPF prog-id=22 op=LOAD Oct 2 18:48:51.622000 audit: BPF prog-id=7 op=UNLOAD Oct 2 18:48:51.622000 audit: BPF prog-id=8 op=UNLOAD Oct 2 18:48:51.625575 systemd[1]: Starting systemd-udevd.service... Oct 2 18:48:51.673412 systemd-udevd[1529]: Using default interface naming scheme 'v252'. Oct 2 18:48:51.716481 systemd[1]: Started systemd-udevd.service. Oct 2 18:48:51.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:51.718000 audit: BPF prog-id=23 op=LOAD Oct 2 18:48:51.721592 systemd[1]: Starting systemd-networkd.service... Oct 2 18:48:51.739000 audit: BPF prog-id=24 op=LOAD Oct 2 18:48:51.740000 audit: BPF prog-id=25 op=LOAD Oct 2 18:48:51.740000 audit: BPF prog-id=26 op=LOAD Oct 2 18:48:51.745660 systemd[1]: Starting systemd-userdbd.service... Oct 2 18:48:51.854788 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 18:48:51.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:51.879744 systemd[1]: Started systemd-userdbd.service. Oct 2 18:48:51.913751 (udev-worker)[1532]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:48:52.069642 systemd-networkd[1535]: lo: Link UP Oct 2 18:48:52.070155 systemd-networkd[1535]: lo: Gained carrier Oct 2 18:48:52.071294 systemd-networkd[1535]: Enumeration completed Oct 2 18:48:52.071629 systemd[1]: Started systemd-networkd.service. Oct 2 18:48:52.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:52.076053 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 18:48:52.078279 systemd-networkd[1535]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:48:52.085803 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:48:52.086009 systemd-networkd[1535]: eth0: Link UP Oct 2 18:48:52.086451 systemd-networkd[1535]: eth0: Gained carrier Oct 2 18:48:52.121234 systemd-networkd[1535]: eth0: DHCPv4 address 172.31.25.160/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 18:48:52.204807 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1531) Oct 2 18:48:52.430304 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:48:52.437577 systemd[1]: Finished systemd-udev-settle.service. Oct 2 18:48:52.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:52.442226 systemd[1]: Starting lvm2-activation-early.service... Oct 2 18:48:52.489406 lvm[1648]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:48:52.530073 systemd[1]: Finished lvm2-activation-early.service. Oct 2 18:48:52.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:52.532578 systemd[1]: Reached target cryptsetup.target. Oct 2 18:48:52.537649 systemd[1]: Starting lvm2-activation.service... Oct 2 18:48:52.553322 lvm[1649]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:48:52.594141 systemd[1]: Finished lvm2-activation.service. Oct 2 18:48:52.596331 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:48:52.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:52.598338 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 18:48:52.598610 systemd[1]: Reached target local-fs.target. Oct 2 18:48:52.600652 systemd[1]: Reached target machines.target. Oct 2 18:48:52.605247 systemd[1]: Starting ldconfig.service... Oct 2 18:48:52.607764 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 18:48:52.608192 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:48:52.611508 systemd[1]: Starting systemd-boot-update.service... Oct 2 18:48:52.616159 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 18:48:52.622488 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 18:48:52.624702 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:48:52.624870 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:48:52.627372 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 18:48:52.669413 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1651 (bootctl) Oct 2 18:48:52.672129 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 18:48:52.696200 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 18:48:52.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:52.722303 systemd-tmpfiles[1654]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 18:48:52.731145 systemd-tmpfiles[1654]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 18:48:52.765135 systemd-tmpfiles[1654]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 18:48:52.822834 systemd-fsck[1659]: fsck.fat 4.2 (2021-01-31) Oct 2 18:48:52.822834 systemd-fsck[1659]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 18:48:52.829870 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 18:48:52.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:52.835526 systemd[1]: Mounting boot.mount... Oct 2 18:48:52.876677 systemd[1]: Mounted boot.mount. Oct 2 18:48:52.909611 systemd[1]: Finished systemd-boot-update.service. Oct 2 18:48:52.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:53.118742 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 18:48:53.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:53.123731 systemd[1]: Starting audit-rules.service... Oct 2 18:48:53.128071 systemd[1]: Starting clean-ca-certificates.service... Oct 2 18:48:53.133947 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 18:48:53.135000 audit: BPF prog-id=27 op=LOAD Oct 2 18:48:53.140762 systemd[1]: Starting systemd-resolved.service... Oct 2 18:48:53.142000 audit: BPF prog-id=28 op=LOAD Oct 2 18:48:53.148635 systemd[1]: Starting systemd-timesyncd.service... Oct 2 18:48:53.152907 systemd[1]: Starting systemd-update-utmp.service... Oct 2 18:48:53.203872 systemd[1]: Finished clean-ca-certificates.service. Oct 2 18:48:53.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:53.206168 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 18:48:53.218000 audit[1679]: SYSTEM_BOOT pid=1679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 18:48:53.233906 systemd[1]: Finished systemd-update-utmp.service. Oct 2 18:48:53.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:53.282246 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 18:48:53.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:53.415903 systemd[1]: Started systemd-timesyncd.service. Oct 2 18:48:53.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:48:53.418363 systemd[1]: Reached target time-set.target. Oct 2 18:48:53.450251 systemd-resolved[1677]: Positive Trust Anchors: Oct 2 18:48:53.450281 systemd-resolved[1677]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:48:53.450337 systemd-resolved[1677]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:48:53.599988 systemd-timesyncd[1678]: Contacted time server 207.246.65.226:123 (0.flatcar.pool.ntp.org). Oct 2 18:48:53.600114 systemd-timesyncd[1678]: Initial clock synchronization to Mon 2023-10-02 18:48:53.987562 UTC. Oct 2 18:48:53.644181 augenrules[1699]: No rules Oct 2 18:48:53.642000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 18:48:53.642000 audit[1699]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe1198200 a2=420 a3=0 items=0 ppid=1674 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:48:53.642000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 18:48:53.646352 systemd[1]: Finished audit-rules.service. Oct 2 18:48:53.712826 systemd-resolved[1677]: Defaulting to hostname 'linux'. Oct 2 18:48:53.717766 systemd[1]: Started systemd-resolved.service. Oct 2 18:48:53.719863 systemd[1]: Reached target network.target. Oct 2 18:48:53.721745 systemd[1]: Reached target nss-lookup.target. Oct 2 18:48:54.041193 systemd-networkd[1535]: eth0: Gained IPv6LL Oct 2 18:48:54.046887 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 18:48:54.049470 systemd[1]: Reached target network-online.target. Oct 2 18:48:54.062069 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 18:48:54.064738 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 18:48:54.110960 ldconfig[1650]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 18:48:54.117484 systemd[1]: Finished ldconfig.service. Oct 2 18:48:54.122659 systemd[1]: Starting systemd-update-done.service... Oct 2 18:48:54.148649 systemd[1]: Finished systemd-update-done.service. Oct 2 18:48:54.151228 systemd[1]: Reached target sysinit.target. Oct 2 18:48:54.153452 systemd[1]: Started motdgen.path. Oct 2 18:48:54.155502 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 18:48:54.158661 systemd[1]: Started logrotate.timer. Oct 2 18:48:54.161040 systemd[1]: Started mdadm.timer. Oct 2 18:48:54.162913 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 18:48:54.165103 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 18:48:54.165445 systemd[1]: Reached target paths.target. Oct 2 18:48:54.167307 systemd[1]: Reached target timers.target. Oct 2 18:48:54.170696 systemd[1]: Listening on dbus.socket. Oct 2 18:48:54.175567 systemd[1]: Starting docker.socket... Oct 2 18:48:54.185568 systemd[1]: Listening on sshd.socket. Oct 2 18:48:54.187929 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:48:54.189204 systemd[1]: Listening on docker.socket. Oct 2 18:48:54.191558 systemd[1]: Reached target sockets.target. Oct 2 18:48:54.193811 systemd[1]: Reached target basic.target. Oct 2 18:48:54.196116 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:48:54.196409 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:48:54.207740 systemd[1]: Started amazon-ssm-agent.service. Oct 2 18:48:54.214005 systemd[1]: Starting containerd.service... Oct 2 18:48:54.218633 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 18:48:54.226670 systemd[1]: Starting dbus.service... Oct 2 18:48:54.231106 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 18:48:54.237237 systemd[1]: Starting extend-filesystems.service... Oct 2 18:48:54.239213 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 18:48:54.242107 systemd[1]: Starting motdgen.service... Oct 2 18:48:54.246481 systemd[1]: Started nvidia.service. Oct 2 18:48:54.253981 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 18:48:54.258728 systemd[1]: Starting prepare-critools.service... Oct 2 18:48:54.265235 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 18:48:54.272052 systemd[1]: Starting sshd-keygen.service... Oct 2 18:48:54.284367 systemd[1]: Starting systemd-logind.service... Oct 2 18:48:54.286152 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:48:54.286306 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 18:48:54.287406 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 18:48:54.289404 systemd[1]: Starting update-engine.service... Oct 2 18:48:54.298517 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 18:48:54.377905 jq[1713]: false Oct 2 18:48:54.397080 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 18:48:54.397520 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 18:48:54.491007 jq[1723]: true Oct 2 18:48:54.529142 tar[1728]: ./ Oct 2 18:48:54.529142 tar[1728]: ./loopback Oct 2 18:48:54.564311 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 18:48:54.564720 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 18:48:54.585639 tar[1725]: crictl Oct 2 18:48:54.601114 jq[1737]: true Oct 2 18:48:54.645467 amazon-ssm-agent[1709]: 2023/10/02 18:48:54 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 18:48:54.650750 dbus-daemon[1712]: [system] SELinux support is enabled Oct 2 18:48:54.657040 systemd[1]: Started dbus.service. Oct 2 18:48:54.662713 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 18:48:54.662780 systemd[1]: Reached target system-config.target. Oct 2 18:48:54.664934 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 18:48:54.664977 systemd[1]: Reached target user-config.target. Oct 2 18:48:54.679002 amazon-ssm-agent[1709]: Initializing new seelog logger Oct 2 18:48:54.679237 amazon-ssm-agent[1709]: New Seelog Logger Creation Complete Oct 2 18:48:54.679419 amazon-ssm-agent[1709]: 2023/10/02 18:48:54 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 18:48:54.679419 amazon-ssm-agent[1709]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 18:48:54.680116 amazon-ssm-agent[1709]: 2023/10/02 18:48:54 processing appconfig overrides Oct 2 18:48:54.709333 dbus-daemon[1712]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1535 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 18:48:54.716750 systemd[1]: Starting systemd-hostnamed.service... Oct 2 18:48:54.735190 extend-filesystems[1714]: Found nvme0n1 Oct 2 18:48:54.735190 extend-filesystems[1714]: Found nvme0n1p1 Oct 2 18:48:54.735190 extend-filesystems[1714]: Found nvme0n1p2 Oct 2 18:48:54.735190 extend-filesystems[1714]: Found nvme0n1p3 Oct 2 18:48:54.735190 extend-filesystems[1714]: Found usr Oct 2 18:48:54.735190 extend-filesystems[1714]: Found nvme0n1p4 Oct 2 18:48:54.735190 extend-filesystems[1714]: Found nvme0n1p6 Oct 2 18:48:54.735190 extend-filesystems[1714]: Found nvme0n1p7 Oct 2 18:48:54.735190 extend-filesystems[1714]: Found nvme0n1p9 Oct 2 18:48:54.735190 extend-filesystems[1714]: Checking size of /dev/nvme0n1p9 Oct 2 18:48:54.756878 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 18:48:54.757298 systemd[1]: Finished motdgen.service. Oct 2 18:48:54.832065 update_engine[1722]: I1002 18:48:54.831506 1722 main.cc:92] Flatcar Update Engine starting Oct 2 18:48:54.849619 systemd[1]: Started update-engine.service. Oct 2 18:48:54.855225 systemd[1]: Started locksmithd.service. Oct 2 18:48:54.858153 update_engine[1722]: I1002 18:48:54.858096 1722 update_check_scheduler.cc:74] Next update check in 4m56s Oct 2 18:48:54.895005 extend-filesystems[1714]: Resized partition /dev/nvme0n1p9 Oct 2 18:48:54.913898 extend-filesystems[1780]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 18:48:54.944855 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 18:48:55.001853 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 18:48:55.055905 extend-filesystems[1780]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 18:48:55.055905 extend-filesystems[1780]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 18:48:55.055905 extend-filesystems[1780]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 18:48:55.093090 bash[1788]: Updated "/home/core/.ssh/authorized_keys" Oct 2 18:48:55.093321 tar[1728]: ./bandwidth Oct 2 18:48:55.067081 systemd-logind[1721]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 18:48:55.067517 systemd-logind[1721]: New seat seat0. Oct 2 18:48:55.076137 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 18:48:55.104483 extend-filesystems[1714]: Resized filesystem in /dev/nvme0n1p9 Oct 2 18:48:55.095686 systemd[1]: Started systemd-logind.service. Oct 2 18:48:55.099059 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 18:48:55.099434 systemd[1]: Finished extend-filesystems.service. Oct 2 18:48:55.126871 env[1731]: time="2023-10-02T18:48:55.126051399Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 18:48:55.162312 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 18:48:55.335280 dbus-daemon[1712]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 18:48:55.335589 systemd[1]: Started systemd-hostnamed.service. Oct 2 18:48:55.347956 dbus-daemon[1712]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1767 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 18:48:55.354913 systemd[1]: Starting polkit.service... Oct 2 18:48:55.384692 env[1731]: time="2023-10-02T18:48:55.384425095Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 18:48:55.384941 env[1731]: time="2023-10-02T18:48:55.384882085Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:48:55.392316 env[1731]: time="2023-10-02T18:48:55.392184055Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:48:55.392316 env[1731]: time="2023-10-02T18:48:55.392262249Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:48:55.392803 env[1731]: time="2023-10-02T18:48:55.392729084Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:48:55.392927 env[1731]: time="2023-10-02T18:48:55.392826905Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 18:48:55.392927 env[1731]: time="2023-10-02T18:48:55.392868509Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 18:48:55.392927 env[1731]: time="2023-10-02T18:48:55.392897893Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 18:48:55.404629 env[1731]: time="2023-10-02T18:48:55.393108719Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:48:55.405606 env[1731]: time="2023-10-02T18:48:55.405516757Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:48:55.406023 env[1731]: time="2023-10-02T18:48:55.405934269Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:48:55.406023 env[1731]: time="2023-10-02T18:48:55.406011450Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 18:48:55.406260 env[1731]: time="2023-10-02T18:48:55.406197171Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 18:48:55.406407 env[1731]: time="2023-10-02T18:48:55.406254787Z" level=info msg="metadata content store policy set" policy=shared Oct 2 18:48:55.420401 tar[1728]: ./ptp Oct 2 18:48:55.436203 env[1731]: time="2023-10-02T18:48:55.436111507Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 18:48:55.436361 env[1731]: time="2023-10-02T18:48:55.436239424Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 18:48:55.436361 env[1731]: time="2023-10-02T18:48:55.436309975Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 18:48:55.436504 env[1731]: time="2023-10-02T18:48:55.436416201Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.436504 env[1731]: time="2023-10-02T18:48:55.436485964Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.436669 env[1731]: time="2023-10-02T18:48:55.436527331Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.436669 env[1731]: time="2023-10-02T18:48:55.436591777Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.437495 env[1731]: time="2023-10-02T18:48:55.437419222Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.437651 env[1731]: time="2023-10-02T18:48:55.437498566Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.437651 env[1731]: time="2023-10-02T18:48:55.437568892Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.437651 env[1731]: time="2023-10-02T18:48:55.437604492Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.437651 env[1731]: time="2023-10-02T18:48:55.437637553Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 18:48:55.438057 env[1731]: time="2023-10-02T18:48:55.438001402Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 18:48:55.438315 env[1731]: time="2023-10-02T18:48:55.438262940Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.438992114Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439081128Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439117054Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439290003Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439330782Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439366570Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439397205Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439429791Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439463427Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439495550Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439527348Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439566551Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.439959684Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.440028095Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.440860 env[1731]: time="2023-10-02T18:48:55.440068449Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.441790 env[1731]: time="2023-10-02T18:48:55.440103675Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 18:48:55.441790 env[1731]: time="2023-10-02T18:48:55.440139300Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 18:48:55.441790 env[1731]: time="2023-10-02T18:48:55.440172362Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 18:48:55.441790 env[1731]: time="2023-10-02T18:48:55.440214054Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 18:48:55.441790 env[1731]: time="2023-10-02T18:48:55.440292685Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 18:48:55.442178 env[1731]: time="2023-10-02T18:48:55.440715677Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 18:48:55.444271 env[1731]: time="2023-10-02T18:48:55.444214377Z" level=info msg="Connect containerd service" Oct 2 18:48:55.444553 env[1731]: time="2023-10-02T18:48:55.444512654Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 18:48:55.464308 env[1731]: time="2023-10-02T18:48:55.464242913Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 18:48:55.469548 env[1731]: time="2023-10-02T18:48:55.469497750Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 18:48:55.470115 polkitd[1801]: Started polkitd version 121 Oct 2 18:48:55.471576 env[1731]: time="2023-10-02T18:48:55.471524193Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 18:48:55.473049 systemd[1]: Started containerd.service. Oct 2 18:48:55.476165 env[1731]: time="2023-10-02T18:48:55.474822775Z" level=info msg="Start subscribing containerd event" Oct 2 18:48:55.476165 env[1731]: time="2023-10-02T18:48:55.474921496Z" level=info msg="Start recovering state" Oct 2 18:48:55.476165 env[1731]: time="2023-10-02T18:48:55.475065587Z" level=info msg="Start event monitor" Oct 2 18:48:55.476165 env[1731]: time="2023-10-02T18:48:55.475092656Z" level=info msg="Start snapshots syncer" Oct 2 18:48:55.476165 env[1731]: time="2023-10-02T18:48:55.475117387Z" level=info msg="Start cni network conf syncer for default" Oct 2 18:48:55.476165 env[1731]: time="2023-10-02T18:48:55.475138327Z" level=info msg="Start streaming server" Oct 2 18:48:55.479355 env[1731]: time="2023-10-02T18:48:55.479269169Z" level=info msg="containerd successfully booted in 0.380531s" Oct 2 18:48:55.523524 polkitd[1801]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 18:48:55.523688 polkitd[1801]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 18:48:55.534135 polkitd[1801]: Finished loading, compiling and executing 2 rules Oct 2 18:48:55.535081 dbus-daemon[1712]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 18:48:55.535373 systemd[1]: Started polkit.service. Oct 2 18:48:55.538809 polkitd[1801]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 18:48:55.569331 coreos-metadata[1711]: Oct 02 18:48:55.569 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 18:48:55.573596 coreos-metadata[1711]: Oct 02 18:48:55.573 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 18:48:55.578987 coreos-metadata[1711]: Oct 02 18:48:55.578 INFO Fetch successful Oct 2 18:48:55.578987 coreos-metadata[1711]: Oct 02 18:48:55.578 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 18:48:55.580465 coreos-metadata[1711]: Oct 02 18:48:55.580 INFO Fetch successful Oct 2 18:48:55.584164 unknown[1711]: wrote ssh authorized keys file for user: core Oct 2 18:48:55.585680 systemd-hostnamed[1767]: Hostname set to (transient) Oct 2 18:48:55.585903 systemd-resolved[1677]: System hostname changed to 'ip-172-31-25-160'. Oct 2 18:48:55.645383 update-ssh-keys[1817]: Updated "/home/core/.ssh/authorized_keys" Oct 2 18:48:55.647455 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 18:48:55.712268 tar[1728]: ./vlan Oct 2 18:48:55.859879 amazon-ssm-agent[1709]: 2023-10-02 18:48:55 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 18:48:55.860532 amazon-ssm-agent[1709]: 2023-10-02 18:48:55 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-089efdaee6521ad39 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-089efdaee6521ad39 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 18:48:55.860532 amazon-ssm-agent[1709]: status code: 400, request id: 78d5ccf2-d49d-4f4d-8004-51d5429a6a65 Oct 2 18:48:55.899779 tar[1728]: ./host-device Oct 2 18:48:56.058272 tar[1728]: ./tuning Oct 2 18:48:56.195045 tar[1728]: ./vrf Oct 2 18:48:56.340004 tar[1728]: ./sbr Oct 2 18:48:56.505944 tar[1728]: ./tap Oct 2 18:48:56.682988 tar[1728]: ./dhcp Oct 2 18:48:56.745622 systemd[1]: Finished prepare-critools.service. Oct 2 18:48:56.867061 tar[1728]: ./static Oct 2 18:48:56.906482 tar[1728]: ./firewall Oct 2 18:48:56.968510 tar[1728]: ./macvlan Oct 2 18:48:57.023201 tar[1728]: ./dummy Oct 2 18:48:57.076212 tar[1728]: ./bridge Oct 2 18:48:57.135684 tar[1728]: ./ipvlan Oct 2 18:48:57.190281 tar[1728]: ./portmap Oct 2 18:48:57.240576 tar[1728]: ./host-local Oct 2 18:48:57.318177 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 18:48:57.470451 locksmithd[1774]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 18:48:58.100579 sshd_keygen[1755]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 18:48:58.163152 systemd[1]: Finished sshd-keygen.service. Oct 2 18:48:58.168111 systemd[1]: Starting issuegen.service... Oct 2 18:48:58.189173 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 18:48:58.189563 systemd[1]: Finished issuegen.service. Oct 2 18:48:58.195173 systemd[1]: Starting systemd-user-sessions.service... Oct 2 18:48:58.219484 systemd[1]: Finished systemd-user-sessions.service. Oct 2 18:48:58.224982 systemd[1]: Started getty@tty1.service. Oct 2 18:48:58.230875 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 18:48:58.233536 systemd[1]: Reached target getty.target. Oct 2 18:48:58.235878 systemd[1]: Reached target multi-user.target. Oct 2 18:48:58.242157 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 18:48:58.266192 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 18:48:58.266595 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 18:48:58.269088 systemd[1]: Startup finished in 1.185s (kernel) + 12.946s (initrd) + 12.719s (userspace) = 26.851s. Oct 2 18:49:03.828912 systemd[1]: Created slice system-sshd.slice. Oct 2 18:49:03.831447 systemd[1]: Started sshd@0-172.31.25.160:22-139.178.89.65:57884.service. Oct 2 18:49:04.045983 sshd[1922]: Accepted publickey for core from 139.178.89.65 port 57884 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:04.051058 sshd[1922]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:04.071662 systemd[1]: Created slice user-500.slice. Oct 2 18:49:04.074651 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 18:49:04.082923 systemd-logind[1721]: New session 1 of user core. Oct 2 18:49:04.103415 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 18:49:04.108237 systemd[1]: Starting user@500.service... Oct 2 18:49:04.121162 (systemd)[1925]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:04.331038 systemd[1925]: Queued start job for default target default.target. Oct 2 18:49:04.333008 systemd[1925]: Reached target paths.target. Oct 2 18:49:04.333067 systemd[1925]: Reached target sockets.target. Oct 2 18:49:04.333100 systemd[1925]: Reached target timers.target. Oct 2 18:49:04.333130 systemd[1925]: Reached target basic.target. Oct 2 18:49:04.333226 systemd[1925]: Reached target default.target. Oct 2 18:49:04.333292 systemd[1925]: Startup finished in 193ms. Oct 2 18:49:04.333760 systemd[1]: Started user@500.service. Oct 2 18:49:04.335889 systemd[1]: Started session-1.scope. Oct 2 18:49:04.502027 systemd[1]: Started sshd@1-172.31.25.160:22-139.178.89.65:57896.service. Oct 2 18:49:04.690318 sshd[1934]: Accepted publickey for core from 139.178.89.65 port 57896 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:04.694204 sshd[1934]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:04.704086 systemd-logind[1721]: New session 2 of user core. Oct 2 18:49:04.705156 systemd[1]: Started session-2.scope. Oct 2 18:49:04.866903 sshd[1934]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:04.873621 systemd-logind[1721]: Session 2 logged out. Waiting for processes to exit. Oct 2 18:49:04.874294 systemd[1]: sshd@1-172.31.25.160:22-139.178.89.65:57896.service: Deactivated successfully. Oct 2 18:49:04.875591 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 18:49:04.877550 systemd-logind[1721]: Removed session 2. Oct 2 18:49:04.899050 systemd[1]: Started sshd@2-172.31.25.160:22-139.178.89.65:57908.service. Oct 2 18:49:05.093545 sshd[1940]: Accepted publickey for core from 139.178.89.65 port 57908 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:05.097667 sshd[1940]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:05.107398 systemd[1]: Started session-3.scope. Oct 2 18:49:05.108899 systemd-logind[1721]: New session 3 of user core. Oct 2 18:49:05.247255 sshd[1940]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:05.254292 systemd[1]: sshd@2-172.31.25.160:22-139.178.89.65:57908.service: Deactivated successfully. Oct 2 18:49:05.255560 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 18:49:05.256714 systemd-logind[1721]: Session 3 logged out. Waiting for processes to exit. Oct 2 18:49:05.258423 systemd-logind[1721]: Removed session 3. Oct 2 18:49:05.279364 systemd[1]: Started sshd@3-172.31.25.160:22-139.178.89.65:57918.service. Oct 2 18:49:05.472922 sshd[1946]: Accepted publickey for core from 139.178.89.65 port 57918 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:05.476651 sshd[1946]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:05.486350 systemd-logind[1721]: New session 4 of user core. Oct 2 18:49:05.487348 systemd[1]: Started session-4.scope. Oct 2 18:49:05.638816 sshd[1946]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:05.645336 systemd-logind[1721]: Session 4 logged out. Waiting for processes to exit. Oct 2 18:49:05.646755 systemd[1]: sshd@3-172.31.25.160:22-139.178.89.65:57918.service: Deactivated successfully. Oct 2 18:49:05.648091 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 18:49:05.649583 systemd-logind[1721]: Removed session 4. Oct 2 18:49:05.668610 systemd[1]: Started sshd@4-172.31.25.160:22-139.178.89.65:39150.service. Oct 2 18:49:05.858208 sshd[1952]: Accepted publickey for core from 139.178.89.65 port 39150 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:05.862024 sshd[1952]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:05.869841 systemd-logind[1721]: New session 5 of user core. Oct 2 18:49:05.870845 systemd[1]: Started session-5.scope. Oct 2 18:49:06.011176 sudo[1955]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 18:49:06.011683 sudo[1955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:49:06.028073 dbus-daemon[1712]: avc: received setenforce notice (enforcing=1) Oct 2 18:49:06.031000 sudo[1955]: pam_unix(sudo:session): session closed for user root Oct 2 18:49:06.056532 sshd[1952]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:06.062606 systemd-logind[1721]: Session 5 logged out. Waiting for processes to exit. Oct 2 18:49:06.063318 systemd[1]: sshd@4-172.31.25.160:22-139.178.89.65:39150.service: Deactivated successfully. Oct 2 18:49:06.064594 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 18:49:06.066379 systemd-logind[1721]: Removed session 5. Oct 2 18:49:06.090430 systemd[1]: Started sshd@5-172.31.25.160:22-139.178.89.65:39152.service. Oct 2 18:49:06.278987 sshd[1959]: Accepted publickey for core from 139.178.89.65 port 39152 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:06.282865 sshd[1959]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:06.291685 systemd[1]: Started session-6.scope. Oct 2 18:49:06.292775 systemd-logind[1721]: New session 6 of user core. Oct 2 18:49:06.414637 sudo[1963]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 18:49:06.415763 sudo[1963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:49:06.423549 sudo[1963]: pam_unix(sudo:session): session closed for user root Oct 2 18:49:06.437455 sudo[1962]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 18:49:06.438000 sudo[1962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:49:06.462632 systemd[1]: Stopping audit-rules.service... Oct 2 18:49:06.465000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:49:06.467876 auditctl[1966]: No rules Oct 2 18:49:06.469288 kernel: kauditd_printk_skb: 73 callbacks suppressed Oct 2 18:49:06.469386 kernel: audit: type=1305 audit(1696272546.465:161): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:49:06.473451 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 18:49:06.473846 systemd[1]: Stopped audit-rules.service. Oct 2 18:49:06.465000 audit[1966]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc89d5550 a2=420 a3=0 items=0 ppid=1 pid=1966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:06.477623 systemd[1]: Starting audit-rules.service... Oct 2 18:49:06.486435 kernel: audit: type=1300 audit(1696272546.465:161): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc89d5550 a2=420 a3=0 items=0 ppid=1 pid=1966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:06.465000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:49:06.490672 kernel: audit: type=1327 audit(1696272546.465:161): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:49:06.490762 kernel: audit: type=1131 audit(1696272546.473:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.557014 augenrules[1983]: No rules Oct 2 18:49:06.559161 systemd[1]: Finished audit-rules.service. Oct 2 18:49:06.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.568623 sudo[1962]: pam_unix(sudo:session): session closed for user root Oct 2 18:49:06.566000 audit[1962]: USER_END pid=1962 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.579309 kernel: audit: type=1130 audit(1696272546.557:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.579409 kernel: audit: type=1106 audit(1696272546.566:164): pid=1962 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.567000 audit[1962]: CRED_DISP pid=1962 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.588022 kernel: audit: type=1104 audit(1696272546.567:165): pid=1962 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.602265 sshd[1959]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:06.603000 audit[1959]: USER_END pid=1959 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:06.603000 audit[1959]: CRED_DISP pid=1959 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:06.628050 kernel: audit: type=1106 audit(1696272546.603:166): pid=1959 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:06.628141 kernel: audit: type=1104 audit(1696272546.603:167): pid=1959 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:06.628707 systemd[1]: sshd@5-172.31.25.160:22-139.178.89.65:39152.service: Deactivated successfully. Oct 2 18:49:06.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.160:22-139.178.89.65:39152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.638698 kernel: audit: type=1131 audit(1696272546.628:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.160:22-139.178.89.65:39152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.630084 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 18:49:06.640253 systemd-logind[1721]: Session 6 logged out. Waiting for processes to exit. Oct 2 18:49:06.650756 systemd-logind[1721]: Removed session 6. Oct 2 18:49:06.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.160:22-139.178.89.65:39160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.655031 systemd[1]: Started sshd@6-172.31.25.160:22-139.178.89.65:39160.service. Oct 2 18:49:06.842000 audit[1989]: USER_ACCT pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:06.844543 sshd[1989]: Accepted publickey for core from 139.178.89.65 port 39160 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:06.845000 audit[1989]: CRED_ACQ pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:06.845000 audit[1989]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0e68610 a2=3 a3=1 items=0 ppid=1 pid=1989 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:06.845000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:49:06.846863 sshd[1989]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:06.854834 systemd-logind[1721]: New session 7 of user core. Oct 2 18:49:06.855773 systemd[1]: Started session-7.scope. Oct 2 18:49:06.863000 audit[1989]: USER_START pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:06.869000 audit[1991]: CRED_ACQ pid=1991 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:06.975000 audit[1992]: USER_ACCT pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.977604 sudo[1992]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 18:49:06.976000 audit[1992]: CRED_REFR pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:06.978723 sudo[1992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:49:06.981000 audit[1992]: USER_START pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:07.718376 systemd[1]: Starting docker.service... Oct 2 18:49:07.827065 env[2007]: time="2023-10-02T18:49:07.826962530Z" level=info msg="Starting up" Oct 2 18:49:07.830161 env[2007]: time="2023-10-02T18:49:07.830115224Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 18:49:07.830347 env[2007]: time="2023-10-02T18:49:07.830318062Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 18:49:07.830478 env[2007]: time="2023-10-02T18:49:07.830445151Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 18:49:07.830587 env[2007]: time="2023-10-02T18:49:07.830559169Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 18:49:07.835228 env[2007]: time="2023-10-02T18:49:07.835184376Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 18:49:07.835437 env[2007]: time="2023-10-02T18:49:07.835407619Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 18:49:07.835570 env[2007]: time="2023-10-02T18:49:07.835538447Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 18:49:07.835679 env[2007]: time="2023-10-02T18:49:07.835650747Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 18:49:07.845498 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3874335943-merged.mount: Deactivated successfully. Oct 2 18:49:07.892916 env[2007]: time="2023-10-02T18:49:07.892835594Z" level=info msg="Loading containers: start." Oct 2 18:49:08.002000 audit[2038]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.002000 audit[2038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff62071f0 a2=0 a3=1 items=0 ppid=2007 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.002000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 18:49:08.009000 audit[2040]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.009000 audit[2040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd9b4c8f0 a2=0 a3=1 items=0 ppid=2007 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.009000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 18:49:08.017000 audit[2042]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.017000 audit[2042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff6762c60 a2=0 a3=1 items=0 ppid=2007 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.017000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 18:49:08.024000 audit[2044]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.024000 audit[2044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff49ac720 a2=0 a3=1 items=0 ppid=2007 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.024000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 18:49:08.033000 audit[2046]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.033000 audit[2046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff9ce3a70 a2=0 a3=1 items=0 ppid=2007 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.033000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 18:49:08.068000 audit[2051]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.068000 audit[2051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd54bb040 a2=0 a3=1 items=0 ppid=2007 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.068000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 18:49:08.083000 audit[2053]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.083000 audit[2053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffef66d350 a2=0 a3=1 items=0 ppid=2007 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.083000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 18:49:08.091000 audit[2055]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.091000 audit[2055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffffb742530 a2=0 a3=1 items=0 ppid=2007 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 18:49:08.098000 audit[2057]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.098000 audit[2057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffffc143c0 a2=0 a3=1 items=0 ppid=2007 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.098000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:08.120000 audit[2061]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.120000 audit[2061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcb9695e0 a2=0 a3=1 items=0 ppid=2007 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:08.124000 audit[2062]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.124000 audit[2062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff6030a40 a2=0 a3=1 items=0 ppid=2007 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.124000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:08.137845 kernel: Initializing XFRM netlink socket Oct 2 18:49:08.182681 env[2007]: time="2023-10-02T18:49:08.182600418Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 18:49:08.186565 (udev-worker)[2018]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:49:08.218000 audit[2071]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.218000 audit[2071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffecb8dbb0 a2=0 a3=1 items=0 ppid=2007 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.218000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 18:49:08.243000 audit[2074]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.243000 audit[2074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc2c35630 a2=0 a3=1 items=0 ppid=2007 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.243000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 18:49:08.254000 audit[2077]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.254000 audit[2077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd6e52820 a2=0 a3=1 items=0 ppid=2007 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.254000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 18:49:08.262000 audit[2079]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.262000 audit[2079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe0601940 a2=0 a3=1 items=0 ppid=2007 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.262000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 18:49:08.271000 audit[2081]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.271000 audit[2081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff52d0b10 a2=0 a3=1 items=0 ppid=2007 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.271000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 18:49:08.279000 audit[2083]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.279000 audit[2083]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe8169a50 a2=0 a3=1 items=0 ppid=2007 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.279000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 18:49:08.288000 audit[2085]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.288000 audit[2085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd1fd6f40 a2=0 a3=1 items=0 ppid=2007 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.288000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 18:49:08.306000 audit[2088]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.306000 audit[2088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffeaee3490 a2=0 a3=1 items=0 ppid=2007 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.306000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 18:49:08.314000 audit[2090]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.314000 audit[2090]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffc3e7eb80 a2=0 a3=1 items=0 ppid=2007 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.314000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 18:49:08.322000 audit[2092]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.322000 audit[2092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffcc65c080 a2=0 a3=1 items=0 ppid=2007 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 18:49:08.332000 audit[2094]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.332000 audit[2094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff2b93bc0 a2=0 a3=1 items=0 ppid=2007 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 18:49:08.333954 systemd-networkd[1535]: docker0: Link UP Oct 2 18:49:08.357000 audit[2098]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.357000 audit[2098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcf43fc30 a2=0 a3=1 items=0 ppid=2007 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.357000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:08.360000 audit[2099]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:08.360000 audit[2099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd71e3e20 a2=0 a3=1 items=0 ppid=2007 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:08.360000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:08.362137 env[2007]: time="2023-10-02T18:49:08.362094397Z" level=info msg="Loading containers: done." Oct 2 18:49:08.392688 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck448340449-merged.mount: Deactivated successfully. Oct 2 18:49:08.407304 env[2007]: time="2023-10-02T18:49:08.407246176Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 18:49:08.407949 env[2007]: time="2023-10-02T18:49:08.407915680Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 18:49:08.408253 env[2007]: time="2023-10-02T18:49:08.408226699Z" level=info msg="Daemon has completed initialization" Oct 2 18:49:08.444955 systemd[1]: Started docker.service. Oct 2 18:49:08.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:08.461239 env[2007]: time="2023-10-02T18:49:08.461153814Z" level=info msg="API listen on /run/docker.sock" Oct 2 18:49:08.512201 systemd[1]: Reloading. Oct 2 18:49:08.670084 /usr/lib/systemd/system-generators/torcx-generator[2147]: time="2023-10-02T18:49:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:49:08.670147 /usr/lib/systemd/system-generators/torcx-generator[2147]: time="2023-10-02T18:49:08Z" level=info msg="torcx already run" Oct 2 18:49:08.939557 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:49:08.940211 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:49:08.979293 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.155000 audit: BPF prog-id=37 op=LOAD Oct 2 18:49:09.155000 audit: BPF prog-id=35 op=UNLOAD Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.157000 audit: BPF prog-id=38 op=LOAD Oct 2 18:49:09.157000 audit: BPF prog-id=28 op=UNLOAD Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.160000 audit: BPF prog-id=39 op=LOAD Oct 2 18:49:09.160000 audit: BPF prog-id=29 op=UNLOAD Oct 2 18:49:09.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit: BPF prog-id=40 op=LOAD Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.161000 audit: BPF prog-id=41 op=LOAD Oct 2 18:49:09.161000 audit: BPF prog-id=30 op=UNLOAD Oct 2 18:49:09.161000 audit: BPF prog-id=31 op=UNLOAD Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.164000 audit: BPF prog-id=42 op=LOAD Oct 2 18:49:09.164000 audit: BPF prog-id=27 op=UNLOAD Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.168000 audit: BPF prog-id=43 op=LOAD Oct 2 18:49:09.169000 audit: BPF prog-id=18 op=UNLOAD Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit: BPF prog-id=44 op=LOAD Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.169000 audit: BPF prog-id=45 op=LOAD Oct 2 18:49:09.169000 audit: BPF prog-id=19 op=UNLOAD Oct 2 18:49:09.169000 audit: BPF prog-id=20 op=UNLOAD Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit: BPF prog-id=46 op=LOAD Oct 2 18:49:09.170000 audit: BPF prog-id=24 op=UNLOAD Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.170000 audit: BPF prog-id=47 op=LOAD Oct 2 18:49:09.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.171000 audit: BPF prog-id=48 op=LOAD Oct 2 18:49:09.171000 audit: BPF prog-id=25 op=UNLOAD Oct 2 18:49:09.171000 audit: BPF prog-id=26 op=UNLOAD Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.176000 audit: BPF prog-id=49 op=LOAD Oct 2 18:49:09.176000 audit: BPF prog-id=23 op=UNLOAD Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.177000 audit: BPF prog-id=50 op=LOAD Oct 2 18:49:09.177000 audit: BPF prog-id=32 op=UNLOAD Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit: BPF prog-id=51 op=LOAD Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.178000 audit: BPF prog-id=52 op=LOAD Oct 2 18:49:09.178000 audit: BPF prog-id=33 op=UNLOAD Oct 2 18:49:09.178000 audit: BPF prog-id=34 op=UNLOAD Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit: BPF prog-id=53 op=LOAD Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:09.181000 audit: BPF prog-id=54 op=LOAD Oct 2 18:49:09.181000 audit: BPF prog-id=21 op=UNLOAD Oct 2 18:49:09.181000 audit: BPF prog-id=22 op=UNLOAD Oct 2 18:49:09.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:09.220446 systemd[1]: Started kubelet.service. Oct 2 18:49:09.381639 kubelet[2201]: E1002 18:49:09.381564 2201 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 18:49:09.385859 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:49:09.386181 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:49:09.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:49:09.664417 env[1731]: time="2023-10-02T18:49:09.664363651Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 18:49:10.321053 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4053695947.mount: Deactivated successfully. Oct 2 18:49:13.176867 env[1731]: time="2023-10-02T18:49:13.176710273Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:13.179943 env[1731]: time="2023-10-02T18:49:13.179857040Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:13.183409 env[1731]: time="2023-10-02T18:49:13.183356574Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:13.187577 env[1731]: time="2023-10-02T18:49:13.187504509Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:13.191441 env[1731]: time="2023-10-02T18:49:13.191371953Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c\"" Oct 2 18:49:13.220831 env[1731]: time="2023-10-02T18:49:13.220750087Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 18:49:15.761374 env[1731]: time="2023-10-02T18:49:15.761313534Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:15.764279 env[1731]: time="2023-10-02T18:49:15.764228815Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:15.768317 env[1731]: time="2023-10-02T18:49:15.768266561Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:15.772186 env[1731]: time="2023-10-02T18:49:15.772134863Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:15.773768 env[1731]: time="2023-10-02T18:49:15.773712549Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c\"" Oct 2 18:49:15.805241 env[1731]: time="2023-10-02T18:49:15.805193259Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 18:49:17.757010 env[1731]: time="2023-10-02T18:49:17.756930487Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:17.760413 env[1731]: time="2023-10-02T18:49:17.760351017Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:17.764037 env[1731]: time="2023-10-02T18:49:17.763966625Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:17.768310 env[1731]: time="2023-10-02T18:49:17.768258017Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:17.771892 env[1731]: time="2023-10-02T18:49:17.771827573Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7\"" Oct 2 18:49:17.800904 env[1731]: time="2023-10-02T18:49:17.800832668Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 18:49:19.175998 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2443196491.mount: Deactivated successfully. Oct 2 18:49:19.456234 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 18:49:19.468908 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 18:49:19.469033 kernel: audit: type=1130 audit(1696272559.455:411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:19.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:19.456594 systemd[1]: Stopped kubelet.service. Oct 2 18:49:19.459297 systemd[1]: Started kubelet.service. Oct 2 18:49:19.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:19.478491 kernel: audit: type=1131 audit(1696272559.455:412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:19.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:19.489463 kernel: audit: type=1130 audit(1696272559.458:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:19.649564 kubelet[2234]: E1002 18:49:19.649484 2234 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 18:49:19.656519 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:49:19.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:49:19.656874 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:49:19.666609 kernel: audit: type=1131 audit(1696272559.656:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:49:20.017515 env[1731]: time="2023-10-02T18:49:20.017455713Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.020190 env[1731]: time="2023-10-02T18:49:20.020138350Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.022942 env[1731]: time="2023-10-02T18:49:20.022876162Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.025327 env[1731]: time="2023-10-02T18:49:20.025275966Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.026249 env[1731]: time="2023-10-02T18:49:20.026199783Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa\"" Oct 2 18:49:20.056671 env[1731]: time="2023-10-02T18:49:20.056610157Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 18:49:20.581924 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount630187119.mount: Deactivated successfully. Oct 2 18:49:20.591331 env[1731]: time="2023-10-02T18:49:20.591274949Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.593904 env[1731]: time="2023-10-02T18:49:20.593857608Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.602568 env[1731]: time="2023-10-02T18:49:20.602493684Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.605981 env[1731]: time="2023-10-02T18:49:20.605932798Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:20.607378 env[1731]: time="2023-10-02T18:49:20.607335979Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 18:49:20.637176 env[1731]: time="2023-10-02T18:49:20.637127123Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 18:49:25.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:25.619717 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 18:49:25.628837 kernel: audit: type=1131 audit(1696272565.619:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:25.641000 audit: BPF prog-id=52 op=UNLOAD Oct 2 18:49:25.641000 audit: BPF prog-id=51 op=UNLOAD Oct 2 18:49:25.647360 kernel: audit: type=1334 audit(1696272565.641:416): prog-id=52 op=UNLOAD Oct 2 18:49:25.647468 kernel: audit: type=1334 audit(1696272565.641:417): prog-id=51 op=UNLOAD Oct 2 18:49:25.641000 audit: BPF prog-id=50 op=UNLOAD Oct 2 18:49:25.650706 kernel: audit: type=1334 audit(1696272565.641:418): prog-id=50 op=UNLOAD Oct 2 18:49:25.942890 env[1731]: time="2023-10-02T18:49:25.942717045Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:25.946552 env[1731]: time="2023-10-02T18:49:25.946472604Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:25.953528 env[1731]: time="2023-10-02T18:49:25.951634616Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:25.957870 env[1731]: time="2023-10-02T18:49:25.956531758Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:25.958621 env[1731]: time="2023-10-02T18:49:25.958577788Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 18:49:25.989084 env[1731]: time="2023-10-02T18:49:25.989011412Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 18:49:26.543212 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2542441476.mount: Deactivated successfully. Oct 2 18:49:27.535580 env[1731]: time="2023-10-02T18:49:27.535518134Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:27.540288 env[1731]: time="2023-10-02T18:49:27.540202494Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:27.544747 env[1731]: time="2023-10-02T18:49:27.544681424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:27.548763 env[1731]: time="2023-10-02T18:49:27.548691119Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:27.551227 env[1731]: time="2023-10-02T18:49:27.550083521Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 18:49:29.706196 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 18:49:29.706546 systemd[1]: Stopped kubelet.service. Oct 2 18:49:29.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.726340 kernel: audit: type=1130 audit(1696272569.705:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.726463 kernel: audit: type=1131 audit(1696272569.705:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.722394 systemd[1]: Started kubelet.service. Oct 2 18:49:29.740485 kernel: audit: type=1130 audit(1696272569.721:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.893558 kubelet[2318]: E1002 18:49:29.893495 2318 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 18:49:29.897496 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:49:29.897845 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:49:29.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:49:29.906870 kernel: audit: type=1131 audit(1696272569.897:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:49:39.434662 systemd[1]: Stopped kubelet.service. Oct 2 18:49:39.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:39.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:39.451845 kernel: audit: type=1130 audit(1696272579.434:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:39.451985 kernel: audit: type=1131 audit(1696272579.434:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:39.479550 systemd[1]: Reloading. Oct 2 18:49:39.666205 /usr/lib/systemd/system-generators/torcx-generator[2350]: time="2023-10-02T18:49:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:49:39.666271 /usr/lib/systemd/system-generators/torcx-generator[2350]: time="2023-10-02T18:49:39Z" level=info msg="torcx already run" Oct 2 18:49:39.887320 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:49:39.887360 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:49:39.925289 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.101221 kernel: audit: type=1400 audit(1696272580.085:425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.101322 kernel: audit: type=1400 audit(1696272580.085:426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108797 kernel: audit: type=1400 audit(1696272580.085:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.116431 kernel: audit: type=1400 audit(1696272580.085:428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.124021 kernel: audit: type=1400 audit(1696272580.085:429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.131577 kernel: audit: type=1400 audit(1696272580.085:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.131662 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141053 kernel: audit: type=1400 audit(1696272580.085:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.093000 audit: BPF prog-id=55 op=LOAD Oct 2 18:49:40.093000 audit: BPF prog-id=37 op=UNLOAD Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.100000 audit: BPF prog-id=56 op=LOAD Oct 2 18:49:40.100000 audit: BPF prog-id=38 op=UNLOAD Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit: BPF prog-id=57 op=LOAD Oct 2 18:49:40.108000 audit: BPF prog-id=39 op=UNLOAD Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit: BPF prog-id=58 op=LOAD Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.115000 audit: BPF prog-id=59 op=LOAD Oct 2 18:49:40.115000 audit: BPF prog-id=40 op=UNLOAD Oct 2 18:49:40.115000 audit: BPF prog-id=41 op=UNLOAD Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.123000 audit: BPF prog-id=60 op=LOAD Oct 2 18:49:40.123000 audit: BPF prog-id=42 op=UNLOAD Oct 2 18:49:40.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.141000 audit: BPF prog-id=44 op=UNLOAD Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.142000 audit: BPF prog-id=64 op=LOAD Oct 2 18:49:40.142000 audit: BPF prog-id=46 op=UNLOAD Oct 2 18:49:40.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.148000 audit: BPF prog-id=67 op=LOAD Oct 2 18:49:40.148000 audit: BPF prog-id=49 op=UNLOAD Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit: BPF prog-id=68 op=LOAD Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:40.152000 audit: BPF prog-id=69 op=LOAD Oct 2 18:49:40.152000 audit: BPF prog-id=53 op=UNLOAD Oct 2 18:49:40.152000 audit: BPF prog-id=54 op=UNLOAD Oct 2 18:49:40.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:40.200910 systemd[1]: Started kubelet.service. Oct 2 18:49:40.336263 kubelet[2403]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:49:40.336808 kubelet[2403]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 18:49:40.336948 kubelet[2403]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:49:40.337309 kubelet[2403]: I1002 18:49:40.337251 2403 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:49:40.432993 update_engine[1722]: I1002 18:49:40.432829 1722 update_attempter.cc:505] Updating boot flags... Oct 2 18:49:41.915242 kubelet[2403]: I1002 18:49:41.915178 2403 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 18:49:41.915944 kubelet[2403]: I1002 18:49:41.915905 2403 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:49:41.916511 kubelet[2403]: I1002 18:49:41.916467 2403 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 18:49:41.926644 kubelet[2403]: E1002 18:49:41.926570 2403 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.25.160:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:41.926862 kubelet[2403]: I1002 18:49:41.926750 2403 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:49:41.936826 kubelet[2403]: W1002 18:49:41.936745 2403 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:49:41.938254 kubelet[2403]: I1002 18:49:41.938199 2403 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:49:41.938874 kubelet[2403]: I1002 18:49:41.938835 2403 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:49:41.939190 kubelet[2403]: I1002 18:49:41.939148 2403 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 18:49:41.939377 kubelet[2403]: I1002 18:49:41.939257 2403 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 18:49:41.939377 kubelet[2403]: I1002 18:49:41.939282 2403 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 18:49:41.939580 kubelet[2403]: I1002 18:49:41.939542 2403 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:49:41.940242 kubelet[2403]: I1002 18:49:41.940190 2403 kubelet.go:393] "Attempting to sync node with API server" Oct 2 18:49:41.940242 kubelet[2403]: I1002 18:49:41.940237 2403 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:49:41.940422 kubelet[2403]: I1002 18:49:41.940275 2403 kubelet.go:309] "Adding apiserver pod source" Oct 2 18:49:41.940422 kubelet[2403]: I1002 18:49:41.940362 2403 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:49:41.942430 kubelet[2403]: I1002 18:49:41.942376 2403 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:49:41.943496 kubelet[2403]: W1002 18:49:41.943442 2403 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 18:49:41.945191 kubelet[2403]: I1002 18:49:41.945139 2403 server.go:1232] "Started kubelet" Oct 2 18:49:41.945746 kubelet[2403]: W1002 18:49:41.945670 2403 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.25.160:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-160&limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:41.945980 kubelet[2403]: E1002 18:49:41.945952 2403 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.25.160:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-160&limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:41.949000 audit[2403]: AVC avc: denied { mac_admin } for pid=2403 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:41.949000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:49:41.949000 audit[2403]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d44330 a1=4000b706f0 a2=4000d44300 a3=25 items=0 ppid=1 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:41.949000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:49:41.951207 kubelet[2403]: I1002 18:49:41.951157 2403 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:49:41.950000 audit[2403]: AVC avc: denied { mac_admin } for pid=2403 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:41.950000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:49:41.950000 audit[2403]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40005d5fa0 a1=4000b70708 a2=4000d443c0 a3=25 items=0 ppid=1 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:41.950000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:49:41.952240 kubelet[2403]: I1002 18:49:41.952188 2403 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:49:41.952650 kubelet[2403]: I1002 18:49:41.952605 2403 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:49:41.957914 kubelet[2403]: E1002 18:49:41.957857 2403 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:49:41.958115 kubelet[2403]: E1002 18:49:41.957940 2403 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:49:41.961377 kubelet[2403]: I1002 18:49:41.961317 2403 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:49:41.964240 kubelet[2403]: I1002 18:49:41.964169 2403 server.go:462] "Adding debug handlers to kubelet server" Oct 2 18:49:41.964968 kubelet[2403]: I1002 18:49:41.964917 2403 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 18:49:41.965643 kubelet[2403]: E1002 18:49:41.965439 2403 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-25-160.178a5eed111270e9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-25-160", UID:"ip-172-31-25-160", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-25-160"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 49, 41, 945094377, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 49, 41, 945094377, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-25-160"}': 'Post "https://172.31.25.160:6443/api/v1/namespaces/default/events": dial tcp 172.31.25.160:6443: connect: connection refused'(may retry after sleeping) Oct 2 18:49:41.968652 kubelet[2403]: W1002 18:49:41.966429 2403 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.25.160:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:41.969009 kubelet[2403]: E1002 18:49:41.968968 2403 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.25.160:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:41.969215 kubelet[2403]: I1002 18:49:41.967624 2403 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 18:49:41.971988 kubelet[2403]: E1002 18:49:41.971940 2403 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ip-172-31-25-160\" not found" Oct 2 18:49:41.972351 kubelet[2403]: I1002 18:49:41.972319 2403 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 18:49:41.972668 kubelet[2403]: I1002 18:49:41.972634 2403 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 18:49:41.972995 kubelet[2403]: I1002 18:49:41.972964 2403 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 18:49:41.974282 kubelet[2403]: W1002 18:49:41.974208 2403 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.25.160:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:41.974523 kubelet[2403]: E1002 18:49:41.974492 2403 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.25.160:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:41.974845 kubelet[2403]: E1002 18:49:41.974816 2403 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.160:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-160?timeout=10s\": dial tcp 172.31.25.160:6443: connect: connection refused" interval="200ms" Oct 2 18:49:41.978000 audit[2511]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2511 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:41.978000 audit[2511]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe3397a70 a2=0 a3=1 items=0 ppid=2403 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:41.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:49:41.988000 audit[2512]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2512 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:41.988000 audit[2512]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc7b32d70 a2=0 a3=1 items=0 ppid=2403 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:41.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:49:42.012000 audit[2515]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2515 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:42.012000 audit[2515]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff831caf0 a2=0 a3=1 items=0 ppid=2403 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.012000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:49:42.020000 audit[2517]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2517 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:42.020000 audit[2517]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffea5e9890 a2=0 a3=1 items=0 ppid=2403 pid=2517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.020000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:49:42.031400 kubelet[2403]: I1002 18:49:42.031322 2403 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 18:49:42.031400 kubelet[2403]: I1002 18:49:42.031366 2403 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 18:49:42.031400 kubelet[2403]: I1002 18:49:42.031406 2403 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:49:42.034056 kubelet[2403]: I1002 18:49:42.033994 2403 policy_none.go:49] "None policy: Start" Oct 2 18:49:42.035759 kubelet[2403]: I1002 18:49:42.035682 2403 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 18:49:42.035934 kubelet[2403]: I1002 18:49:42.035817 2403 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:49:42.048365 systemd[1]: Created slice kubepods.slice. Oct 2 18:49:42.055000 audit[2521]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2521 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:42.055000 audit[2521]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffdfe69d60 a2=0 a3=1 items=0 ppid=2403 pid=2521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 18:49:42.058241 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 18:49:42.061082 kubelet[2403]: I1002 18:49:42.060950 2403 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 18:49:42.064429 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 18:49:42.072000 audit[2522]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2522 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:49:42.072000 audit[2522]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff33f2430 a2=0 a3=1 items=0 ppid=2403 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.072000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:49:42.074307 kubelet[2403]: I1002 18:49:42.074258 2403 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 18:49:42.074589 kubelet[2403]: I1002 18:49:42.074559 2403 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 18:49:42.076032 kubelet[2403]: I1002 18:49:42.074740 2403 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 18:49:42.076343 kubelet[2403]: E1002 18:49:42.076306 2403 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 18:49:42.080942 kubelet[2403]: I1002 18:49:42.076876 2403 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:49:42.080000 audit[2403]: AVC avc: denied { mac_admin } for pid=2403 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:42.080000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:49:42.080000 audit[2403]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e27e90 a1=4000f885a0 a2=4000e27e60 a3=25 items=0 ppid=1 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.080000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:49:42.081684 kubelet[2403]: I1002 18:49:42.081584 2403 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:49:42.082162 kubelet[2403]: I1002 18:49:42.082136 2403 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:49:42.081000 audit[2525]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=2525 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:49:42.081000 audit[2525]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc7f53200 a2=0 a3=1 items=0 ppid=2403 pid=2525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.081000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:49:42.082699 kubelet[2403]: I1002 18:49:42.078547 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-160" Oct 2 18:49:42.084590 kubelet[2403]: W1002 18:49:42.078813 2403 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.25.160:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:42.084590 kubelet[2403]: E1002 18:49:42.084125 2403 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.25.160:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:42.084590 kubelet[2403]: E1002 18:49:42.084250 2403 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.160:6443/api/v1/nodes\": dial tcp 172.31.25.160:6443: connect: connection refused" node="ip-172-31-25-160" Oct 2 18:49:42.084590 kubelet[2403]: E1002 18:49:42.084466 2403 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-25-160\" not found" Oct 2 18:49:42.086000 audit[2523]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=2523 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:42.086000 audit[2523]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd2f50fc0 a2=0 a3=1 items=0 ppid=2403 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.086000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:49:42.088000 audit[2527]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=2527 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:49:42.088000 audit[2527]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffed14caa0 a2=0 a3=1 items=0 ppid=2403 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.088000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:49:42.091000 audit[2528]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2528 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:42.091000 audit[2528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcbdce310 a2=0 a3=1 items=0 ppid=2403 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:49:42.092000 audit[2529]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=2529 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:49:42.092000 audit[2529]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcf347d30 a2=0 a3=1 items=0 ppid=2403 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.092000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:49:42.097000 audit[2530]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2530 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:42.097000 audit[2530]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcbe4e680 a2=0 a3=1 items=0 ppid=2403 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:42.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:49:42.177250 kubelet[2403]: E1002 18:49:42.176494 2403 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.160:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-160?timeout=10s\": dial tcp 172.31.25.160:6443: connect: connection refused" interval="400ms" Oct 2 18:49:42.181862 kubelet[2403]: I1002 18:49:42.181827 2403 topology_manager.go:215] "Topology Admit Handler" podUID="9954afc17093afcf3355872ed3389e7b" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-25-160" Oct 2 18:49:42.184012 kubelet[2403]: I1002 18:49:42.183975 2403 topology_manager.go:215] "Topology Admit Handler" podUID="3b7f375b34b35f5e43fc43b387997126" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-25-160" Oct 2 18:49:42.186300 kubelet[2403]: I1002 18:49:42.186254 2403 topology_manager.go:215] "Topology Admit Handler" podUID="d811ced8692d9007f69e1895287daa40" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:42.198920 systemd[1]: Created slice kubepods-burstable-pod9954afc17093afcf3355872ed3389e7b.slice. Oct 2 18:49:42.211439 systemd[1]: Created slice kubepods-burstable-pod3b7f375b34b35f5e43fc43b387997126.slice. Oct 2 18:49:42.220899 systemd[1]: Created slice kubepods-burstable-podd811ced8692d9007f69e1895287daa40.slice. Oct 2 18:49:42.274696 kubelet[2403]: I1002 18:49:42.274643 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3b7f375b34b35f5e43fc43b387997126-ca-certs\") pod \"kube-apiserver-ip-172-31-25-160\" (UID: \"3b7f375b34b35f5e43fc43b387997126\") " pod="kube-system/kube-apiserver-ip-172-31-25-160" Oct 2 18:49:42.274879 kubelet[2403]: I1002 18:49:42.274716 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3b7f375b34b35f5e43fc43b387997126-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-160\" (UID: \"3b7f375b34b35f5e43fc43b387997126\") " pod="kube-system/kube-apiserver-ip-172-31-25-160" Oct 2 18:49:42.274879 kubelet[2403]: I1002 18:49:42.274790 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3b7f375b34b35f5e43fc43b387997126-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-160\" (UID: \"3b7f375b34b35f5e43fc43b387997126\") " pod="kube-system/kube-apiserver-ip-172-31-25-160" Oct 2 18:49:42.274879 kubelet[2403]: I1002 18:49:42.274841 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:42.275082 kubelet[2403]: I1002 18:49:42.274888 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:42.275082 kubelet[2403]: I1002 18:49:42.274939 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:42.275082 kubelet[2403]: I1002 18:49:42.274984 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9954afc17093afcf3355872ed3389e7b-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-160\" (UID: \"9954afc17093afcf3355872ed3389e7b\") " pod="kube-system/kube-scheduler-ip-172-31-25-160" Oct 2 18:49:42.275082 kubelet[2403]: I1002 18:49:42.275030 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:42.275082 kubelet[2403]: I1002 18:49:42.275073 2403 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:42.286704 kubelet[2403]: I1002 18:49:42.286668 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-160" Oct 2 18:49:42.287477 kubelet[2403]: E1002 18:49:42.287446 2403 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.160:6443/api/v1/nodes\": dial tcp 172.31.25.160:6443: connect: connection refused" node="ip-172-31-25-160" Oct 2 18:49:42.508977 env[1731]: time="2023-10-02T18:49:42.508914580Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-160,Uid:9954afc17093afcf3355872ed3389e7b,Namespace:kube-system,Attempt:0,}" Oct 2 18:49:42.518764 env[1731]: time="2023-10-02T18:49:42.518664368Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-160,Uid:3b7f375b34b35f5e43fc43b387997126,Namespace:kube-system,Attempt:0,}" Oct 2 18:49:42.526188 env[1731]: time="2023-10-02T18:49:42.526094788Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-160,Uid:d811ced8692d9007f69e1895287daa40,Namespace:kube-system,Attempt:0,}" Oct 2 18:49:42.577251 kubelet[2403]: E1002 18:49:42.577211 2403 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.160:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-160?timeout=10s\": dial tcp 172.31.25.160:6443: connect: connection refused" interval="800ms" Oct 2 18:49:42.690643 kubelet[2403]: I1002 18:49:42.690155 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-160" Oct 2 18:49:42.690643 kubelet[2403]: E1002 18:49:42.690577 2403 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.160:6443/api/v1/nodes\": dial tcp 172.31.25.160:6443: connect: connection refused" node="ip-172-31-25-160" Oct 2 18:49:42.831340 kubelet[2403]: W1002 18:49:42.831188 2403 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.25.160:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:42.831340 kubelet[2403]: E1002 18:49:42.831256 2403 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.25.160:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:42.924480 kubelet[2403]: W1002 18:49:42.924383 2403 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.25.160:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-160&limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:42.924480 kubelet[2403]: E1002 18:49:42.924481 2403 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.25.160:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-160&limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:43.042825 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1856997997.mount: Deactivated successfully. Oct 2 18:49:43.048493 env[1731]: time="2023-10-02T18:49:43.048434809Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.048697 kubelet[2403]: W1002 18:49:43.048636 2403 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.25.160:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:43.048903 kubelet[2403]: E1002 18:49:43.048706 2403 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.25.160:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:43.054187 env[1731]: time="2023-10-02T18:49:43.054135549Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.056720 env[1731]: time="2023-10-02T18:49:43.056672651Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.059093 env[1731]: time="2023-10-02T18:49:43.059045947Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.061937 env[1731]: time="2023-10-02T18:49:43.061877001Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.066132 env[1731]: time="2023-10-02T18:49:43.066081331Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.069387 env[1731]: time="2023-10-02T18:49:43.069294321Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.075677 env[1731]: time="2023-10-02T18:49:43.075610852Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.077892 env[1731]: time="2023-10-02T18:49:43.077830341Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.080981 kubelet[2403]: W1002 18:49:43.080931 2403 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.25.160:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:43.081158 kubelet[2403]: E1002 18:49:43.080999 2403 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.25.160:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.160:6443: connect: connection refused Oct 2 18:49:43.085890 env[1731]: time="2023-10-02T18:49:43.085736584Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.090890 env[1731]: time="2023-10-02T18:49:43.090822097Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.104722 env[1731]: time="2023-10-02T18:49:43.104613572Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:43.149116 env[1731]: time="2023-10-02T18:49:43.148950082Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:43.149266 env[1731]: time="2023-10-02T18:49:43.149137239Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:43.149266 env[1731]: time="2023-10-02T18:49:43.149224178Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:43.154274 env[1731]: time="2023-10-02T18:49:43.149817388Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/84c60c362c5e0292dd810c5de3b1b01abcd45e5c8f0c97d9513c4019a42a7178 pid=2540 runtime=io.containerd.runc.v2 Oct 2 18:49:43.194099 env[1731]: time="2023-10-02T18:49:43.193679621Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:43.194099 env[1731]: time="2023-10-02T18:49:43.193751410Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:43.194099 env[1731]: time="2023-10-02T18:49:43.193815865Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:43.194824 env[1731]: time="2023-10-02T18:49:43.194511848Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3815122e8dd67ec16b0bb01d1caac20a6b55e975d0bc5f651dca2812e76228b6 pid=2568 runtime=io.containerd.runc.v2 Oct 2 18:49:43.204754 env[1731]: time="2023-10-02T18:49:43.204134935Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:49:43.204754 env[1731]: time="2023-10-02T18:49:43.204218718Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:49:43.204754 env[1731]: time="2023-10-02T18:49:43.204244348Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:49:43.205336 env[1731]: time="2023-10-02T18:49:43.205170526Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4cd2baa83b0b2a9391485191523ec2bd67a9c033cb778aac9c61365a98470083 pid=2562 runtime=io.containerd.runc.v2 Oct 2 18:49:43.224443 systemd[1]: Started cri-containerd-84c60c362c5e0292dd810c5de3b1b01abcd45e5c8f0c97d9513c4019a42a7178.scope. Oct 2 18:49:43.262591 systemd[1]: Started cri-containerd-3815122e8dd67ec16b0bb01d1caac20a6b55e975d0bc5f651dca2812e76228b6.scope. Oct 2 18:49:43.296984 systemd[1]: Started cri-containerd-4cd2baa83b0b2a9391485191523ec2bd67a9c033cb778aac9c61365a98470083.scope. Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.333000 audit: BPF prog-id=70 op=LOAD Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2540 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834633630633336326335653032393264643831306335646533623162 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2540 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834633630633336326335653032393264643831306335646533623162 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.334000 audit: BPF prog-id=71 op=LOAD Oct 2 18:49:43.334000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2540 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834633630633336326335653032393264643831306335646533623162 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit: BPF prog-id=72 op=LOAD Oct 2 18:49:43.335000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2540 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834633630633336326335653032393264643831306335646533623162 Oct 2 18:49:43.335000 audit: BPF prog-id=72 op=UNLOAD Oct 2 18:49:43.335000 audit: BPF prog-id=71 op=UNLOAD Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.335000 audit: BPF prog-id=73 op=LOAD Oct 2 18:49:43.335000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2540 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834633630633336326335653032393264643831306335646533623162 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.354000 audit: BPF prog-id=74 op=LOAD Oct 2 18:49:43.354000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.354000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2562 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463643262616138336230623261393339313438353139313532336563 Oct 2 18:49:43.354000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.354000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2562 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463643262616138336230623261393339313438353139313532336563 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit: BPF prog-id=75 op=LOAD Oct 2 18:49:43.355000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2562 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463643262616138336230623261393339313438353139313532336563 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit: BPF prog-id=76 op=LOAD Oct 2 18:49:43.355000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2562 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463643262616138336230623261393339313438353139313532336563 Oct 2 18:49:43.355000 audit: BPF prog-id=76 op=UNLOAD Oct 2 18:49:43.355000 audit: BPF prog-id=75 op=UNLOAD Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.355000 audit: BPF prog-id=77 op=LOAD Oct 2 18:49:43.355000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2562 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463643262616138336230623261393339313438353139313532336563 Oct 2 18:49:43.380206 kubelet[2403]: E1002 18:49:43.380119 2403 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.160:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-160?timeout=10s\": dial tcp 172.31.25.160:6443: connect: connection refused" interval="1.6s" Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.392000 audit: BPF prog-id=78 op=LOAD Oct 2 18:49:43.394000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.394000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2568 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338313531323265386464363765633136623062623031643163616163 Oct 2 18:49:43.395000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.395000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2568 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338313531323265386464363765633136623062623031643163616163 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.396000 audit: BPF prog-id=79 op=LOAD Oct 2 18:49:43.396000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2568 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338313531323265386464363765633136623062623031643163616163 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.398000 audit: BPF prog-id=80 op=LOAD Oct 2 18:49:43.398000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2568 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338313531323265386464363765633136623062623031643163616163 Oct 2 18:49:43.400000 audit: BPF prog-id=80 op=UNLOAD Oct 2 18:49:43.400000 audit: BPF prog-id=79 op=UNLOAD Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.401000 audit: BPF prog-id=81 op=LOAD Oct 2 18:49:43.401000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2568 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338313531323265386464363765633136623062623031643163616163 Oct 2 18:49:43.411410 kubelet[2403]: E1002 18:49:43.411224 2403 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-25-160.178a5eed111270e9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-25-160", UID:"ip-172-31-25-160", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-25-160"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 49, 41, 945094377, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 49, 41, 945094377, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-25-160"}': 'Post "https://172.31.25.160:6443/api/v1/namespaces/default/events": dial tcp 172.31.25.160:6443: connect: connection refused'(may retry after sleeping) Oct 2 18:49:43.430358 env[1731]: time="2023-10-02T18:49:43.430296827Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-160,Uid:d811ced8692d9007f69e1895287daa40,Namespace:kube-system,Attempt:0,} returns sandbox id \"4cd2baa83b0b2a9391485191523ec2bd67a9c033cb778aac9c61365a98470083\"" Oct 2 18:49:43.437142 env[1731]: time="2023-10-02T18:49:43.437056771Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-160,Uid:9954afc17093afcf3355872ed3389e7b,Namespace:kube-system,Attempt:0,} returns sandbox id \"84c60c362c5e0292dd810c5de3b1b01abcd45e5c8f0c97d9513c4019a42a7178\"" Oct 2 18:49:43.438688 env[1731]: time="2023-10-02T18:49:43.438630709Z" level=info msg="CreateContainer within sandbox \"4cd2baa83b0b2a9391485191523ec2bd67a9c033cb778aac9c61365a98470083\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 18:49:43.447594 env[1731]: time="2023-10-02T18:49:43.447516587Z" level=info msg="CreateContainer within sandbox \"84c60c362c5e0292dd810c5de3b1b01abcd45e5c8f0c97d9513c4019a42a7178\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 18:49:43.485019 env[1731]: time="2023-10-02T18:49:43.484953033Z" level=info msg="CreateContainer within sandbox \"84c60c362c5e0292dd810c5de3b1b01abcd45e5c8f0c97d9513c4019a42a7178\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29\"" Oct 2 18:49:43.486422 env[1731]: time="2023-10-02T18:49:43.486356189Z" level=info msg="StartContainer for \"fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29\"" Oct 2 18:49:43.490259 env[1731]: time="2023-10-02T18:49:43.490142508Z" level=info msg="CreateContainer within sandbox \"4cd2baa83b0b2a9391485191523ec2bd67a9c033cb778aac9c61365a98470083\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b\"" Oct 2 18:49:43.491737 env[1731]: time="2023-10-02T18:49:43.491253441Z" level=info msg="StartContainer for \"279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b\"" Oct 2 18:49:43.498672 kubelet[2403]: I1002 18:49:43.495519 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-160" Oct 2 18:49:43.498672 kubelet[2403]: E1002 18:49:43.496083 2403 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.160:6443/api/v1/nodes\": dial tcp 172.31.25.160:6443: connect: connection refused" node="ip-172-31-25-160" Oct 2 18:49:43.501195 env[1731]: time="2023-10-02T18:49:43.501128607Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-160,Uid:3b7f375b34b35f5e43fc43b387997126,Namespace:kube-system,Attempt:0,} returns sandbox id \"3815122e8dd67ec16b0bb01d1caac20a6b55e975d0bc5f651dca2812e76228b6\"" Oct 2 18:49:43.506189 env[1731]: time="2023-10-02T18:49:43.506123003Z" level=info msg="CreateContainer within sandbox \"3815122e8dd67ec16b0bb01d1caac20a6b55e975d0bc5f651dca2812e76228b6\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 18:49:43.531126 env[1731]: time="2023-10-02T18:49:43.531061622Z" level=info msg="CreateContainer within sandbox \"3815122e8dd67ec16b0bb01d1caac20a6b55e975d0bc5f651dca2812e76228b6\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"567e95c23d1f5ad86254ca7eea1ae064cc15a3a2fcd576fe8408506d86761f59\"" Oct 2 18:49:43.532732 env[1731]: time="2023-10-02T18:49:43.532681706Z" level=info msg="StartContainer for \"567e95c23d1f5ad86254ca7eea1ae064cc15a3a2fcd576fe8408506d86761f59\"" Oct 2 18:49:43.578940 systemd[1]: Started cri-containerd-fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29.scope. Oct 2 18:49:43.607362 systemd[1]: Started cri-containerd-279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b.scope. Oct 2 18:49:43.641242 systemd[1]: Started cri-containerd-567e95c23d1f5ad86254ca7eea1ae064cc15a3a2fcd576fe8408506d86761f59.scope. Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.695000 audit: BPF prog-id=82 op=LOAD Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2562 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396639326237653036366632636664356236333764366230373038 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2562 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396639326237653036366632636664356236333764366230373038 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.696000 audit: BPF prog-id=83 op=LOAD Oct 2 18:49:43.696000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2562 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396639326237653036366632636664356236333764366230373038 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit: BPF prog-id=84 op=LOAD Oct 2 18:49:43.697000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2562 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396639326237653036366632636664356236333764366230373038 Oct 2 18:49:43.697000 audit: BPF prog-id=84 op=UNLOAD Oct 2 18:49:43.697000 audit: BPF prog-id=83 op=UNLOAD Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.697000 audit: BPF prog-id=85 op=LOAD Oct 2 18:49:43.697000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2562 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396639326237653036366632636664356236333764366230373038 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.719000 audit: BPF prog-id=86 op=LOAD Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2568 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536376539356332336431663561643836323534636137656561316165 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2568 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536376539356332336431663561643836323534636137656561316165 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.720000 audit: BPF prog-id=87 op=LOAD Oct 2 18:49:43.720000 audit[2702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2568 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536376539356332336431663561643836323534636137656561316165 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit: BPF prog-id=88 op=LOAD Oct 2 18:49:43.721000 audit[2702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2568 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536376539356332336431663561643836323534636137656561316165 Oct 2 18:49:43.721000 audit: BPF prog-id=88 op=UNLOAD Oct 2 18:49:43.721000 audit: BPF prog-id=87 op=UNLOAD Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { perfmon } for pid=2702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit[2702]: AVC avc: denied { bpf } for pid=2702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.721000 audit: BPF prog-id=89 op=LOAD Oct 2 18:49:43.721000 audit[2702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2568 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536376539356332336431663561643836323534636137656561316165 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.755000 audit: BPF prog-id=90 op=LOAD Oct 2 18:49:43.756000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.756000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2540 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343933663362393534626363633334333932303033343239306335 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2540 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343933663362393534626363633334333932303033343239306335 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.757000 audit: BPF prog-id=91 op=LOAD Oct 2 18:49:43.757000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2540 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343933663362393534626363633334333932303033343239306335 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.759000 audit: BPF prog-id=92 op=LOAD Oct 2 18:49:43.759000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2540 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343933663362393534626363633334333932303033343239306335 Oct 2 18:49:43.761000 audit: BPF prog-id=92 op=UNLOAD Oct 2 18:49:43.761000 audit: BPF prog-id=91 op=UNLOAD Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { perfmon } for pid=2674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit[2674]: AVC avc: denied { bpf } for pid=2674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:43.761000 audit: BPF prog-id=93 op=LOAD Oct 2 18:49:43.761000 audit[2674]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2540 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343933663362393534626363633334333932303033343239306335 Oct 2 18:49:43.786154 env[1731]: time="2023-10-02T18:49:43.786090962Z" level=info msg="StartContainer for \"279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b\" returns successfully" Oct 2 18:49:43.802150 env[1731]: time="2023-10-02T18:49:43.802086259Z" level=info msg="StartContainer for \"567e95c23d1f5ad86254ca7eea1ae064cc15a3a2fcd576fe8408506d86761f59\" returns successfully" Oct 2 18:49:43.884669 env[1731]: time="2023-10-02T18:49:43.884499592Z" level=info msg="StartContainer for \"fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29\" returns successfully" Oct 2 18:49:45.098166 kubelet[2403]: I1002 18:49:45.098116 2403 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-160" Oct 2 18:49:48.856354 kernel: kauditd_printk_skb: 630 callbacks suppressed Oct 2 18:49:48.856573 kernel: audit: type=1400 audit(1696272588.843:684): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.843000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.843000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.870205 kernel: audit: type=1400 audit(1696272588.843:683): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.843000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40010622d0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.889278 kernel: audit: type=1300 audit(1696272588.843:684): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40010622d0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.843000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:48.904214 kernel: audit: type=1327 audit(1696272588.843:684): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:48.843000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.916608 kernel: audit: type=1400 audit(1696272588.843:685): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.843000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40010623c0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.931916 kernel: audit: type=1300 audit(1696272588.843:685): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40010623c0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.843000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:48.946182 kernel: audit: type=1327 audit(1696272588.843:685): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:48.843000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4006fcc0a0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.961920 kernel: audit: type=1300 audit(1696272588.843:683): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4006fcc0a0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.843000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:48.975118 kernel: audit: type=1327 audit(1696272588.843:683): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:48.876000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.985175 kernel: audit: type=1400 audit(1696272588.876:686): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.876000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=64 a1=40032c0ea0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.876000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:48.882000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.882000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=4006f0ea60 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.882000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:48.882000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:48.882000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=4003406750 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:49:48.882000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:49:49.343017 kubelet[2403]: E1002 18:49:49.342966 2403 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-25-160\" not found" node="ip-172-31-25-160" Oct 2 18:49:49.370172 kubelet[2403]: I1002 18:49:49.370113 2403 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-25-160" Oct 2 18:49:49.792000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:49.792000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000928000 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:49:49.792000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:49.793000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:49.793000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400097c040 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:49:49.793000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:49.947347 kubelet[2403]: I1002 18:49:49.947278 2403 apiserver.go:52] "Watching apiserver" Oct 2 18:49:49.973114 kubelet[2403]: I1002 18:49:49.973061 2403 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 18:49:51.870400 systemd[1]: Reloading. Oct 2 18:49:52.042709 /usr/lib/systemd/system-generators/torcx-generator[2795]: time="2023-10-02T18:49:52Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:49:52.043377 /usr/lib/systemd/system-generators/torcx-generator[2795]: time="2023-10-02T18:49:52Z" level=info msg="torcx already run" Oct 2 18:49:52.124560 kubelet[2403]: I1002 18:49:52.124423 2403 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-25-160" podStartSLOduration=1.124324837 podCreationTimestamp="2023-10-02 18:49:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:49:52.12421377 +0000 UTC m=+11.901608847" watchObservedRunningTime="2023-10-02 18:49:52.124324837 +0000 UTC m=+11.901719914" Oct 2 18:49:52.338630 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:49:52.338669 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:49:52.377422 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.567000 audit: BPF prog-id=94 op=LOAD Oct 2 18:49:52.567000 audit: BPF prog-id=55 op=UNLOAD Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.568000 audit: BPF prog-id=95 op=LOAD Oct 2 18:49:52.568000 audit: BPF prog-id=56 op=UNLOAD Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit: BPF prog-id=96 op=LOAD Oct 2 18:49:52.572000 audit: BPF prog-id=57 op=UNLOAD Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit: BPF prog-id=97 op=LOAD Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.572000 audit: BPF prog-id=98 op=LOAD Oct 2 18:49:52.573000 audit: BPF prog-id=58 op=UNLOAD Oct 2 18:49:52.573000 audit: BPF prog-id=59 op=UNLOAD Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.577000 audit: BPF prog-id=99 op=LOAD Oct 2 18:49:52.577000 audit: BPF prog-id=60 op=UNLOAD Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.580000 audit: BPF prog-id=100 op=LOAD Oct 2 18:49:52.580000 audit: BPF prog-id=70 op=UNLOAD Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.583000 audit: BPF prog-id=101 op=LOAD Oct 2 18:49:52.584000 audit: BPF prog-id=78 op=UNLOAD Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit: BPF prog-id=102 op=LOAD Oct 2 18:49:52.585000 audit: BPF prog-id=82 op=UNLOAD Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit: BPF prog-id=103 op=LOAD Oct 2 18:49:52.586000 audit: BPF prog-id=61 op=UNLOAD Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit: BPF prog-id=104 op=LOAD Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.586000 audit: BPF prog-id=105 op=LOAD Oct 2 18:49:52.586000 audit: BPF prog-id=62 op=UNLOAD Oct 2 18:49:52.586000 audit: BPF prog-id=63 op=UNLOAD Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit: BPF prog-id=106 op=LOAD Oct 2 18:49:52.588000 audit: BPF prog-id=64 op=UNLOAD Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit: BPF prog-id=107 op=LOAD Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.588000 audit: BPF prog-id=108 op=LOAD Oct 2 18:49:52.588000 audit: BPF prog-id=65 op=UNLOAD Oct 2 18:49:52.588000 audit: BPF prog-id=66 op=UNLOAD Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.597000 audit: BPF prog-id=109 op=LOAD Oct 2 18:49:52.597000 audit: BPF prog-id=67 op=UNLOAD Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.599000 audit: BPF prog-id=110 op=LOAD Oct 2 18:49:52.600000 audit: BPF prog-id=86 op=UNLOAD Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.602000 audit: BPF prog-id=111 op=LOAD Oct 2 18:49:52.602000 audit: BPF prog-id=90 op=UNLOAD Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.603000 audit: BPF prog-id=112 op=LOAD Oct 2 18:49:52.603000 audit: BPF prog-id=74 op=UNLOAD Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit: BPF prog-id=113 op=LOAD Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.604000 audit: BPF prog-id=114 op=LOAD Oct 2 18:49:52.604000 audit: BPF prog-id=68 op=UNLOAD Oct 2 18:49:52.604000 audit: BPF prog-id=69 op=UNLOAD Oct 2 18:49:52.646488 systemd[1]: Stopping kubelet.service... Oct 2 18:49:52.647752 kubelet[2403]: I1002 18:49:52.647719 2403 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:49:52.670541 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 18:49:52.670984 systemd[1]: Stopped kubelet.service. Oct 2 18:49:52.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.671090 systemd[1]: kubelet.service: Consumed 2.207s CPU time. Oct 2 18:49:52.675296 systemd[1]: Started kubelet.service. Oct 2 18:49:52.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.814000 audit[2861]: USER_ACCT pid=2861 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.815272 sudo[2861]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 18:49:52.815000 audit[2861]: CRED_REFR pid=2861 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.816535 sudo[2861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 18:49:52.819000 audit[2861]: USER_START pid=2861 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.885863 kubelet[2851]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:49:52.885863 kubelet[2851]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 18:49:52.885863 kubelet[2851]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:49:52.886421 kubelet[2851]: I1002 18:49:52.886062 2851 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:49:52.913490 kubelet[2851]: I1002 18:49:52.913151 2851 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 18:49:52.913490 kubelet[2851]: I1002 18:49:52.913197 2851 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:49:52.914193 kubelet[2851]: I1002 18:49:52.913985 2851 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 18:49:52.918317 kubelet[2851]: I1002 18:49:52.918257 2851 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 18:49:52.921901 kubelet[2851]: I1002 18:49:52.921861 2851 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:49:52.933377 kubelet[2851]: W1002 18:49:52.933317 2851 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:49:52.934692 kubelet[2851]: I1002 18:49:52.934648 2851 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:49:52.935372 kubelet[2851]: I1002 18:49:52.935337 2851 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:49:52.935645 kubelet[2851]: I1002 18:49:52.935605 2851 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 18:49:52.935911 kubelet[2851]: I1002 18:49:52.935704 2851 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 18:49:52.935911 kubelet[2851]: I1002 18:49:52.935727 2851 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 18:49:52.935911 kubelet[2851]: I1002 18:49:52.935831 2851 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:49:52.937282 kubelet[2851]: I1002 18:49:52.937236 2851 kubelet.go:393] "Attempting to sync node with API server" Oct 2 18:49:52.937426 kubelet[2851]: I1002 18:49:52.937289 2851 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:49:52.937426 kubelet[2851]: I1002 18:49:52.937342 2851 kubelet.go:309] "Adding apiserver pod source" Oct 2 18:49:52.937571 kubelet[2851]: I1002 18:49:52.937436 2851 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:49:52.947807 kubelet[2851]: I1002 18:49:52.946497 2851 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:49:52.947807 kubelet[2851]: I1002 18:49:52.947741 2851 server.go:1232] "Started kubelet" Oct 2 18:49:52.948827 kubelet[2851]: I1002 18:49:52.948736 2851 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:49:52.961796 kubelet[2851]: I1002 18:49:52.949927 2851 server.go:462] "Adding debug handlers to kubelet server" Oct 2 18:49:52.961796 kubelet[2851]: I1002 18:49:52.951706 2851 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 18:49:52.961796 kubelet[2851]: I1002 18:49:52.952013 2851 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 18:49:52.962000 audit[2851]: AVC avc: denied { mac_admin } for pid=2851 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.962000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:49:52.962000 audit[2851]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000751020 a1=4000bbc4f8 a2=4000750ff0 a3=25 items=0 ppid=1 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:52.962000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:49:52.971339 kubelet[2851]: I1002 18:49:52.971306 2851 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:49:52.970000 audit[2851]: AVC avc: denied { mac_admin } for pid=2851 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:52.970000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:49:52.970000 audit[2851]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40000d67a0 a1=4000bbc510 a2=40007510b0 a3=25 items=0 ppid=1 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:52.970000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:49:52.971982 kubelet[2851]: I1002 18:49:52.971953 2851 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:49:52.972117 kubelet[2851]: I1002 18:49:52.972095 2851 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:49:52.980679 kubelet[2851]: I1002 18:49:52.980637 2851 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 18:49:52.983228 kubelet[2851]: I1002 18:49:52.983195 2851 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 18:49:52.983696 kubelet[2851]: I1002 18:49:52.983674 2851 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 18:49:53.038817 kubelet[2851]: E1002 18:49:53.038763 2851 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:49:53.039053 kubelet[2851]: E1002 18:49:53.039030 2851 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:49:53.147898 kubelet[2851]: I1002 18:49:53.144479 2851 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-160" Oct 2 18:49:53.184000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521030 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 18:49:53.184000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000ed0340 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:49:53.184000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:53.205478 kubelet[2851]: I1002 18:49:53.205441 2851 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-25-160" Oct 2 18:49:53.205768 kubelet[2851]: I1002 18:49:53.205747 2851 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-25-160" Oct 2 18:49:53.278226 kubelet[2851]: I1002 18:49:53.278186 2851 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 18:49:53.293934 kubelet[2851]: I1002 18:49:53.293895 2851 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 18:49:53.294229 kubelet[2851]: I1002 18:49:53.294205 2851 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 18:49:53.294398 kubelet[2851]: I1002 18:49:53.294377 2851 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 18:49:53.294617 kubelet[2851]: E1002 18:49:53.294597 2851 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 18:49:53.394895 kubelet[2851]: E1002 18:49:53.394860 2851 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 18:49:53.404344 kubelet[2851]: I1002 18:49:53.403482 2851 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 18:49:53.404563 kubelet[2851]: I1002 18:49:53.404534 2851 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 18:49:53.404716 kubelet[2851]: I1002 18:49:53.404695 2851 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:49:53.407389 kubelet[2851]: I1002 18:49:53.405055 2851 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 18:49:53.407682 kubelet[2851]: I1002 18:49:53.407650 2851 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 18:49:53.407817 kubelet[2851]: I1002 18:49:53.407796 2851 policy_none.go:49] "None policy: Start" Oct 2 18:49:53.413952 kubelet[2851]: I1002 18:49:53.412854 2851 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 18:49:53.413952 kubelet[2851]: I1002 18:49:53.412916 2851 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:49:53.413952 kubelet[2851]: I1002 18:49:53.413179 2851 state_mem.go:75] "Updated machine memory state" Oct 2 18:49:53.422206 kubelet[2851]: I1002 18:49:53.422131 2851 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:49:53.421000 audit[2851]: AVC avc: denied { mac_admin } for pid=2851 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:53.421000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:49:53.421000 audit[2851]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40012bb9b0 a1=400136e5a0 a2=40012bb980 a3=25 items=0 ppid=1 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:53.421000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:49:53.423006 kubelet[2851]: I1002 18:49:53.422313 2851 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:49:53.427558 kubelet[2851]: I1002 18:49:53.426617 2851 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:49:53.595929 kubelet[2851]: I1002 18:49:53.595870 2851 topology_manager.go:215] "Topology Admit Handler" podUID="3b7f375b34b35f5e43fc43b387997126" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-25-160" Oct 2 18:49:53.596102 kubelet[2851]: I1002 18:49:53.596055 2851 topology_manager.go:215] "Topology Admit Handler" podUID="d811ced8692d9007f69e1895287daa40" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:53.597198 kubelet[2851]: I1002 18:49:53.597158 2851 topology_manager.go:215] "Topology Admit Handler" podUID="9954afc17093afcf3355872ed3389e7b" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-25-160" Oct 2 18:49:53.612563 kubelet[2851]: E1002 18:49:53.612522 2851 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-25-160\" already exists" pod="kube-system/kube-apiserver-ip-172-31-25-160" Oct 2 18:49:53.614722 kubelet[2851]: E1002 18:49:53.614671 2851 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-25-160\" already exists" pod="kube-system/kube-scheduler-ip-172-31-25-160" Oct 2 18:49:53.690283 kubelet[2851]: I1002 18:49:53.690156 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3b7f375b34b35f5e43fc43b387997126-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-160\" (UID: \"3b7f375b34b35f5e43fc43b387997126\") " pod="kube-system/kube-apiserver-ip-172-31-25-160" Oct 2 18:49:53.690283 kubelet[2851]: I1002 18:49:53.690232 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:53.690486 kubelet[2851]: I1002 18:49:53.690285 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:53.690486 kubelet[2851]: I1002 18:49:53.690350 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3b7f375b34b35f5e43fc43b387997126-ca-certs\") pod \"kube-apiserver-ip-172-31-25-160\" (UID: \"3b7f375b34b35f5e43fc43b387997126\") " pod="kube-system/kube-apiserver-ip-172-31-25-160" Oct 2 18:49:53.690486 kubelet[2851]: I1002 18:49:53.690400 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3b7f375b34b35f5e43fc43b387997126-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-160\" (UID: \"3b7f375b34b35f5e43fc43b387997126\") " pod="kube-system/kube-apiserver-ip-172-31-25-160" Oct 2 18:49:53.690486 kubelet[2851]: I1002 18:49:53.690445 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:53.690486 kubelet[2851]: I1002 18:49:53.690488 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:53.690764 kubelet[2851]: I1002 18:49:53.690535 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d811ced8692d9007f69e1895287daa40-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-160\" (UID: \"d811ced8692d9007f69e1895287daa40\") " pod="kube-system/kube-controller-manager-ip-172-31-25-160" Oct 2 18:49:53.690764 kubelet[2851]: I1002 18:49:53.690580 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9954afc17093afcf3355872ed3389e7b-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-160\" (UID: \"9954afc17093afcf3355872ed3389e7b\") " pod="kube-system/kube-scheduler-ip-172-31-25-160" Oct 2 18:49:53.775000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:53.775000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40012dde80 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:49:53.775000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:53.776000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:53.776000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40012ddfc0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:49:53.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:53.779000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:53.779000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400091dc80 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:49:53.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:53.780000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:49:53.780000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400091dcc0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:49:53.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:49:53.940539 kubelet[2851]: I1002 18:49:53.940418 2851 apiserver.go:52] "Watching apiserver" Oct 2 18:49:53.983891 kubelet[2851]: I1002 18:49:53.983847 2851 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 18:49:54.044037 sudo[2861]: pam_unix(sudo:session): session closed for user root Oct 2 18:49:54.043000 audit[2861]: USER_END pid=2861 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:54.046582 kernel: kauditd_printk_skb: 290 callbacks suppressed Oct 2 18:49:54.046673 kernel: audit: type=1106 audit(1696272594.043:948): pid=2861 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:54.043000 audit[2861]: CRED_DISP pid=2861 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:54.065278 kernel: audit: type=1104 audit(1696272594.043:949): pid=2861 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:54.161461 kubelet[2851]: I1002 18:49:54.161398 2851 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-25-160" podStartSLOduration=2.161255653 podCreationTimestamp="2023-10-02 18:49:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:49:54.141065542 +0000 UTC m=+1.424141278" watchObservedRunningTime="2023-10-02 18:49:54.161255653 +0000 UTC m=+1.444331389" Oct 2 18:49:54.355697 kubelet[2851]: I1002 18:49:54.355634 2851 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-25-160" podStartSLOduration=1.355581636 podCreationTimestamp="2023-10-02 18:49:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:49:54.183927067 +0000 UTC m=+1.467002827" watchObservedRunningTime="2023-10-02 18:49:54.355581636 +0000 UTC m=+1.638657372" Oct 2 18:49:57.148190 sudo[1992]: pam_unix(sudo:session): session closed for user root Oct 2 18:49:57.148000 audit[1992]: USER_END pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.148000 audit[1992]: CRED_DISP pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.166535 kernel: audit: type=1106 audit(1696272597.148:950): pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.166732 kernel: audit: type=1104 audit(1696272597.148:951): pid=1992 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.181117 sshd[1989]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:57.183000 audit[1989]: USER_END pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.187713 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 18:49:57.188078 systemd[1]: session-7.scope: Consumed 16.368s CPU time. Oct 2 18:49:57.189977 systemd[1]: sshd@6-172.31.25.160:22-139.178.89.65:39160.service: Deactivated successfully. Oct 2 18:49:57.184000 audit[1989]: CRED_DISP pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.205408 kernel: audit: type=1106 audit(1696272597.183:952): pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.205532 kernel: audit: type=1104 audit(1696272597.184:953): pid=1989 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:57.205442 systemd-logind[1721]: Session 7 logged out. Waiting for processes to exit. Oct 2 18:49:57.184000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.160:22-139.178.89.65:39160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.215165 kernel: audit: type=1131 audit(1696272597.184:954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.160:22-139.178.89.65:39160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:57.215835 systemd-logind[1721]: Removed session 7. Oct 2 18:50:06.069564 kubelet[2851]: I1002 18:50:06.069517 2851 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 18:50:06.070715 env[1731]: time="2023-10-02T18:50:06.070643532Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 18:50:06.072040 kubelet[2851]: I1002 18:50:06.071994 2851 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 18:50:06.663883 kubelet[2851]: I1002 18:50:06.663841 2851 topology_manager.go:215] "Topology Admit Handler" podUID="8c57e8c8-b13f-4a02-a42b-6431da81c8cf" podNamespace="kube-system" podName="kube-proxy-h4578" Oct 2 18:50:06.675475 systemd[1]: Created slice kubepods-besteffort-pod8c57e8c8_b13f_4a02_a42b_6431da81c8cf.slice. Oct 2 18:50:06.679171 kubelet[2851]: W1002 18:50:06.679119 2851 reflector.go:535] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.679343 kubelet[2851]: E1002 18:50:06.679188 2851 reflector.go:147] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.679343 kubelet[2851]: W1002 18:50:06.679220 2851 reflector.go:535] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.679343 kubelet[2851]: E1002 18:50:06.679268 2851 reflector.go:147] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.719564 kubelet[2851]: I1002 18:50:06.719482 2851 topology_manager.go:215] "Topology Admit Handler" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" podNamespace="kube-system" podName="cilium-r7dnz" Oct 2 18:50:06.731979 systemd[1]: Created slice kubepods-burstable-pod49549496_7e54_45dd_9052_51c33fe7ad79.slice. Oct 2 18:50:06.747723 kubelet[2851]: W1002 18:50:06.747644 2851 reflector.go:535] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.747723 kubelet[2851]: E1002 18:50:06.747727 2851 reflector.go:147] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.748482 kubelet[2851]: W1002 18:50:06.748434 2851 reflector.go:535] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.748651 kubelet[2851]: E1002 18:50:06.748508 2851 reflector.go:147] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.748938 kubelet[2851]: W1002 18:50:06.748897 2851 reflector.go:535] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.749085 kubelet[2851]: E1002 18:50:06.748941 2851 reflector.go:147] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-25-160" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-160' and this object Oct 2 18:50:06.768544 kubelet[2851]: I1002 18:50:06.768461 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8c57e8c8-b13f-4a02-a42b-6431da81c8cf-xtables-lock\") pod \"kube-proxy-h4578\" (UID: \"8c57e8c8-b13f-4a02-a42b-6431da81c8cf\") " pod="kube-system/kube-proxy-h4578" Oct 2 18:50:06.768950 kubelet[2851]: I1002 18:50:06.768917 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-xtables-lock\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.769171 kubelet[2851]: I1002 18:50:06.769148 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-host-proc-sys-net\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.769351 kubelet[2851]: I1002 18:50:06.769329 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-host-proc-sys-kernel\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.769719 kubelet[2851]: I1002 18:50:06.769659 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8c57e8c8-b13f-4a02-a42b-6431da81c8cf-lib-modules\") pod \"kube-proxy-h4578\" (UID: \"8c57e8c8-b13f-4a02-a42b-6431da81c8cf\") " pod="kube-system/kube-proxy-h4578" Oct 2 18:50:06.770032 kubelet[2851]: I1002 18:50:06.770007 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cni-path\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.770218 kubelet[2851]: I1002 18:50:06.770195 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/8c57e8c8-b13f-4a02-a42b-6431da81c8cf-kube-proxy\") pod \"kube-proxy-h4578\" (UID: \"8c57e8c8-b13f-4a02-a42b-6431da81c8cf\") " pod="kube-system/kube-proxy-h4578" Oct 2 18:50:06.770391 kubelet[2851]: I1002 18:50:06.770369 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-krtvg\" (UniqueName: \"kubernetes.io/projected/8c57e8c8-b13f-4a02-a42b-6431da81c8cf-kube-api-access-krtvg\") pod \"kube-proxy-h4578\" (UID: \"8c57e8c8-b13f-4a02-a42b-6431da81c8cf\") " pod="kube-system/kube-proxy-h4578" Oct 2 18:50:06.770542 kubelet[2851]: I1002 18:50:06.770521 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-run\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.770704 kubelet[2851]: I1002 18:50:06.770682 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-hostproc\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.770882 kubelet[2851]: I1002 18:50:06.770859 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-cgroup\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.771058 kubelet[2851]: I1002 18:50:06.771036 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-config-path\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.771248 kubelet[2851]: I1002 18:50:06.771215 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pxsfc\" (UniqueName: \"kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-kube-api-access-pxsfc\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.771448 kubelet[2851]: I1002 18:50:06.771425 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-bpf-maps\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.771638 kubelet[2851]: I1002 18:50:06.771614 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-lib-modules\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.771819 kubelet[2851]: I1002 18:50:06.771793 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/49549496-7e54-45dd-9052-51c33fe7ad79-clustermesh-secrets\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.772008 kubelet[2851]: I1002 18:50:06.771986 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-hubble-tls\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:06.772173 kubelet[2851]: I1002 18:50:06.772151 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-etc-cni-netd\") pod \"cilium-r7dnz\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " pod="kube-system/cilium-r7dnz" Oct 2 18:50:07.047690 kubelet[2851]: I1002 18:50:07.047629 2851 topology_manager.go:215] "Topology Admit Handler" podUID="55f72970-0b95-4cbe-8cb9-841c6c7797b1" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-tx6zq" Oct 2 18:50:07.062898 systemd[1]: Created slice kubepods-besteffort-pod55f72970_0b95_4cbe_8cb9_841c6c7797b1.slice. Oct 2 18:50:07.074635 kubelet[2851]: I1002 18:50:07.074592 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m96fr\" (UniqueName: \"kubernetes.io/projected/55f72970-0b95-4cbe-8cb9-841c6c7797b1-kube-api-access-m96fr\") pod \"cilium-operator-6bc8ccdb58-tx6zq\" (UID: \"55f72970-0b95-4cbe-8cb9-841c6c7797b1\") " pod="kube-system/cilium-operator-6bc8ccdb58-tx6zq" Oct 2 18:50:07.075449 kubelet[2851]: I1002 18:50:07.075419 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/55f72970-0b95-4cbe-8cb9-841c6c7797b1-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-tx6zq\" (UID: \"55f72970-0b95-4cbe-8cb9-841c6c7797b1\") " pod="kube-system/cilium-operator-6bc8ccdb58-tx6zq" Oct 2 18:50:07.874733 kubelet[2851]: E1002 18:50:07.874686 2851 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 18:50:07.874977 kubelet[2851]: E1002 18:50:07.874953 2851 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-r7dnz: failed to sync secret cache: timed out waiting for the condition Oct 2 18:50:07.875184 kubelet[2851]: E1002 18:50:07.875162 2851 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-hubble-tls podName:49549496-7e54-45dd-9052-51c33fe7ad79 nodeName:}" failed. No retries permitted until 2023-10-02 18:50:08.375130168 +0000 UTC m=+15.658205880 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-hubble-tls") pod "cilium-r7dnz" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79") : failed to sync secret cache: timed out waiting for the condition Oct 2 18:50:07.875352 kubelet[2851]: E1002 18:50:07.874689 2851 configmap.go:199] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Oct 2 18:50:07.875575 kubelet[2851]: E1002 18:50:07.875536 2851 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/8c57e8c8-b13f-4a02-a42b-6431da81c8cf-kube-proxy podName:8c57e8c8-b13f-4a02-a42b-6431da81c8cf nodeName:}" failed. No retries permitted until 2023-10-02 18:50:08.375512903 +0000 UTC m=+15.658588627 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/8c57e8c8-b13f-4a02-a42b-6431da81c8cf-kube-proxy") pod "kube-proxy-h4578" (UID: "8c57e8c8-b13f-4a02-a42b-6431da81c8cf") : failed to sync configmap cache: timed out waiting for the condition Oct 2 18:50:07.875754 kubelet[2851]: E1002 18:50:07.874716 2851 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 18:50:07.875967 kubelet[2851]: E1002 18:50:07.875942 2851 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/49549496-7e54-45dd-9052-51c33fe7ad79-clustermesh-secrets podName:49549496-7e54-45dd-9052-51c33fe7ad79 nodeName:}" failed. No retries permitted until 2023-10-02 18:50:08.375916437 +0000 UTC m=+15.658992161 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/49549496-7e54-45dd-9052-51c33fe7ad79-clustermesh-secrets") pod "cilium-r7dnz" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79") : failed to sync secret cache: timed out waiting for the condition Oct 2 18:50:07.876163 kubelet[2851]: E1002 18:50:07.874741 2851 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 18:50:07.876315 kubelet[2851]: E1002 18:50:07.876294 2851 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-config-path podName:49549496-7e54-45dd-9052-51c33fe7ad79 nodeName:}" failed. No retries permitted until 2023-10-02 18:50:08.37627512 +0000 UTC m=+15.659350844 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-config-path") pod "cilium-r7dnz" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79") : failed to sync configmap cache: timed out waiting for the condition Oct 2 18:50:08.269886 env[1731]: time="2023-10-02T18:50:08.269808284Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-tx6zq,Uid:55f72970-0b95-4cbe-8cb9-841c6c7797b1,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:08.315400 env[1731]: time="2023-10-02T18:50:08.315189243Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:08.315400 env[1731]: time="2023-10-02T18:50:08.315285248Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:08.315400 env[1731]: time="2023-10-02T18:50:08.315312456Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:08.316045 env[1731]: time="2023-10-02T18:50:08.315976829Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859 pid=2927 runtime=io.containerd.runc.v2 Oct 2 18:50:08.362515 systemd[1]: Started cri-containerd-b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859.scope. Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.433128 kernel: audit: type=1400 audit(1696272608.416:955): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.433280 kernel: audit: type=1400 audit(1696272608.416:956): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.440938 kernel: audit: type=1400 audit(1696272608.416:957): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.441042 kernel: audit: type=1400 audit(1696272608.416:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.457820 kernel: audit: type=1400 audit(1696272608.416:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.467785 kernel: audit: type=1400 audit(1696272608.416:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.467923 kernel: audit: type=1400 audit(1696272608.416:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.475822 kernel: audit: type=1400 audit(1696272608.416:962): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.490787 kernel: audit: type=1400 audit(1696272608.416:963): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.492282 env[1731]: time="2023-10-02T18:50:08.492228422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-h4578,Uid:8c57e8c8-b13f-4a02-a42b-6431da81c8cf,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:08.498619 kernel: audit: type=1400 audit(1696272608.416:964): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.416000 audit: BPF prog-id=115 op=LOAD Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343866343062656461663466353233666635643336373364346639 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343866343062656461663466353233666635643336373364346639 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.417000 audit: BPF prog-id=116 op=LOAD Oct 2 18:50:08.417000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343866343062656461663466353233666635643336373364346639 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.425000 audit: BPF prog-id=117 op=LOAD Oct 2 18:50:08.425000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343866343062656461663466353233666635643336373364346639 Oct 2 18:50:08.432000 audit: BPF prog-id=117 op=UNLOAD Oct 2 18:50:08.432000 audit: BPF prog-id=116 op=UNLOAD Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.432000 audit: BPF prog-id=118 op=LOAD Oct 2 18:50:08.432000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239343866343062656461663466353233666635643336373364346639 Oct 2 18:50:08.532528 env[1731]: time="2023-10-02T18:50:08.532376263Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-tx6zq,Uid:55f72970-0b95-4cbe-8cb9-841c6c7797b1,Namespace:kube-system,Attempt:0,} returns sandbox id \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\"" Oct 2 18:50:08.545162 env[1731]: time="2023-10-02T18:50:08.545095055Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-r7dnz,Uid:49549496-7e54-45dd-9052-51c33fe7ad79,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:08.548391 env[1731]: time="2023-10-02T18:50:08.546880467Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:08.548391 env[1731]: time="2023-10-02T18:50:08.547372491Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:08.548391 env[1731]: time="2023-10-02T18:50:08.547406469Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:08.548391 env[1731]: time="2023-10-02T18:50:08.548096838Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4662ae3845c62cfd0de8b4ca6f6285c671302f59a30f09816b98681ee8af7bdd pid=2969 runtime=io.containerd.runc.v2 Oct 2 18:50:08.552335 env[1731]: time="2023-10-02T18:50:08.552276069Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 18:50:08.613475 systemd[1]: Started cri-containerd-4662ae3845c62cfd0de8b4ca6f6285c671302f59a30f09816b98681ee8af7bdd.scope. Oct 2 18:50:08.655810 env[1731]: time="2023-10-02T18:50:08.651730228Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:08.655810 env[1731]: time="2023-10-02T18:50:08.651843047Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:08.655810 env[1731]: time="2023-10-02T18:50:08.651869703Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:08.655810 env[1731]: time="2023-10-02T18:50:08.653258520Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9 pid=2997 runtime=io.containerd.runc.v2 Oct 2 18:50:08.705269 systemd[1]: Started cri-containerd-82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9.scope. Oct 2 18:50:08.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.719000 audit: BPF prog-id=119 op=LOAD Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2969 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363261653338343563363263666430646538623463613666363238 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2969 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363261653338343563363263666430646538623463613666363238 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.721000 audit: BPF prog-id=120 op=LOAD Oct 2 18:50:08.721000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2969 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363261653338343563363263666430646538623463613666363238 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.723000 audit: BPF prog-id=121 op=LOAD Oct 2 18:50:08.723000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2969 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363261653338343563363263666430646538623463613666363238 Oct 2 18:50:08.724000 audit: BPF prog-id=121 op=UNLOAD Oct 2 18:50:08.725000 audit: BPF prog-id=120 op=UNLOAD Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { perfmon } for pid=2980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit[2980]: AVC avc: denied { bpf } for pid=2980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.725000 audit: BPF prog-id=122 op=LOAD Oct 2 18:50:08.725000 audit[2980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2969 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436363261653338343563363263666430646538623463613666363238 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.769000 audit: BPF prog-id=123 op=LOAD Oct 2 18:50:08.772000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.772000 audit[3011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2997 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832653330616337613531353636383536616539623061386335653666 Oct 2 18:50:08.772000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.772000 audit[3011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2997 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832653330616337613531353636383536616539623061386335653666 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit: BPF prog-id=124 op=LOAD Oct 2 18:50:08.773000 audit[3011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2997 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832653330616337613531353636383536616539623061386335653666 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit: BPF prog-id=125 op=LOAD Oct 2 18:50:08.773000 audit[3011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2997 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832653330616337613531353636383536616539623061386335653666 Oct 2 18:50:08.773000 audit: BPF prog-id=125 op=UNLOAD Oct 2 18:50:08.773000 audit: BPF prog-id=124 op=UNLOAD Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { perfmon } for pid=3011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit[3011]: AVC avc: denied { bpf } for pid=3011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.773000 audit: BPF prog-id=126 op=LOAD Oct 2 18:50:08.773000 audit[3011]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2997 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832653330616337613531353636383536616539623061386335653666 Oct 2 18:50:08.796234 env[1731]: time="2023-10-02T18:50:08.791625869Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-h4578,Uid:8c57e8c8-b13f-4a02-a42b-6431da81c8cf,Namespace:kube-system,Attempt:0,} returns sandbox id \"4662ae3845c62cfd0de8b4ca6f6285c671302f59a30f09816b98681ee8af7bdd\"" Oct 2 18:50:08.805453 env[1731]: time="2023-10-02T18:50:08.805386150Z" level=info msg="CreateContainer within sandbox \"4662ae3845c62cfd0de8b4ca6f6285c671302f59a30f09816b98681ee8af7bdd\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 18:50:08.829503 env[1731]: time="2023-10-02T18:50:08.829445553Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-r7dnz,Uid:49549496-7e54-45dd-9052-51c33fe7ad79,Namespace:kube-system,Attempt:0,} returns sandbox id \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\"" Oct 2 18:50:08.844815 env[1731]: time="2023-10-02T18:50:08.844706234Z" level=info msg="CreateContainer within sandbox \"4662ae3845c62cfd0de8b4ca6f6285c671302f59a30f09816b98681ee8af7bdd\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"7bbd47fce50b167eec38e6ad532eafa185b5cc4f231a00b377d64834300bc5ee\"" Oct 2 18:50:08.848113 env[1731]: time="2023-10-02T18:50:08.848053160Z" level=info msg="StartContainer for \"7bbd47fce50b167eec38e6ad532eafa185b5cc4f231a00b377d64834300bc5ee\"" Oct 2 18:50:08.898877 systemd[1]: Started cri-containerd-7bbd47fce50b167eec38e6ad532eafa185b5cc4f231a00b377d64834300bc5ee.scope. Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2969 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762626434376663653530623136376565633338653661643533326561 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit: BPF prog-id=127 op=LOAD Oct 2 18:50:08.952000 audit[3054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2969 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762626434376663653530623136376565633338653661643533326561 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit: BPF prog-id=128 op=LOAD Oct 2 18:50:08.952000 audit[3054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2969 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762626434376663653530623136376565633338653661643533326561 Oct 2 18:50:08.952000 audit: BPF prog-id=128 op=UNLOAD Oct 2 18:50:08.952000 audit: BPF prog-id=127 op=UNLOAD Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { perfmon } for pid=3054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit[3054]: AVC avc: denied { bpf } for pid=3054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:08.952000 audit: BPF prog-id=129 op=LOAD Oct 2 18:50:08.952000 audit[3054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2969 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:08.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762626434376663653530623136376565633338653661643533326561 Oct 2 18:50:08.992936 env[1731]: time="2023-10-02T18:50:08.992849523Z" level=info msg="StartContainer for \"7bbd47fce50b167eec38e6ad532eafa185b5cc4f231a00b377d64834300bc5ee\" returns successfully" Oct 2 18:50:09.184000 audit[3107]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.184000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe7040f20 a2=0 a3=ffff8ca4f6c0 items=0 ppid=3065 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.184000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:50:09.188000 audit[3109]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.188000 audit[3109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8c26910 a2=0 a3=ffff81f296c0 items=0 ppid=3065 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:50:09.189000 audit[3108]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.189000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffa464da0 a2=0 a3=ffffbe2e46c0 items=0 ppid=3065 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.189000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:50:09.195000 audit[3110]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.195000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb8e5e30 a2=0 a3=ffff9f0056c0 items=0 ppid=3065 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.195000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:50:09.201000 audit[3111]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3111 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.201000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdfd03200 a2=0 a3=ffff88c966c0 items=0 ppid=3065 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.201000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:50:09.214000 audit[3112]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.214000 audit[3112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffedd8dea0 a2=0 a3=ffff830da6c0 items=0 ppid=3065 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.214000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:50:09.310000 audit[3113]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3113 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.310000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe49fc1a0 a2=0 a3=ffffb6be96c0 items=0 ppid=3065 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.310000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:50:09.319000 audit[3115]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.319000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc15cb3f0 a2=0 a3=ffffb3fb86c0 items=0 ppid=3065 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 18:50:09.334000 audit[3118]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.334000 audit[3118]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc6caf0f0 a2=0 a3=ffff868956c0 items=0 ppid=3065 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.334000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 18:50:09.339000 audit[3119]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.339000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3535f20 a2=0 a3=ffff8bf6d6c0 items=0 ppid=3065 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:50:09.347000 audit[3121]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.347000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdd941260 a2=0 a3=ffffbb42b6c0 items=0 ppid=3065 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:50:09.352000 audit[3122]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3122 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.352000 audit[3122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdcb7fce0 a2=0 a3=ffffbcd666c0 items=0 ppid=3065 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.352000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:50:09.360000 audit[3124]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.360000 audit[3124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc968c640 a2=0 a3=ffff8c45f6c0 items=0 ppid=3065 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.360000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:50:09.382000 audit[3127]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.382000 audit[3127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffda714580 a2=0 a3=ffff935cc6c0 items=0 ppid=3065 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.382000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 18:50:09.396000 audit[3128]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3128 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.396000 audit[3128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff750fea0 a2=0 a3=ffffb4b5e6c0 items=0 ppid=3065 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.396000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:50:09.412000 audit[3130]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3130 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.412000 audit[3130]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdafdf240 a2=0 a3=ffffab3b56c0 items=0 ppid=3065 pid=3130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:50:09.418000 audit[3131]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3131 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.418000 audit[3131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9f53730 a2=0 a3=ffffa3c646c0 items=0 ppid=3065 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.418000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:50:09.430000 audit[3133]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.430000 audit[3133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff83924f0 a2=0 a3=ffff848b46c0 items=0 ppid=3065 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.430000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:50:09.443000 audit[3136]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.443000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff12ab010 a2=0 a3=ffffaa10f6c0 items=0 ppid=3065 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:50:09.464000 audit[3139]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.464000 audit[3139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff34267d0 a2=0 a3=ffff9e98d6c0 items=0 ppid=3065 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:50:09.469000 audit[3140]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3140 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.469000 audit[3140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdba9e550 a2=0 a3=ffff898fd6c0 items=0 ppid=3065 pid=3140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.469000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:50:09.478000 audit[3142]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.478000 audit[3142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffefe4fa00 a2=0 a3=ffff8cab56c0 items=0 ppid=3065 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.478000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:50:09.490000 audit[3145]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.490000 audit[3145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd47ce0d0 a2=0 a3=ffffbd60f6c0 items=0 ppid=3065 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.490000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:50:09.494000 audit[3146]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.494000 audit[3146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed856ce0 a2=0 a3=ffff90a896c0 items=0 ppid=3065 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.494000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:50:09.506000 audit[3148]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:09.506000 audit[3148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc0f34e70 a2=0 a3=ffff95b146c0 items=0 ppid=3065 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.506000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:50:09.570000 audit[3154]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:50:09.570000 audit[3154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=fffff22eb7c0 a2=0 a3=ffff873ff6c0 items=0 ppid=3065 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.570000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:50:09.589000 audit[3154]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:50:09.589000 audit[3154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff22eb7c0 a2=0 a3=ffff873ff6c0 items=0 ppid=3065 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.589000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:50:09.594000 audit[3160]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.594000 audit[3160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd1bec950 a2=0 a3=ffffa1cf76c0 items=0 ppid=3065 pid=3160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.594000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:50:09.603000 audit[3162]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.603000 audit[3162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcfb85ce0 a2=0 a3=ffff9e2c86c0 items=0 ppid=3065 pid=3162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.603000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 18:50:09.618000 audit[3165]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.618000 audit[3165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdbcc8ac0 a2=0 a3=ffff931a46c0 items=0 ppid=3065 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.618000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 18:50:09.623000 audit[3166]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.623000 audit[3166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0507810 a2=0 a3=ffffbf2d86c0 items=0 ppid=3065 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.623000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:50:09.632000 audit[3168]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.632000 audit[3168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd10b8710 a2=0 a3=ffff9dcd46c0 items=0 ppid=3065 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.632000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:50:09.636000 audit[3169]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.636000 audit[3169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf1340a0 a2=0 a3=ffffbcfbf6c0 items=0 ppid=3065 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.636000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:50:09.644000 audit[3171]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3171 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.644000 audit[3171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd7fda240 a2=0 a3=ffff894236c0 items=0 ppid=3065 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.644000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 18:50:09.666000 audit[3174]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.666000 audit[3174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc870e0f0 a2=0 a3=ffff9e5576c0 items=0 ppid=3065 pid=3174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.666000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:50:09.671000 audit[3175]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3175 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.671000 audit[3175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3912370 a2=0 a3=ffffafe0c6c0 items=0 ppid=3065 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:50:09.680000 audit[3177]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.680000 audit[3177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc4b19830 a2=0 a3=ffffaa2aa6c0 items=0 ppid=3065 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.680000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:50:09.689000 audit[3178]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3178 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.689000 audit[3178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff40ff550 a2=0 a3=ffff945b06c0 items=0 ppid=3065 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.689000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:50:09.710000 audit[3180]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3180 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.710000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc0652de0 a2=0 a3=ffff9acd46c0 items=0 ppid=3065 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.710000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:50:09.728000 audit[3183]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3183 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.728000 audit[3183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcdfc56b0 a2=0 a3=ffffb50b26c0 items=0 ppid=3065 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.728000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:50:09.744000 audit[3186]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3186 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.744000 audit[3186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd02ee5d0 a2=0 a3=ffff9c1266c0 items=0 ppid=3065 pid=3186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.744000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 18:50:09.748000 audit[3187]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3187 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.748000 audit[3187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdb383e40 a2=0 a3=ffff983386c0 items=0 ppid=3065 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.748000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:50:09.758000 audit[3189]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3189 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.758000 audit[3189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe1b59660 a2=0 a3=ffffac7926c0 items=0 ppid=3065 pid=3189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.758000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:50:09.775000 audit[3192]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3192 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.775000 audit[3192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe9236790 a2=0 a3=ffffaacb26c0 items=0 ppid=3065 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.775000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:50:09.779000 audit[3193]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3193 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.779000 audit[3193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff99e4540 a2=0 a3=ffff84c886c0 items=0 ppid=3065 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.779000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:50:09.793000 audit[3195]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3195 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.793000 audit[3195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffff7ce1170 a2=0 a3=ffff9b9686c0 items=0 ppid=3065 pid=3195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.793000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:50:09.807000 audit[3196]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3196 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.807000 audit[3196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc2f19680 a2=0 a3=ffffaeb6d6c0 items=0 ppid=3065 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.807000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:50:09.817071 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1020309497.mount: Deactivated successfully. Oct 2 18:50:09.826000 audit[3198]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3198 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.826000 audit[3198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc80b8960 a2=0 a3=ffffbd2056c0 items=0 ppid=3065 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.826000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:50:09.859000 audit[3201]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:09.859000 audit[3201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd74ae700 a2=0 a3=ffff86a986c0 items=0 ppid=3065 pid=3201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.859000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:50:09.886000 audit[3203]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:50:09.886000 audit[3203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffcd58bad0 a2=0 a3=ffff85e8a6c0 items=0 ppid=3065 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.886000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:50:09.887000 audit[3203]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:50:09.887000 audit[3203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffcd58bad0 a2=0 a3=ffff85e8a6c0 items=0 ppid=3065 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:09.887000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:50:10.953480 env[1731]: time="2023-10-02T18:50:10.953398232Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:10.956914 env[1731]: time="2023-10-02T18:50:10.956851159Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:10.959880 env[1731]: time="2023-10-02T18:50:10.959830009Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:10.960891 env[1731]: time="2023-10-02T18:50:10.960842782Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 18:50:10.964438 env[1731]: time="2023-10-02T18:50:10.963351491Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 18:50:10.967525 env[1731]: time="2023-10-02T18:50:10.967334604Z" level=info msg="CreateContainer within sandbox \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 18:50:11.003730 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount257557796.mount: Deactivated successfully. Oct 2 18:50:11.012850 env[1731]: time="2023-10-02T18:50:11.012760571Z" level=info msg="CreateContainer within sandbox \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\"" Oct 2 18:50:11.015606 env[1731]: time="2023-10-02T18:50:11.014036194Z" level=info msg="StartContainer for \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\"" Oct 2 18:50:11.068527 systemd[1]: Started cri-containerd-c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763.scope. Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.123000 audit: BPF prog-id=130 op=LOAD Oct 2 18:50:11.124000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.124000 audit[3212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2927 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:11.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363637633330646433363463333065313634623161323131333039 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2927 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:11.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363637633330646433363463333065313634623161323131333039 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.125000 audit: BPF prog-id=131 op=LOAD Oct 2 18:50:11.125000 audit[3212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2927 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:11.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363637633330646433363463333065313634623161323131333039 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.126000 audit: BPF prog-id=132 op=LOAD Oct 2 18:50:11.126000 audit[3212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2927 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:11.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363637633330646433363463333065313634623161323131333039 Oct 2 18:50:11.127000 audit: BPF prog-id=132 op=UNLOAD Oct 2 18:50:11.128000 audit: BPF prog-id=131 op=UNLOAD Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:11.128000 audit: BPF prog-id=133 op=LOAD Oct 2 18:50:11.128000 audit[3212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2927 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:11.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363637633330646433363463333065313634623161323131333039 Oct 2 18:50:11.165301 env[1731]: time="2023-10-02T18:50:11.165231686Z" level=info msg="StartContainer for \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\" returns successfully" Oct 2 18:50:11.252000 audit[3224]: AVC avc: denied { map_create } for pid=3224 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c584,c605 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c584,c605 tclass=bpf permissive=0 Oct 2 18:50:11.252000 audit[3224]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400068f768 a2=48 a3=0 items=0 ppid=2927 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c584,c605 key=(null) Oct 2 18:50:11.252000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 18:50:11.415003 kubelet[2851]: I1002 18:50:11.414945 2851 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-h4578" podStartSLOduration=5.414878525 podCreationTimestamp="2023-10-02 18:50:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 18:50:09.394290808 +0000 UTC m=+16.677366532" watchObservedRunningTime="2023-10-02 18:50:11.414878525 +0000 UTC m=+18.697954249" Oct 2 18:50:11.997975 systemd[1]: run-containerd-runc-k8s.io-c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763-runc.SDOVdG.mount: Deactivated successfully. Oct 2 18:50:13.322645 kubelet[2851]: I1002 18:50:13.322597 2851 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-tx6zq" podStartSLOduration=4.90144951 podCreationTimestamp="2023-10-02 18:50:06 +0000 UTC" firstStartedPulling="2023-10-02 18:50:08.540582995 +0000 UTC m=+15.823658731" lastFinishedPulling="2023-10-02 18:50:10.961675117 +0000 UTC m=+18.244750925" observedRunningTime="2023-10-02 18:50:11.416113426 +0000 UTC m=+18.699189175" watchObservedRunningTime="2023-10-02 18:50:13.322541704 +0000 UTC m=+20.605617440" Oct 2 18:50:18.713104 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2671804719.mount: Deactivated successfully. Oct 2 18:50:22.822865 env[1731]: time="2023-10-02T18:50:22.822645142Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:22.826072 env[1731]: time="2023-10-02T18:50:22.826022242Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:22.829307 env[1731]: time="2023-10-02T18:50:22.829235736Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:22.830703 env[1731]: time="2023-10-02T18:50:22.830647691Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 18:50:22.837211 env[1731]: time="2023-10-02T18:50:22.837150781Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 18:50:22.854760 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1297744381.mount: Deactivated successfully. Oct 2 18:50:22.866360 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2245096931.mount: Deactivated successfully. Oct 2 18:50:22.873646 env[1731]: time="2023-10-02T18:50:22.873560182Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\"" Oct 2 18:50:22.874935 env[1731]: time="2023-10-02T18:50:22.874880936Z" level=info msg="StartContainer for \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\"" Oct 2 18:50:22.916723 systemd[1]: Started cri-containerd-54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f.scope. Oct 2 18:50:22.964867 systemd[1]: cri-containerd-54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f.scope: Deactivated successfully. Oct 2 18:50:23.657801 env[1731]: time="2023-10-02T18:50:23.654398317Z" level=info msg="shim disconnected" id=54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f Oct 2 18:50:23.657801 env[1731]: time="2023-10-02T18:50:23.654539492Z" level=warning msg="cleaning up after shim disconnected" id=54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f namespace=k8s.io Oct 2 18:50:23.657801 env[1731]: time="2023-10-02T18:50:23.654562343Z" level=info msg="cleaning up dead shim" Oct 2 18:50:23.682619 env[1731]: time="2023-10-02T18:50:23.682532283Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:50:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3269 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:50:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:50:23.683188 env[1731]: time="2023-10-02T18:50:23.683037190Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 18:50:23.683463 env[1731]: time="2023-10-02T18:50:23.683407368Z" level=error msg="Failed to pipe stdout of container \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\"" error="reading from a closed fifo" Oct 2 18:50:23.683720 env[1731]: time="2023-10-02T18:50:23.683643763Z" level=error msg="Failed to pipe stderr of container \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\"" error="reading from a closed fifo" Oct 2 18:50:23.686251 env[1731]: time="2023-10-02T18:50:23.686159875Z" level=error msg="StartContainer for \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:50:23.687550 kubelet[2851]: E1002 18:50:23.686708 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f" Oct 2 18:50:23.687550 kubelet[2851]: E1002 18:50:23.687419 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:50:23.687550 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:50:23.687550 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:50:23.688342 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pxsfc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:50:23.688504 kubelet[2851]: E1002 18:50:23.687499 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:50:23.850313 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f-rootfs.mount: Deactivated successfully. Oct 2 18:50:24.443889 env[1731]: time="2023-10-02T18:50:24.443811507Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 18:50:24.468963 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2761077606.mount: Deactivated successfully. Oct 2 18:50:24.479510 env[1731]: time="2023-10-02T18:50:24.479436679Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\"" Oct 2 18:50:24.482625 env[1731]: time="2023-10-02T18:50:24.481202976Z" level=info msg="StartContainer for \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\"" Oct 2 18:50:24.538643 systemd[1]: Started cri-containerd-a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac.scope. Oct 2 18:50:24.569710 systemd[1]: cri-containerd-a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac.scope: Deactivated successfully. Oct 2 18:50:24.591348 env[1731]: time="2023-10-02T18:50:24.591269245Z" level=info msg="shim disconnected" id=a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac Oct 2 18:50:24.591348 env[1731]: time="2023-10-02T18:50:24.591346115Z" level=warning msg="cleaning up after shim disconnected" id=a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac namespace=k8s.io Oct 2 18:50:24.591701 env[1731]: time="2023-10-02T18:50:24.591368942Z" level=info msg="cleaning up dead shim" Oct 2 18:50:24.618934 env[1731]: time="2023-10-02T18:50:24.618854698Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:50:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3304 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:50:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:50:24.619474 env[1731]: time="2023-10-02T18:50:24.619372350Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 18:50:24.620873 env[1731]: time="2023-10-02T18:50:24.620805736Z" level=error msg="Failed to pipe stdout of container \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\"" error="reading from a closed fifo" Oct 2 18:50:24.620988 env[1731]: time="2023-10-02T18:50:24.620950967Z" level=error msg="Failed to pipe stderr of container \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\"" error="reading from a closed fifo" Oct 2 18:50:24.623339 env[1731]: time="2023-10-02T18:50:24.623267201Z" level=error msg="StartContainer for \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:50:24.624479 kubelet[2851]: E1002 18:50:24.623638 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac" Oct 2 18:50:24.624479 kubelet[2851]: E1002 18:50:24.624311 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:50:24.624479 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:50:24.624479 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:50:24.624921 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pxsfc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:50:24.625177 kubelet[2851]: E1002 18:50:24.624406 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:50:24.850404 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac-rootfs.mount: Deactivated successfully. Oct 2 18:50:25.437686 kubelet[2851]: I1002 18:50:25.437628 2851 scope.go:117] "RemoveContainer" containerID="54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f" Oct 2 18:50:25.439090 kubelet[2851]: I1002 18:50:25.439056 2851 scope.go:117] "RemoveContainer" containerID="54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f" Oct 2 18:50:25.441097 env[1731]: time="2023-10-02T18:50:25.440472888Z" level=info msg="RemoveContainer for \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\"" Oct 2 18:50:25.452807 env[1731]: time="2023-10-02T18:50:25.448238600Z" level=info msg="RemoveContainer for \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\" returns successfully" Oct 2 18:50:25.452807 env[1731]: time="2023-10-02T18:50:25.451112436Z" level=info msg="RemoveContainer for \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\"" Oct 2 18:50:25.452807 env[1731]: time="2023-10-02T18:50:25.451204836Z" level=info msg="RemoveContainer for \"54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f\" returns successfully" Oct 2 18:50:25.456858 kubelet[2851]: E1002 18:50:25.456764 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:50:26.443649 kubelet[2851]: E1002 18:50:26.443609 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:50:26.765054 kubelet[2851]: W1002 18:50:26.764985 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod49549496_7e54_45dd_9052_51c33fe7ad79.slice/cri-containerd-54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f.scope WatchSource:0}: container "54b43d379036be0d866b7f744806b8a4527d1dd8b9b69daaf179d5e5b7f7ab9f" in namespace "k8s.io": not found Oct 2 18:50:29.875543 kubelet[2851]: W1002 18:50:29.875459 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod49549496_7e54_45dd_9052_51c33fe7ad79.slice/cri-containerd-a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac.scope WatchSource:0}: task a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac not found: not found Oct 2 18:50:38.300386 env[1731]: time="2023-10-02T18:50:38.300300100Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 18:50:38.322179 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3062860570.mount: Deactivated successfully. Oct 2 18:50:38.337056 env[1731]: time="2023-10-02T18:50:38.336975441Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\"" Oct 2 18:50:38.342358 env[1731]: time="2023-10-02T18:50:38.342289845Z" level=info msg="StartContainer for \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\"" Oct 2 18:50:38.396153 systemd[1]: Started cri-containerd-8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099.scope. Oct 2 18:50:38.437680 systemd[1]: cri-containerd-8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099.scope: Deactivated successfully. Oct 2 18:50:38.462002 env[1731]: time="2023-10-02T18:50:38.461915483Z" level=info msg="shim disconnected" id=8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099 Oct 2 18:50:38.462002 env[1731]: time="2023-10-02T18:50:38.461993015Z" level=warning msg="cleaning up after shim disconnected" id=8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099 namespace=k8s.io Oct 2 18:50:38.462385 env[1731]: time="2023-10-02T18:50:38.462015787Z" level=info msg="cleaning up dead shim" Oct 2 18:50:38.496240 env[1731]: time="2023-10-02T18:50:38.496177704Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:50:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3343 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:50:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:50:38.496976 env[1731]: time="2023-10-02T18:50:38.496898355Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 18:50:38.497937 env[1731]: time="2023-10-02T18:50:38.497868649Z" level=error msg="Failed to pipe stdout of container \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\"" error="reading from a closed fifo" Oct 2 18:50:38.498049 env[1731]: time="2023-10-02T18:50:38.497986110Z" level=error msg="Failed to pipe stderr of container \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\"" error="reading from a closed fifo" Oct 2 18:50:38.500311 env[1731]: time="2023-10-02T18:50:38.500220327Z" level=error msg="StartContainer for \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:50:38.500652 kubelet[2851]: E1002 18:50:38.500550 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099" Oct 2 18:50:38.502965 kubelet[2851]: E1002 18:50:38.500702 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:50:38.502965 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:50:38.502965 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:50:38.503187 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pxsfc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:50:38.503187 kubelet[2851]: E1002 18:50:38.500763 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:50:39.314707 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099-rootfs.mount: Deactivated successfully. Oct 2 18:50:39.477498 kubelet[2851]: I1002 18:50:39.477456 2851 scope.go:117] "RemoveContainer" containerID="a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac" Oct 2 18:50:39.478079 kubelet[2851]: I1002 18:50:39.478047 2851 scope.go:117] "RemoveContainer" containerID="a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac" Oct 2 18:50:39.481448 env[1731]: time="2023-10-02T18:50:39.481278056Z" level=info msg="RemoveContainer for \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\"" Oct 2 18:50:39.482248 env[1731]: time="2023-10-02T18:50:39.480794627Z" level=info msg="RemoveContainer for \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\"" Oct 2 18:50:39.482248 env[1731]: time="2023-10-02T18:50:39.481883590Z" level=error msg="RemoveContainer for \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\" failed" error="failed to set removing state for container \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\": container is already in removing state" Oct 2 18:50:39.482400 kubelet[2851]: E1002 18:50:39.482193 2851 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\": container is already in removing state" containerID="a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac" Oct 2 18:50:39.482400 kubelet[2851]: I1002 18:50:39.482367 2851 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac"} err="rpc error: code = Unknown desc = failed to set removing state for container \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\": container is already in removing state" Oct 2 18:50:39.488138 env[1731]: time="2023-10-02T18:50:39.487081279Z" level=info msg="RemoveContainer for \"a638753bf16ab23ea6d4c731d3cb88876d408ec9e1cbf576178bc049591506ac\" returns successfully" Oct 2 18:50:39.488345 kubelet[2851]: E1002 18:50:39.487848 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:50:41.568136 kubelet[2851]: W1002 18:50:41.568072 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod49549496_7e54_45dd_9052_51c33fe7ad79.slice/cri-containerd-8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099.scope WatchSource:0}: task 8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099 not found: not found Oct 2 18:50:47.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.160:22-139.178.89.65:56936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:47.055173 systemd[1]: Started sshd@7-172.31.25.160:22-139.178.89.65:56936.service. Oct 2 18:50:47.061888 kernel: kauditd_printk_skb: 417 callbacks suppressed Oct 2 18:50:47.062061 kernel: audit: type=1130 audit(1696272647.053:1085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.160:22-139.178.89.65:56936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:47.246000 audit[3359]: USER_ACCT pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.249000 sshd[3359]: Accepted publickey for core from 139.178.89.65 port 56936 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:50:47.260864 kernel: audit: type=1101 audit(1696272647.246:1086): pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.259000 audit[3359]: CRED_ACQ pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.262661 sshd[3359]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:50:47.277872 kernel: audit: type=1103 audit(1696272647.259:1087): pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.278027 kernel: audit: type=1006 audit(1696272647.259:1088): pid=3359 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 18:50:47.259000 audit[3359]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff60f48b0 a2=3 a3=1 items=0 ppid=1 pid=3359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:47.288474 kernel: audit: type=1300 audit(1696272647.259:1088): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff60f48b0 a2=3 a3=1 items=0 ppid=1 pid=3359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:47.259000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:47.296438 kernel: audit: type=1327 audit(1696272647.259:1088): proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:47.295610 systemd[1]: Started session-8.scope. Oct 2 18:50:47.298815 systemd-logind[1721]: New session 8 of user core. Oct 2 18:50:47.306000 audit[3359]: USER_START pid=3359 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.320000 audit[3361]: CRED_ACQ pid=3361 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.331942 kernel: audit: type=1105 audit(1696272647.306:1089): pid=3359 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.332054 kernel: audit: type=1103 audit(1696272647.320:1090): pid=3361 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.608839 sshd[3359]: pam_unix(sshd:session): session closed for user core Oct 2 18:50:47.612000 audit[3359]: USER_END pid=3359 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.613000 audit[3359]: CRED_DISP pid=3359 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.631460 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 18:50:47.632586 systemd[1]: sshd@7-172.31.25.160:22-139.178.89.65:56936.service: Deactivated successfully. Oct 2 18:50:47.638249 kernel: audit: type=1106 audit(1696272647.612:1091): pid=3359 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.638329 kernel: audit: type=1104 audit(1696272647.613:1092): pid=3359 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:47.640498 systemd-logind[1721]: Session 8 logged out. Waiting for processes to exit. Oct 2 18:50:47.642958 systemd-logind[1721]: Removed session 8. Oct 2 18:50:47.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.160:22-139.178.89.65:56936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:48.844000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:48.844000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4007ab5290 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:50:48.844000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:50:48.846000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:48.846000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4007ab52f0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:50:48.846000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:50:48.879000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:48.879000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=400a059800 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:50:48.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:50:48.879000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:48.879000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4007ab5410 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:50:48.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:50:48.883000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:48.883000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:48.883000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a4d8920 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:50:48.883000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:50:48.883000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=4007ca09c0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:50:48.883000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:50:49.793000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:49.793000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:49.793000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400273a240 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:49.793000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:49.793000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011ce1e0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:49.793000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:53.296913 kubelet[2851]: E1002 18:50:53.296851 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:50:53.776000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:53.779093 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 18:50:53.779180 kernel: audit: type=1400 audit(1696272653.776:1102): avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:53.777000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:53.797983 kernel: audit: type=1400 audit(1696272653.777:1103): avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:53.798100 kernel: audit: type=1300 audit(1696272653.777:1103): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027c6f40 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:53.777000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027c6f40 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:53.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:53.820695 kernel: audit: type=1327 audit(1696272653.777:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:53.776000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f16980 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:53.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:53.847299 kernel: audit: type=1300 audit(1696272653.776:1102): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f16980 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:53.847425 kernel: audit: type=1327 audit(1696272653.776:1102): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:53.781000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:53.857126 kernel: audit: type=1400 audit(1696272653.781:1104): avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:53.857250 kernel: audit: type=1300 audit(1696272653.781:1104): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027c7060 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:53.781000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027c7060 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:53.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:53.879895 kernel: audit: type=1327 audit(1696272653.781:1104): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:53.880008 kernel: audit: type=1400 audit(1696272653.781:1105): avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:53.781000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:53.781000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027c7080 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:50:53.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:57.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.160:22-139.178.89.65:48026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:57.637978 systemd[1]: Started sshd@8-172.31.25.160:22-139.178.89.65:48026.service. Oct 2 18:50:57.832000 audit[3374]: USER_ACCT pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:57.833288 sshd[3374]: Accepted publickey for core from 139.178.89.65 port 48026 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:50:57.835000 audit[3374]: CRED_ACQ pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:57.835000 audit[3374]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd19f2d0 a2=3 a3=1 items=0 ppid=1 pid=3374 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:57.835000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:50:57.837288 sshd[3374]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:50:57.847179 systemd[1]: Started session-9.scope. Oct 2 18:50:57.847887 systemd-logind[1721]: New session 9 of user core. Oct 2 18:50:57.857000 audit[3374]: USER_START pid=3374 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:57.863000 audit[3376]: CRED_ACQ pid=3376 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:58.137508 sshd[3374]: pam_unix(sshd:session): session closed for user core Oct 2 18:50:58.138000 audit[3374]: USER_END pid=3374 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:58.138000 audit[3374]: CRED_DISP pid=3374 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:58.144008 systemd-logind[1721]: Session 9 logged out. Waiting for processes to exit. Oct 2 18:50:58.146654 systemd[1]: sshd@8-172.31.25.160:22-139.178.89.65:48026.service: Deactivated successfully. Oct 2 18:50:58.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.160:22-139.178.89.65:48026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:58.147987 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 18:50:58.149666 systemd-logind[1721]: Removed session 9. Oct 2 18:51:08.180745 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 18:51:08.180907 kernel: audit: type=1130 audit(1696272668.168:1115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.160:22-139.178.89.65:43976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:08.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.160:22-139.178.89.65:43976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:08.169069 systemd[1]: Started sshd@9-172.31.25.160:22-139.178.89.65:43976.service. Oct 2 18:51:08.304285 env[1731]: time="2023-10-02T18:51:08.304067820Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 18:51:08.333075 env[1731]: time="2023-10-02T18:51:08.332877047Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\"" Oct 2 18:51:08.334637 env[1731]: time="2023-10-02T18:51:08.334060755Z" level=info msg="StartContainer for \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\"" Oct 2 18:51:08.360000 audit[3387]: USER_ACCT pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.364958 sshd[3387]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:51:08.366495 sshd[3387]: Accepted publickey for core from 139.178.89.65 port 43976 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:51:08.383845 kernel: audit: type=1101 audit(1696272668.360:1116): pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.383951 kernel: audit: type=1103 audit(1696272668.360:1117): pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.360000 audit[3387]: CRED_ACQ pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.390346 kernel: audit: type=1006 audit(1696272668.360:1118): pid=3387 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 18:51:08.360000 audit[3387]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc78bd5e0 a2=3 a3=1 items=0 ppid=1 pid=3387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:08.408580 systemd-logind[1721]: New session 10 of user core. Oct 2 18:51:08.360000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:08.414830 kernel: audit: type=1300 audit(1696272668.360:1118): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc78bd5e0 a2=3 a3=1 items=0 ppid=1 pid=3387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:08.414977 kernel: audit: type=1327 audit(1696272668.360:1118): proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:08.421976 systemd[1]: run-containerd-runc-k8s.io-dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a-runc.UBawKo.mount: Deactivated successfully. Oct 2 18:51:08.428512 systemd[1]: Started cri-containerd-dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a.scope. Oct 2 18:51:08.430271 systemd[1]: Started session-10.scope. Oct 2 18:51:08.445000 audit[3387]: USER_START pid=3387 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.459000 audit[3406]: CRED_ACQ pid=3406 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.475089 kernel: audit: type=1105 audit(1696272668.445:1119): pid=3387 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.475214 kernel: audit: type=1103 audit(1696272668.459:1120): pid=3406 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.478121 systemd[1]: cri-containerd-dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a.scope: Deactivated successfully. Oct 2 18:51:08.504187 env[1731]: time="2023-10-02T18:51:08.504099704Z" level=info msg="shim disconnected" id=dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a Oct 2 18:51:08.504187 env[1731]: time="2023-10-02T18:51:08.504178207Z" level=warning msg="cleaning up after shim disconnected" id=dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a namespace=k8s.io Oct 2 18:51:08.504575 env[1731]: time="2023-10-02T18:51:08.504201750Z" level=info msg="cleaning up dead shim" Oct 2 18:51:08.531116 env[1731]: time="2023-10-02T18:51:08.531028395Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:51:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3413 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:51:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:51:08.531599 env[1731]: time="2023-10-02T18:51:08.531503947Z" level=error msg="copy shim log" error="read /proc/self/fd/42: file already closed" Oct 2 18:51:08.532133 env[1731]: time="2023-10-02T18:51:08.532062585Z" level=error msg="Failed to pipe stdout of container \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\"" error="reading from a closed fifo" Oct 2 18:51:08.532243 env[1731]: time="2023-10-02T18:51:08.532168555Z" level=error msg="Failed to pipe stderr of container \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\"" error="reading from a closed fifo" Oct 2 18:51:08.534620 env[1731]: time="2023-10-02T18:51:08.534535359Z" level=error msg="StartContainer for \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:51:08.534984 kubelet[2851]: E1002 18:51:08.534923 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a" Oct 2 18:51:08.538310 kubelet[2851]: E1002 18:51:08.535086 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:51:08.538310 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:51:08.538310 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:51:08.538310 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pxsfc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:51:08.538310 kubelet[2851]: E1002 18:51:08.535150 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:51:08.573622 kubelet[2851]: I1002 18:51:08.573032 2851 scope.go:117] "RemoveContainer" containerID="8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099" Oct 2 18:51:08.573622 kubelet[2851]: I1002 18:51:08.573576 2851 scope.go:117] "RemoveContainer" containerID="8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099" Oct 2 18:51:08.588102 env[1731]: time="2023-10-02T18:51:08.588041591Z" level=info msg="RemoveContainer for \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\"" Oct 2 18:51:08.593804 env[1731]: time="2023-10-02T18:51:08.592501855Z" level=info msg="RemoveContainer for \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\"" Oct 2 18:51:08.593804 env[1731]: time="2023-10-02T18:51:08.592662352Z" level=error msg="RemoveContainer for \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\" failed" error="failed to set removing state for container \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\": container is already in removing state" Oct 2 18:51:08.596965 kubelet[2851]: E1002 18:51:08.596914 2851 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\": container is already in removing state" containerID="8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099" Oct 2 18:51:08.597289 kubelet[2851]: E1002 18:51:08.597119 2851 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099": container is already in removing state; Skipping pod "cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)" Oct 2 18:51:08.600545 kubelet[2851]: E1002 18:51:08.599272 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:51:08.613817 env[1731]: time="2023-10-02T18:51:08.605361170Z" level=info msg="RemoveContainer for \"8fa7e9aeb45c10002b99c30faa2323da9eae3d09960e8eb7de2fd6db55bfc099\" returns successfully" Oct 2 18:51:08.786319 sshd[3387]: pam_unix(sshd:session): session closed for user core Oct 2 18:51:08.788000 audit[3387]: USER_END pid=3387 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.793831 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 18:51:08.795224 systemd[1]: sshd@9-172.31.25.160:22-139.178.89.65:43976.service: Deactivated successfully. Oct 2 18:51:08.788000 audit[3387]: CRED_DISP pid=3387 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.802350 systemd-logind[1721]: Session 10 logged out. Waiting for processes to exit. Oct 2 18:51:08.804040 systemd-logind[1721]: Removed session 10. Oct 2 18:51:08.810111 kernel: audit: type=1106 audit(1696272668.788:1121): pid=3387 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.810219 kernel: audit: type=1104 audit(1696272668.788:1122): pid=3387 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:08.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.160:22-139.178.89.65:43976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:09.317735 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a-rootfs.mount: Deactivated successfully. Oct 2 18:51:11.613959 kubelet[2851]: W1002 18:51:11.613900 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod49549496_7e54_45dd_9052_51c33fe7ad79.slice/cri-containerd-dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a.scope WatchSource:0}: task dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a not found: not found Oct 2 18:51:18.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.160:22-139.178.89.65:38682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:18.817154 systemd[1]: Started sshd@10-172.31.25.160:22-139.178.89.65:38682.service. Oct 2 18:51:18.819489 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:51:18.819572 kernel: audit: type=1130 audit(1696272678.816:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.160:22-139.178.89.65:38682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:19.004000 audit[3438]: USER_ACCT pid=3438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.006926 sshd[3438]: Accepted publickey for core from 139.178.89.65 port 38682 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:51:19.010951 sshd[3438]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:51:19.005000 audit[3438]: CRED_ACQ pid=3438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.026413 kernel: audit: type=1101 audit(1696272679.004:1125): pid=3438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.026608 kernel: audit: type=1103 audit(1696272679.005:1126): pid=3438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.033070 kernel: audit: type=1006 audit(1696272679.005:1127): pid=3438 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 18:51:19.005000 audit[3438]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1eee3f0 a2=3 a3=1 items=0 ppid=1 pid=3438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:19.043597 kernel: audit: type=1300 audit(1696272679.005:1127): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1eee3f0 a2=3 a3=1 items=0 ppid=1 pid=3438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:19.005000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:19.050609 kernel: audit: type=1327 audit(1696272679.005:1127): proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:19.054728 systemd-logind[1721]: New session 11 of user core. Oct 2 18:51:19.056821 systemd[1]: Started session-11.scope. Oct 2 18:51:19.066000 audit[3438]: USER_START pid=3438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.081387 kernel: audit: type=1105 audit(1696272679.066:1128): pid=3438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.081531 kernel: audit: type=1103 audit(1696272679.079:1129): pid=3440 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.079000 audit[3440]: CRED_ACQ pid=3440 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.366092 sshd[3438]: pam_unix(sshd:session): session closed for user core Oct 2 18:51:19.370000 audit[3438]: USER_END pid=3438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.374750 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 18:51:19.376135 systemd[1]: sshd@10-172.31.25.160:22-139.178.89.65:38682.service: Deactivated successfully. Oct 2 18:51:19.379238 systemd-logind[1721]: Session 11 logged out. Waiting for processes to exit. Oct 2 18:51:19.380837 systemd-logind[1721]: Removed session 11. Oct 2 18:51:19.370000 audit[3438]: CRED_DISP pid=3438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.393122 kernel: audit: type=1106 audit(1696272679.370:1130): pid=3438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.393326 kernel: audit: type=1104 audit(1696272679.370:1131): pid=3438 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:19.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.160:22-139.178.89.65:38682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:22.296382 kubelet[2851]: E1002 18:51:22.296339 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:51:29.407408 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:51:29.407526 kernel: audit: type=1130 audit(1696272689.394:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.160:22-139.178.89.65:47310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:29.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.160:22-139.178.89.65:47310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:29.395414 systemd[1]: Started sshd@11-172.31.25.160:22-139.178.89.65:47310.service. Oct 2 18:51:29.587000 audit[3451]: USER_ACCT pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.592558 sshd[3451]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:51:29.593855 sshd[3451]: Accepted publickey for core from 139.178.89.65 port 47310 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:51:29.588000 audit[3451]: CRED_ACQ pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.608292 kernel: audit: type=1101 audit(1696272689.587:1134): pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.608377 kernel: audit: type=1103 audit(1696272689.588:1135): pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.614311 kernel: audit: type=1006 audit(1696272689.588:1136): pid=3451 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 18:51:29.588000 audit[3451]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb9ca0b0 a2=3 a3=1 items=0 ppid=1 pid=3451 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:29.624946 kernel: audit: type=1300 audit(1696272689.588:1136): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb9ca0b0 a2=3 a3=1 items=0 ppid=1 pid=3451 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:29.588000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:29.629543 kernel: audit: type=1327 audit(1696272689.588:1136): proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:29.632015 systemd[1]: Started session-12.scope. Oct 2 18:51:29.633580 systemd-logind[1721]: New session 12 of user core. Oct 2 18:51:29.644000 audit[3451]: USER_START pid=3451 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.652000 audit[3453]: CRED_ACQ pid=3453 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.666336 kernel: audit: type=1105 audit(1696272689.644:1137): pid=3451 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.666469 kernel: audit: type=1103 audit(1696272689.652:1138): pid=3453 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.935935 sshd[3451]: pam_unix(sshd:session): session closed for user core Oct 2 18:51:29.937000 audit[3451]: USER_END pid=3451 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.944045 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 18:51:29.945514 systemd[1]: sshd@11-172.31.25.160:22-139.178.89.65:47310.service: Deactivated successfully. Oct 2 18:51:29.938000 audit[3451]: CRED_DISP pid=3451 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.951849 kernel: audit: type=1106 audit(1696272689.937:1139): pid=3451 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.952054 kernel: audit: type=1104 audit(1696272689.938:1140): pid=3451 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:29.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.160:22-139.178.89.65:47310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:29.961825 systemd-logind[1721]: Session 12 logged out. Waiting for processes to exit. Oct 2 18:51:29.963648 systemd-logind[1721]: Removed session 12. Oct 2 18:51:37.296316 kubelet[2851]: E1002 18:51:37.296274 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:51:39.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.160:22-139.178.89.65:40324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:39.968236 systemd[1]: Started sshd@12-172.31.25.160:22-139.178.89.65:40324.service. Oct 2 18:51:39.970569 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:51:39.970675 kernel: audit: type=1130 audit(1696272699.967:1142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.160:22-139.178.89.65:40324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:40.162000 audit[3465]: USER_ACCT pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.167908 sshd[3465]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:51:40.169533 sshd[3465]: Accepted publickey for core from 139.178.89.65 port 40324 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:51:40.164000 audit[3465]: CRED_ACQ pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.184340 kernel: audit: type=1101 audit(1696272700.162:1143): pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.184438 kernel: audit: type=1103 audit(1696272700.164:1144): pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.191207 kernel: audit: type=1006 audit(1696272700.164:1145): pid=3465 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 18:51:40.164000 audit[3465]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc89ec10 a2=3 a3=1 items=0 ppid=1 pid=3465 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:40.164000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:40.207962 kernel: audit: type=1300 audit(1696272700.164:1145): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc89ec10 a2=3 a3=1 items=0 ppid=1 pid=3465 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:40.208100 kernel: audit: type=1327 audit(1696272700.164:1145): proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:40.212905 systemd-logind[1721]: New session 13 of user core. Oct 2 18:51:40.215677 systemd[1]: Started session-13.scope. Oct 2 18:51:40.224000 audit[3465]: USER_START pid=3465 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.232000 audit[3467]: CRED_ACQ pid=3467 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.246526 kernel: audit: type=1105 audit(1696272700.224:1146): pid=3465 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.246621 kernel: audit: type=1103 audit(1696272700.232:1147): pid=3467 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.523335 sshd[3465]: pam_unix(sshd:session): session closed for user core Oct 2 18:51:40.524000 audit[3465]: USER_END pid=3465 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.531072 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 18:51:40.532531 systemd[1]: sshd@12-172.31.25.160:22-139.178.89.65:40324.service: Deactivated successfully. Oct 2 18:51:40.527000 audit[3465]: CRED_DISP pid=3465 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.546824 kernel: audit: type=1106 audit(1696272700.524:1148): pid=3465 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.546917 kernel: audit: type=1104 audit(1696272700.527:1149): pid=3465 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.160:22-139.178.89.65:40324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:40.547092 systemd-logind[1721]: Session 13 logged out. Waiting for processes to exit. Oct 2 18:51:40.548819 systemd-logind[1721]: Removed session 13. Oct 2 18:51:48.850023 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:51:48.850174 kernel: audit: type=1400 audit(1696272708.845:1151): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.845000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.845000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40076228d0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.870251 kernel: audit: type=1300 audit(1696272708.845:1151): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40076228d0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.870324 kernel: audit: type=1327 audit(1696272708.845:1151): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:48.845000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:48.847000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.890166 kernel: audit: type=1400 audit(1696272708.847:1152): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.847000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007622900 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.902905 kernel: audit: type=1300 audit(1696272708.847:1152): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007622900 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.847000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:48.913268 kernel: audit: type=1327 audit(1696272708.847:1152): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:48.880000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.922670 kernel: audit: type=1400 audit(1696272708.880:1153): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.880000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400973fc60 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.934821 kernel: audit: type=1300 audit(1696272708.880:1153): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400973fc60 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.880000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:48.945882 kernel: audit: type=1327 audit(1696272708.880:1153): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:48.885000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.956279 kernel: audit: type=1400 audit(1696272708.885:1154): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.885000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40077de150 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.885000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:48.889000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.889000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007622bd0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.889000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:48.889000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:48.889000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4009a352e0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:51:48.889000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:51:49.794000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:49.794000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:49.794000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c4a060 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:51:49.794000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:49.794000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400091c900 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:51:49.794000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:50.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.160:22-139.178.89.65:59312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:50.554845 systemd[1]: Started sshd@13-172.31.25.160:22-139.178.89.65:59312.service. Oct 2 18:51:50.743000 audit[3478]: USER_ACCT pid=3478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:50.744753 sshd[3478]: Accepted publickey for core from 139.178.89.65 port 59312 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:51:50.746000 audit[3478]: CRED_ACQ pid=3478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:50.746000 audit[3478]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff071f290 a2=3 a3=1 items=0 ppid=1 pid=3478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:50.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:50.748879 sshd[3478]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:51:50.758604 systemd[1]: Started session-14.scope. Oct 2 18:51:50.759583 systemd-logind[1721]: New session 14 of user core. Oct 2 18:51:50.769000 audit[3478]: USER_START pid=3478 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:50.775000 audit[3480]: CRED_ACQ pid=3480 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.058994 sshd[3478]: pam_unix(sshd:session): session closed for user core Oct 2 18:51:51.060000 audit[3478]: USER_END pid=3478 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.060000 audit[3478]: CRED_DISP pid=3478 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.065303 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 18:51:51.065326 systemd-logind[1721]: Session 14 logged out. Waiting for processes to exit. Oct 2 18:51:51.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.160:22-139.178.89.65:59312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:51.067132 systemd[1]: sshd@13-172.31.25.160:22-139.178.89.65:59312.service: Deactivated successfully. Oct 2 18:51:51.069748 systemd-logind[1721]: Removed session 14. Oct 2 18:51:51.304307 env[1731]: time="2023-10-02T18:51:51.304237919Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 18:51:51.326591 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4045367524.mount: Deactivated successfully. Oct 2 18:51:51.340699 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2538750046.mount: Deactivated successfully. Oct 2 18:51:51.344880 env[1731]: time="2023-10-02T18:51:51.344763164Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\"" Oct 2 18:51:51.347065 env[1731]: time="2023-10-02T18:51:51.346059434Z" level=info msg="StartContainer for \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\"" Oct 2 18:51:51.402115 systemd[1]: Started cri-containerd-bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686.scope. Oct 2 18:51:51.443303 systemd[1]: cri-containerd-bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686.scope: Deactivated successfully. Oct 2 18:51:51.474167 env[1731]: time="2023-10-02T18:51:51.474101182Z" level=info msg="shim disconnected" id=bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686 Oct 2 18:51:51.474577 env[1731]: time="2023-10-02T18:51:51.474543261Z" level=warning msg="cleaning up after shim disconnected" id=bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686 namespace=k8s.io Oct 2 18:51:51.474728 env[1731]: time="2023-10-02T18:51:51.474700793Z" level=info msg="cleaning up dead shim" Oct 2 18:51:51.501155 env[1731]: time="2023-10-02T18:51:51.501090723Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:51:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3515 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:51:51Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:51:51.501907 env[1731]: time="2023-10-02T18:51:51.501821284Z" level=error msg="copy shim log" error="read /proc/self/fd/42: file already closed" Oct 2 18:51:51.505925 env[1731]: time="2023-10-02T18:51:51.505846085Z" level=error msg="Failed to pipe stdout of container \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\"" error="reading from a closed fifo" Oct 2 18:51:51.508038 env[1731]: time="2023-10-02T18:51:51.507959512Z" level=error msg="Failed to pipe stderr of container \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\"" error="reading from a closed fifo" Oct 2 18:51:51.510842 env[1731]: time="2023-10-02T18:51:51.509996088Z" level=error msg="StartContainer for \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:51:51.511025 kubelet[2851]: E1002 18:51:51.510462 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686" Oct 2 18:51:51.511025 kubelet[2851]: E1002 18:51:51.511007 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:51:51.511025 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:51:51.511025 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:51:51.511025 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pxsfc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:51:51.511953 kubelet[2851]: E1002 18:51:51.511100 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:51:51.698929 kubelet[2851]: I1002 18:51:51.697682 2851 scope.go:117] "RemoveContainer" containerID="dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a" Oct 2 18:51:51.699225 kubelet[2851]: I1002 18:51:51.699098 2851 scope.go:117] "RemoveContainer" containerID="dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a" Oct 2 18:51:51.702062 env[1731]: time="2023-10-02T18:51:51.701869071Z" level=info msg="RemoveContainer for \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\"" Oct 2 18:51:51.702832 env[1731]: time="2023-10-02T18:51:51.702756048Z" level=info msg="RemoveContainer for \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\"" Oct 2 18:51:51.703274 env[1731]: time="2023-10-02T18:51:51.703182717Z" level=error msg="RemoveContainer for \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\" failed" error="failed to set removing state for container \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\": container is already in removing state" Oct 2 18:51:51.705001 kubelet[2851]: E1002 18:51:51.703980 2851 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\": container is already in removing state" containerID="dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a" Oct 2 18:51:51.705001 kubelet[2851]: E1002 18:51:51.704041 2851 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a": container is already in removing state; Skipping pod "cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)" Oct 2 18:51:51.705001 kubelet[2851]: E1002 18:51:51.704483 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:51:51.708877 env[1731]: time="2023-10-02T18:51:51.707650245Z" level=info msg="RemoveContainer for \"dd411782c36d99a80d48b6c7fce17280071c69f07ac32a5e1498281f6f65083a\" returns successfully" Oct 2 18:51:52.318374 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686-rootfs.mount: Deactivated successfully. Oct 2 18:51:52.999086 kubelet[2851]: E1002 18:51:52.999024 2851 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 18:51:53.470729 kubelet[2851]: E1002 18:51:53.470695 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:53.777000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:53.777000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400091dde0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:51:53.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:53.779000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:53.779000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000cbd100 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:51:53.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:53.781000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:53.781000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400091de20 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:51:53.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:53.782000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:53.782000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400091de40 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:51:53.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:54.580441 kubelet[2851]: W1002 18:51:54.580374 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod49549496_7e54_45dd_9052_51c33fe7ad79.slice/cri-containerd-bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686.scope WatchSource:0}: task bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686 not found: not found Oct 2 18:51:58.472883 kubelet[2851]: E1002 18:51:58.472826 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:01.092290 systemd[1]: Started sshd@14-172.31.25.160:22-139.178.89.65:57726.service. Oct 2 18:52:01.096091 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 18:52:01.096163 kernel: audit: type=1130 audit(1696272721.091:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.160:22-139.178.89.65:57726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:01.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.160:22-139.178.89.65:57726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:01.284000 audit[3532]: USER_ACCT pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.286016 sshd[3532]: Accepted publickey for core from 139.178.89.65 port 57726 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:01.291632 sshd[3532]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:01.290000 audit[3532]: CRED_ACQ pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.306670 kernel: audit: type=1101 audit(1696272721.284:1173): pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.306752 kernel: audit: type=1103 audit(1696272721.290:1174): pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.312856 kernel: audit: type=1006 audit(1696272721.290:1175): pid=3532 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 18:52:01.290000 audit[3532]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc977a9b0 a2=3 a3=1 items=0 ppid=1 pid=3532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:01.324181 kernel: audit: type=1300 audit(1696272721.290:1175): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc977a9b0 a2=3 a3=1 items=0 ppid=1 pid=3532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:01.290000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:01.327950 kernel: audit: type=1327 audit(1696272721.290:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:01.333221 systemd-logind[1721]: New session 15 of user core. Oct 2 18:52:01.334520 systemd[1]: Started session-15.scope. Oct 2 18:52:01.349000 audit[3532]: USER_START pid=3532 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.356000 audit[3534]: CRED_ACQ pid=3534 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.371253 kernel: audit: type=1105 audit(1696272721.349:1176): pid=3532 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.371357 kernel: audit: type=1103 audit(1696272721.356:1177): pid=3534 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.622376 sshd[3532]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:01.624000 audit[3532]: USER_END pid=3532 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.637333 systemd[1]: sshd@14-172.31.25.160:22-139.178.89.65:57726.service: Deactivated successfully. Oct 2 18:52:01.624000 audit[3532]: CRED_DISP pid=3532 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.649218 kernel: audit: type=1106 audit(1696272721.624:1178): pid=3532 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.649361 kernel: audit: type=1104 audit(1696272721.624:1179): pid=3532 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:01.638650 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 18:52:01.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.160:22-139.178.89.65:57726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:01.649761 systemd-logind[1721]: Session 15 logged out. Waiting for processes to exit. Oct 2 18:52:01.655883 systemd-logind[1721]: Removed session 15. Oct 2 18:52:03.474432 kubelet[2851]: E1002 18:52:03.474396 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:07.295625 kubelet[2851]: E1002 18:52:07.295581 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:52:08.476363 kubelet[2851]: E1002 18:52:08.476313 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:11.654824 systemd[1]: Started sshd@15-172.31.25.160:22-139.178.89.65:60212.service. Oct 2 18:52:11.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.160:22-139.178.89.65:60212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:11.661215 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:52:11.661311 kernel: audit: type=1130 audit(1696272731.658:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.160:22-139.178.89.65:60212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:11.849000 audit[3547]: USER_ACCT pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:11.850271 sshd[3547]: Accepted publickey for core from 139.178.89.65 port 60212 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:11.854127 sshd[3547]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:11.852000 audit[3547]: CRED_ACQ pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:11.871326 kernel: audit: type=1101 audit(1696272731.849:1182): pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:11.871475 kernel: audit: type=1103 audit(1696272731.852:1183): pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:11.879040 kernel: audit: type=1006 audit(1696272731.852:1184): pid=3547 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 18:52:11.852000 audit[3547]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9a87db0 a2=3 a3=1 items=0 ppid=1 pid=3547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:11.897220 kernel: audit: type=1300 audit(1696272731.852:1184): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9a87db0 a2=3 a3=1 items=0 ppid=1 pid=3547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:11.888674 systemd-logind[1721]: New session 16 of user core. Oct 2 18:52:11.889716 systemd[1]: Started session-16.scope. Oct 2 18:52:11.852000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:11.899000 audit[3547]: USER_START pid=3547 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:11.916510 kernel: audit: type=1327 audit(1696272731.852:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:11.916627 kernel: audit: type=1105 audit(1696272731.899:1185): pid=3547 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:11.917000 audit[3549]: CRED_ACQ pid=3549 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:11.929815 kernel: audit: type=1103 audit(1696272731.917:1186): pid=3549 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.182031 sshd[3547]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:12.184000 audit[3547]: USER_END pid=3547 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.188381 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 18:52:12.189721 systemd[1]: sshd@15-172.31.25.160:22-139.178.89.65:60212.service: Deactivated successfully. Oct 2 18:52:12.185000 audit[3547]: CRED_DISP pid=3547 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.206605 kernel: audit: type=1106 audit(1696272732.184:1187): pid=3547 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.206734 kernel: audit: type=1104 audit(1696272732.185:1188): pid=3547 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.206673 systemd-logind[1721]: Session 16 logged out. Waiting for processes to exit. Oct 2 18:52:12.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.160:22-139.178.89.65:60212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:12.208438 systemd-logind[1721]: Removed session 16. Oct 2 18:52:13.477728 kubelet[2851]: E1002 18:52:13.477678 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:18.479607 kubelet[2851]: E1002 18:52:18.479558 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:22.218194 systemd[1]: Started sshd@16-172.31.25.160:22-139.178.89.65:51238.service. Oct 2 18:52:22.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.160:22-139.178.89.65:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:22.222863 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:52:22.223002 kernel: audit: type=1130 audit(1696272742.218:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.160:22-139.178.89.65:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:22.299250 kubelet[2851]: E1002 18:52:22.299215 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:52:22.417000 audit[3559]: USER_ACCT pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.418311 sshd[3559]: Accepted publickey for core from 139.178.89.65 port 51238 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:22.422574 sshd[3559]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:22.420000 audit[3559]: CRED_ACQ pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.439186 kernel: audit: type=1101 audit(1696272742.417:1191): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.439367 kernel: audit: type=1103 audit(1696272742.420:1192): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.448603 kernel: audit: type=1006 audit(1696272742.420:1193): pid=3559 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 18:52:22.448751 kernel: audit: type=1300 audit(1696272742.420:1193): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce724390 a2=3 a3=1 items=0 ppid=1 pid=3559 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:22.420000 audit[3559]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce724390 a2=3 a3=1 items=0 ppid=1 pid=3559 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:22.447895 systemd[1]: Started session-17.scope. Oct 2 18:52:22.450839 systemd-logind[1721]: New session 17 of user core. Oct 2 18:52:22.420000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:22.460156 kernel: audit: type=1327 audit(1696272742.420:1193): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:22.463000 audit[3559]: USER_START pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.476000 audit[3561]: CRED_ACQ pid=3561 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.487159 kernel: audit: type=1105 audit(1696272742.463:1194): pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.487252 kernel: audit: type=1103 audit(1696272742.476:1195): pid=3561 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.757374 sshd[3559]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:22.759000 audit[3559]: USER_END pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.764240 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 18:52:22.765593 systemd[1]: sshd@16-172.31.25.160:22-139.178.89.65:51238.service: Deactivated successfully. Oct 2 18:52:22.760000 audit[3559]: CRED_DISP pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.782535 kernel: audit: type=1106 audit(1696272742.759:1196): pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.782664 kernel: audit: type=1104 audit(1696272742.760:1197): pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.782802 systemd-logind[1721]: Session 17 logged out. Waiting for processes to exit. Oct 2 18:52:22.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.160:22-139.178.89.65:51238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:22.794894 systemd-logind[1721]: Removed session 17. Oct 2 18:52:22.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.160:22-139.178.89.65:51246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:22.798201 systemd[1]: Started sshd@17-172.31.25.160:22-139.178.89.65:51246.service. Oct 2 18:52:22.992000 audit[3571]: USER_ACCT pid=3571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.993901 sshd[3571]: Accepted publickey for core from 139.178.89.65 port 51246 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:22.996000 audit[3571]: CRED_ACQ pid=3571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:22.996000 audit[3571]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa0a18e0 a2=3 a3=1 items=0 ppid=1 pid=3571 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:22.996000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:22.997834 sshd[3571]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:23.006944 systemd-logind[1721]: New session 18 of user core. Oct 2 18:52:23.007133 systemd[1]: Started session-18.scope. Oct 2 18:52:23.017000 audit[3571]: USER_START pid=3571 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.023000 audit[3573]: CRED_ACQ pid=3573 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.481515 kubelet[2851]: E1002 18:52:23.481474 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:24.620809 sshd[3571]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:24.622000 audit[3571]: USER_END pid=3571 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:24.622000 audit[3571]: CRED_DISP pid=3571 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:24.627252 systemd-logind[1721]: Session 18 logged out. Waiting for processes to exit. Oct 2 18:52:24.627925 systemd[1]: sshd@17-172.31.25.160:22-139.178.89.65:51246.service: Deactivated successfully. Oct 2 18:52:24.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.160:22-139.178.89.65:51246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:24.629491 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 18:52:24.631870 systemd-logind[1721]: Removed session 18. Oct 2 18:52:24.651906 systemd[1]: Started sshd@18-172.31.25.160:22-139.178.89.65:51260.service. Oct 2 18:52:24.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.160:22-139.178.89.65:51260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:24.846000 audit[3582]: USER_ACCT pid=3582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:24.847365 sshd[3582]: Accepted publickey for core from 139.178.89.65 port 51260 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:24.849000 audit[3582]: CRED_ACQ pid=3582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:24.849000 audit[3582]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff703afe0 a2=3 a3=1 items=0 ppid=1 pid=3582 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:24.849000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:24.850728 sshd[3582]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:24.859917 systemd[1]: Started session-19.scope. Oct 2 18:52:24.860650 systemd-logind[1721]: New session 19 of user core. Oct 2 18:52:24.869000 audit[3582]: USER_START pid=3582 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:24.876000 audit[3584]: CRED_ACQ pid=3584 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:25.144472 sshd[3582]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:25.145000 audit[3582]: USER_END pid=3582 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:25.145000 audit[3582]: CRED_DISP pid=3582 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:25.150757 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 18:52:25.151946 systemd[1]: sshd@18-172.31.25.160:22-139.178.89.65:51260.service: Deactivated successfully. Oct 2 18:52:25.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.160:22-139.178.89.65:51260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:25.154310 systemd-logind[1721]: Session 19 logged out. Waiting for processes to exit. Oct 2 18:52:25.156589 systemd-logind[1721]: Removed session 19. Oct 2 18:52:28.483213 kubelet[2851]: E1002 18:52:28.483155 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:33.484841 kubelet[2851]: E1002 18:52:33.484806 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:35.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.160:22-139.178.89.65:49388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:35.175559 systemd[1]: Started sshd@19-172.31.25.160:22-139.178.89.65:49388.service. Oct 2 18:52:35.183808 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 18:52:35.184005 kernel: audit: type=1130 audit(1696272755.175:1217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.160:22-139.178.89.65:49388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:35.363000 audit[3594]: USER_ACCT pid=3594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.366575 sshd[3594]: Accepted publickey for core from 139.178.89.65 port 49388 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:35.368258 sshd[3594]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:35.366000 audit[3594]: CRED_ACQ pid=3594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.384365 kernel: audit: type=1101 audit(1696272755.363:1218): pid=3594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.384490 kernel: audit: type=1103 audit(1696272755.366:1219): pid=3594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.391143 kernel: audit: type=1006 audit(1696272755.366:1220): pid=3594 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 18:52:35.366000 audit[3594]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebf08430 a2=3 a3=1 items=0 ppid=1 pid=3594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:35.402076 kernel: audit: type=1300 audit(1696272755.366:1220): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebf08430 a2=3 a3=1 items=0 ppid=1 pid=3594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:35.366000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:35.405984 kernel: audit: type=1327 audit(1696272755.366:1220): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:35.409860 systemd-logind[1721]: New session 20 of user core. Oct 2 18:52:35.413517 systemd[1]: Started session-20.scope. Oct 2 18:52:35.421000 audit[3594]: USER_START pid=3594 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.434949 kernel: audit: type=1105 audit(1696272755.421:1221): pid=3594 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.435000 audit[3596]: CRED_ACQ pid=3596 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.445851 kernel: audit: type=1103 audit(1696272755.435:1222): pid=3596 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.708397 sshd[3594]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:35.710000 audit[3594]: USER_END pid=3594 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.714281 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 18:52:35.715377 systemd[1]: sshd@19-172.31.25.160:22-139.178.89.65:49388.service: Deactivated successfully. Oct 2 18:52:35.723801 kernel: audit: type=1106 audit(1696272755.710:1223): pid=3594 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.710000 audit[3594]: CRED_DISP pid=3594 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:35.724344 systemd-logind[1721]: Session 20 logged out. Waiting for processes to exit. Oct 2 18:52:35.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.160:22-139.178.89.65:49388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:35.734404 systemd-logind[1721]: Removed session 20. Oct 2 18:52:35.734839 kernel: audit: type=1104 audit(1696272755.710:1224): pid=3594 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:36.296070 kubelet[2851]: E1002 18:52:36.296032 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:52:38.486794 kubelet[2851]: E1002 18:52:38.486728 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:43.488800 kubelet[2851]: E1002 18:52:43.488726 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:45.742184 systemd[1]: Started sshd@20-172.31.25.160:22-139.178.89.65:37320.service. Oct 2 18:52:45.754068 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:52:45.754179 kernel: audit: type=1130 audit(1696272765.742:1226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.160:22-139.178.89.65:37320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:45.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.160:22-139.178.89.65:37320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:45.928000 audit[3607]: USER_ACCT pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:45.929888 sshd[3607]: Accepted publickey for core from 139.178.89.65 port 37320 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:45.941908 kernel: audit: type=1101 audit(1696272765.928:1227): pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:45.941000 audit[3607]: CRED_ACQ pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:45.943213 sshd[3607]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:45.958144 kernel: audit: type=1103 audit(1696272765.941:1228): pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:45.958253 kernel: audit: type=1006 audit(1696272765.941:1229): pid=3607 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 18:52:45.941000 audit[3607]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8de63c0 a2=3 a3=1 items=0 ppid=1 pid=3607 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:45.969467 kernel: audit: type=1300 audit(1696272765.941:1229): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8de63c0 a2=3 a3=1 items=0 ppid=1 pid=3607 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:45.941000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:45.973538 kernel: audit: type=1327 audit(1696272765.941:1229): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:45.978672 systemd-logind[1721]: New session 21 of user core. Oct 2 18:52:45.980897 systemd[1]: Started session-21.scope. Oct 2 18:52:45.989000 audit[3607]: USER_START pid=3607 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:46.002000 audit[3609]: CRED_ACQ pid=3609 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:46.012946 kernel: audit: type=1105 audit(1696272765.989:1230): pid=3607 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:46.013027 kernel: audit: type=1103 audit(1696272766.002:1231): pid=3609 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:46.270121 sshd[3607]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:46.271000 audit[3607]: USER_END pid=3607 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:46.276958 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 18:52:46.278463 systemd[1]: sshd@20-172.31.25.160:22-139.178.89.65:37320.service: Deactivated successfully. Oct 2 18:52:46.273000 audit[3607]: CRED_DISP pid=3607 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:46.294266 kernel: audit: type=1106 audit(1696272766.271:1232): pid=3607 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:46.294385 kernel: audit: type=1104 audit(1696272766.273:1233): pid=3607 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:46.294511 systemd-logind[1721]: Session 21 logged out. Waiting for processes to exit. Oct 2 18:52:46.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.160:22-139.178.89.65:37320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:46.296660 systemd-logind[1721]: Removed session 21. Oct 2 18:52:48.490579 kubelet[2851]: E1002 18:52:48.490524 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:48.849000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:48.849000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:48.849000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40060bc1e0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:52:48.849000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:52:48.849000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006683ce0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:52:48.849000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:52:48.881000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:48.881000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400ada2180 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:52:48.881000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:52:48.887000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:48.887000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40060bc630 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:52:48.887000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:52:48.890000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:48.890000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:48.890000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40060bc720 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:52:48.890000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:52:48.890000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400ada21c0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:52:48.890000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:52:49.795000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:49.795000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:49.795000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021d2000 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:49.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:49.795000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001d1e000 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:49.795000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:50.296188 kubelet[2851]: E1002 18:52:50.296149 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:52:53.492258 kubelet[2851]: E1002 18:52:53.492221 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:53.779000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:53.782227 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 18:52:53.782309 kernel: audit: type=1400 audit(1696272773.779:1243): avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:53.779000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002460540 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:53.803730 kernel: audit: type=1300 audit(1696272773.779:1243): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002460540 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:53.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:53.814112 kernel: audit: type=1327 audit(1696272773.779:1243): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:53.780000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:53.823626 kernel: audit: type=1400 audit(1696272773.780:1244): avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:53.823705 kernel: audit: type=1300 audit(1696272773.780:1244): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021d3260 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:53.780000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021d3260 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:53.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:53.846199 kernel: audit: type=1327 audit(1696272773.780:1244): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:53.846291 kernel: audit: type=1400 audit(1696272773.782:1245): avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:53.782000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:53.782000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021d33e0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:53.867868 kernel: audit: type=1300 audit(1696272773.782:1245): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021d33e0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:53.868071 kernel: audit: type=1327 audit(1696272773.782:1245): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:53.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:53.783000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:53.887580 kernel: audit: type=1400 audit(1696272773.783:1246): avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:53.783000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021d3400 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:52:53.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:56.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.160:22-139.178.89.65:39510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:56.302853 systemd[1]: Started sshd@21-172.31.25.160:22-139.178.89.65:39510.service. Oct 2 18:52:56.493000 audit[3622]: USER_ACCT pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:56.495098 sshd[3622]: Accepted publickey for core from 139.178.89.65 port 39510 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:56.496000 audit[3622]: CRED_ACQ pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:56.497000 audit[3622]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd14c2130 a2=3 a3=1 items=0 ppid=1 pid=3622 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:56.497000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:56.498875 sshd[3622]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:56.506946 systemd-logind[1721]: New session 22 of user core. Oct 2 18:52:56.508414 systemd[1]: Started session-22.scope. Oct 2 18:52:56.517000 audit[3622]: USER_START pid=3622 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:56.524000 audit[3624]: CRED_ACQ pid=3624 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:56.815342 sshd[3622]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:56.817000 audit[3622]: USER_END pid=3622 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:56.818000 audit[3622]: CRED_DISP pid=3622 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:56.822008 systemd-logind[1721]: Session 22 logged out. Waiting for processes to exit. Oct 2 18:52:56.824722 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 18:52:56.826949 systemd-logind[1721]: Removed session 22. Oct 2 18:52:56.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.160:22-139.178.89.65:39510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:56.828385 systemd[1]: sshd@21-172.31.25.160:22-139.178.89.65:39510.service: Deactivated successfully. Oct 2 18:52:58.493892 kubelet[2851]: E1002 18:52:58.493856 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:02.296731 kubelet[2851]: E1002 18:53:02.296691 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:53:03.495475 kubelet[2851]: E1002 18:53:03.495432 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:06.848445 systemd[1]: Started sshd@22-172.31.25.160:22-139.178.89.65:37854.service. Oct 2 18:53:06.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.160:22-139.178.89.65:37854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:06.853828 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 18:53:06.853960 kernel: audit: type=1130 audit(1696272786.848:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.160:22-139.178.89.65:37854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:07.041000 audit[3633]: USER_ACCT pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.043471 sshd[3633]: Accepted publickey for core from 139.178.89.65 port 37854 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:07.054816 kernel: audit: type=1101 audit(1696272787.041:1257): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.054000 audit[3633]: CRED_ACQ pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.056538 sshd[3633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:07.065834 kernel: audit: type=1103 audit(1696272787.054:1258): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.065997 kernel: audit: type=1006 audit(1696272787.054:1259): pid=3633 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 18:53:07.054000 audit[3633]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe874ce80 a2=3 a3=1 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:07.082396 kernel: audit: type=1300 audit(1696272787.054:1259): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe874ce80 a2=3 a3=1 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:07.054000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:07.086227 kernel: audit: type=1327 audit(1696272787.054:1259): proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:07.089931 systemd-logind[1721]: New session 23 of user core. Oct 2 18:53:07.091019 systemd[1]: Started session-23.scope. Oct 2 18:53:07.100000 audit[3633]: USER_START pid=3633 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.108000 audit[3635]: CRED_ACQ pid=3635 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.121366 kernel: audit: type=1105 audit(1696272787.100:1260): pid=3633 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.121534 kernel: audit: type=1103 audit(1696272787.108:1261): pid=3635 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.389124 sshd[3633]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:07.390000 audit[3633]: USER_END pid=3633 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.402152 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 18:53:07.391000 audit[3633]: CRED_DISP pid=3633 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.403544 systemd[1]: sshd@22-172.31.25.160:22-139.178.89.65:37854.service: Deactivated successfully. Oct 2 18:53:07.412988 kernel: audit: type=1106 audit(1696272787.390:1262): pid=3633 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.413131 kernel: audit: type=1104 audit(1696272787.391:1263): pid=3633 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:07.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.160:22-139.178.89.65:37854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:07.413884 systemd-logind[1721]: Session 23 logged out. Waiting for processes to exit. Oct 2 18:53:07.415719 systemd-logind[1721]: Removed session 23. Oct 2 18:53:08.496539 kubelet[2851]: E1002 18:53:08.496481 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:13.498208 kubelet[2851]: E1002 18:53:13.498170 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:16.300846 env[1731]: time="2023-10-02T18:53:16.300737230Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 18:53:16.323896 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1726473010.mount: Deactivated successfully. Oct 2 18:53:16.335516 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3317232111.mount: Deactivated successfully. Oct 2 18:53:16.341371 env[1731]: time="2023-10-02T18:53:16.341249748Z" level=info msg="CreateContainer within sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb\"" Oct 2 18:53:16.342594 env[1731]: time="2023-10-02T18:53:16.342541555Z" level=info msg="StartContainer for \"1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb\"" Oct 2 18:53:16.395915 systemd[1]: Started cri-containerd-1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb.scope. Oct 2 18:53:16.436648 systemd[1]: cri-containerd-1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb.scope: Deactivated successfully. Oct 2 18:53:16.464629 env[1731]: time="2023-10-02T18:53:16.464532141Z" level=info msg="shim disconnected" id=1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb Oct 2 18:53:16.465130 env[1731]: time="2023-10-02T18:53:16.465079445Z" level=warning msg="cleaning up after shim disconnected" id=1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb namespace=k8s.io Oct 2 18:53:16.465334 env[1731]: time="2023-10-02T18:53:16.465298917Z" level=info msg="cleaning up dead shim" Oct 2 18:53:16.494938 env[1731]: time="2023-10-02T18:53:16.494872201Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:53:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3671 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:53:16Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:53:16.495760 env[1731]: time="2023-10-02T18:53:16.495664753Z" level=error msg="copy shim log" error="read /proc/self/fd/42: file already closed" Oct 2 18:53:16.497469 env[1731]: time="2023-10-02T18:53:16.497343255Z" level=error msg="Failed to pipe stderr of container \"1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb\"" error="reading from a closed fifo" Oct 2 18:53:16.497737 env[1731]: time="2023-10-02T18:53:16.497387379Z" level=error msg="Failed to pipe stdout of container \"1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb\"" error="reading from a closed fifo" Oct 2 18:53:16.500360 env[1731]: time="2023-10-02T18:53:16.500276603Z" level=error msg="StartContainer for \"1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:53:16.501054 kubelet[2851]: E1002 18:53:16.500989 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb" Oct 2 18:53:16.501865 kubelet[2851]: E1002 18:53:16.501166 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:53:16.501865 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:53:16.501865 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:53:16.501865 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pxsfc,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:53:16.501865 kubelet[2851]: E1002 18:53:16.501238 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:53:16.921924 kubelet[2851]: I1002 18:53:16.921865 2851 scope.go:117] "RemoveContainer" containerID="bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686" Oct 2 18:53:16.922145 kubelet[2851]: I1002 18:53:16.922113 2851 scope.go:117] "RemoveContainer" containerID="bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686" Oct 2 18:53:16.925576 env[1731]: time="2023-10-02T18:53:16.925524651Z" level=info msg="RemoveContainer for \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\"" Oct 2 18:53:16.926356 env[1731]: time="2023-10-02T18:53:16.925925049Z" level=info msg="RemoveContainer for \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\"" Oct 2 18:53:16.926671 env[1731]: time="2023-10-02T18:53:16.926621215Z" level=error msg="RemoveContainer for \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\" failed" error="failed to set removing state for container \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\": container is already in removing state" Oct 2 18:53:16.930135 kubelet[2851]: E1002 18:53:16.928985 2851 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\": container is already in removing state" containerID="bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686" Oct 2 18:53:16.930135 kubelet[2851]: E1002 18:53:16.929093 2851 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686": container is already in removing state; Skipping pod "cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)" Oct 2 18:53:16.930135 kubelet[2851]: E1002 18:53:16.930082 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:53:16.932695 env[1731]: time="2023-10-02T18:53:16.932632203Z" level=info msg="RemoveContainer for \"bcd0e70fb6fbba2f9240b157860a798e041a529ff5e5e5206d321570b0850686\" returns successfully" Oct 2 18:53:17.314069 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb-rootfs.mount: Deactivated successfully. Oct 2 18:53:17.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.160:22-139.178.89.65:35162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:17.419845 systemd[1]: Started sshd@23-172.31.25.160:22-139.178.89.65:35162.service. Oct 2 18:53:17.422483 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:53:17.422579 kernel: audit: type=1130 audit(1696272797.419:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.160:22-139.178.89.65:35162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:17.609000 audit[3685]: USER_ACCT pid=3685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.611340 sshd[3685]: Accepted publickey for core from 139.178.89.65 port 35162 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:17.622824 kernel: audit: type=1101 audit(1696272797.609:1266): pid=3685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.625030 sshd[3685]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:17.623000 audit[3685]: CRED_ACQ pid=3685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.642286 kernel: audit: type=1103 audit(1696272797.623:1267): pid=3685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.642666 kernel: audit: type=1006 audit(1696272797.623:1268): pid=3685 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 18:53:17.642732 kernel: audit: type=1300 audit(1696272797.623:1268): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffadb76b0 a2=3 a3=1 items=0 ppid=1 pid=3685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:17.623000 audit[3685]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffadb76b0 a2=3 a3=1 items=0 ppid=1 pid=3685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:17.658223 kernel: audit: type=1327 audit(1696272797.623:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:17.623000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:17.664039 systemd-logind[1721]: New session 24 of user core. Oct 2 18:53:17.665119 systemd[1]: Started session-24.scope. Oct 2 18:53:17.678000 audit[3685]: USER_START pid=3685 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.691000 audit[3687]: CRED_ACQ pid=3687 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.702054 kernel: audit: type=1105 audit(1696272797.678:1269): pid=3685 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.702230 kernel: audit: type=1103 audit(1696272797.691:1270): pid=3687 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.977145 sshd[3685]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:17.978000 audit[3685]: USER_END pid=3685 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.980000 audit[3685]: CRED_DISP pid=3685 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.991962 kernel: audit: type=1106 audit(1696272797.978:1271): pid=3685 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:17.992124 systemd[1]: sshd@23-172.31.25.160:22-139.178.89.65:35162.service: Deactivated successfully. Oct 2 18:53:17.993548 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 18:53:17.996346 systemd-logind[1721]: Session 24 logged out. Waiting for processes to exit. Oct 2 18:53:17.998513 systemd-logind[1721]: Removed session 24. Oct 2 18:53:17.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.160:22-139.178.89.65:35162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:18.002832 kernel: audit: type=1104 audit(1696272797.980:1272): pid=3685 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.500909 kubelet[2851]: E1002 18:53:18.500840 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:19.570869 kubelet[2851]: W1002 18:53:19.570809 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod49549496_7e54_45dd_9052_51c33fe7ad79.slice/cri-containerd-1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb.scope WatchSource:0}: task 1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb not found: not found Oct 2 18:53:23.502751 kubelet[2851]: E1002 18:53:23.502597 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:28.007817 systemd[1]: Started sshd@24-172.31.25.160:22-139.178.89.65:44956.service. Oct 2 18:53:28.012972 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:53:28.013179 kernel: audit: type=1130 audit(1696272808.007:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.160:22-139.178.89.65:44956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:28.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.160:22-139.178.89.65:44956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:28.202000 audit[3697]: USER_ACCT pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.209034 sshd[3697]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:28.210462 sshd[3697]: Accepted publickey for core from 139.178.89.65 port 44956 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:28.203000 audit[3697]: CRED_ACQ pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.223834 kernel: audit: type=1101 audit(1696272808.202:1275): pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.224162 kernel: audit: type=1103 audit(1696272808.203:1276): pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.230549 kernel: audit: type=1006 audit(1696272808.203:1277): pid=3697 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 18:53:28.203000 audit[3697]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaaedc40 a2=3 a3=1 items=0 ppid=1 pid=3697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:28.241432 kernel: audit: type=1300 audit(1696272808.203:1277): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaaedc40 a2=3 a3=1 items=0 ppid=1 pid=3697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:28.203000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:28.245524 kernel: audit: type=1327 audit(1696272808.203:1277): proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:28.249866 systemd-logind[1721]: New session 25 of user core. Oct 2 18:53:28.251027 systemd[1]: Started session-25.scope. Oct 2 18:53:28.261000 audit[3697]: USER_START pid=3697 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.275000 audit[3699]: CRED_ACQ pid=3699 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.286937 kernel: audit: type=1105 audit(1696272808.261:1278): pid=3697 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.287087 kernel: audit: type=1103 audit(1696272808.275:1279): pid=3699 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.503823 kubelet[2851]: E1002 18:53:28.503767 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:28.549833 sshd[3697]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:28.551000 audit[3697]: USER_END pid=3697 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.557314 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 18:53:28.558797 systemd[1]: sshd@24-172.31.25.160:22-139.178.89.65:44956.service: Deactivated successfully. Oct 2 18:53:28.554000 audit[3697]: CRED_DISP pid=3697 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.564820 kernel: audit: type=1106 audit(1696272808.551:1280): pid=3697 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.564929 kernel: audit: type=1104 audit(1696272808.554:1281): pid=3697 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.565041 systemd-logind[1721]: Session 25 logged out. Waiting for processes to exit. Oct 2 18:53:28.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.160:22-139.178.89.65:44956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:28.575713 systemd-logind[1721]: Removed session 25. Oct 2 18:53:31.296839 kubelet[2851]: E1002 18:53:31.296767 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:53:33.505659 kubelet[2851]: E1002 18:53:33.505604 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:38.506682 kubelet[2851]: E1002 18:53:38.506635 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:38.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.160:22-139.178.89.65:55530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:38.584187 systemd[1]: Started sshd@25-172.31.25.160:22-139.178.89.65:55530.service. Oct 2 18:53:38.586718 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:53:38.586795 kernel: audit: type=1130 audit(1696272818.583:1283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.160:22-139.178.89.65:55530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:38.777000 audit[3709]: USER_ACCT pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:38.778989 sshd[3709]: Accepted publickey for core from 139.178.89.65 port 55530 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:38.788869 kernel: audit: type=1101 audit(1696272818.777:1284): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:38.790000 audit[3709]: CRED_ACQ pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:38.792345 sshd[3709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:38.808197 kernel: audit: type=1103 audit(1696272818.790:1285): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:38.808358 kernel: audit: type=1006 audit(1696272818.790:1286): pid=3709 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 18:53:38.790000 audit[3709]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca503100 a2=3 a3=1 items=0 ppid=1 pid=3709 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:38.820651 kernel: audit: type=1300 audit(1696272818.790:1286): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca503100 a2=3 a3=1 items=0 ppid=1 pid=3709 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:38.814635 systemd-logind[1721]: New session 26 of user core. Oct 2 18:53:38.815625 systemd[1]: Started session-26.scope. Oct 2 18:53:38.790000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:38.825594 kernel: audit: type=1327 audit(1696272818.790:1286): proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:38.826000 audit[3709]: USER_START pid=3709 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:38.840839 kernel: audit: type=1105 audit(1696272818.826:1287): pid=3709 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:38.840000 audit[3711]: CRED_ACQ pid=3711 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:38.851813 kernel: audit: type=1103 audit(1696272818.840:1288): pid=3711 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.119597 sshd[3709]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:39.122000 audit[3709]: USER_END pid=3709 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.126911 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 18:53:39.128208 systemd[1]: sshd@25-172.31.25.160:22-139.178.89.65:55530.service: Deactivated successfully. Oct 2 18:53:39.122000 audit[3709]: CRED_DISP pid=3709 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.145075 kernel: audit: type=1106 audit(1696272819.122:1289): pid=3709 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.145246 kernel: audit: type=1104 audit(1696272819.122:1290): pid=3709 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.145409 systemd-logind[1721]: Session 26 logged out. Waiting for processes to exit. Oct 2 18:53:39.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.160:22-139.178.89.65:55530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:39.147707 systemd-logind[1721]: Removed session 26. Oct 2 18:53:43.508104 kubelet[2851]: E1002 18:53:43.508067 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:45.296617 kubelet[2851]: E1002 18:53:45.296556 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:53:48.510126 kubelet[2851]: E1002 18:53:48.510061 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:48.849000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.852519 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:53:48.852644 kernel: audit: type=1400 audit(1696272828.849:1292): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.849000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007d53590 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.875388 kernel: audit: type=1300 audit(1696272828.849:1292): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007d53590 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.875528 kernel: audit: type=1327 audit(1696272828.849:1292): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:48.849000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:48.851000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.896079 kernel: audit: type=1400 audit(1696272828.851:1293): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.896246 kernel: audit: type=1300 audit(1696272828.851:1293): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007ed9a40 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.851000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007ed9a40 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.851000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:48.919134 kernel: audit: type=1327 audit(1696272828.851:1293): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:48.919290 kernel: audit: type=1400 audit(1696272828.881:1294): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.881000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.881000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a85c0a0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.940993 kernel: audit: type=1300 audit(1696272828.881:1294): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a85c0a0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.941117 kernel: audit: type=1327 audit(1696272828.881:1294): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:48.881000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:48.888000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.961595 kernel: audit: type=1400 audit(1696272828.888:1295): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.888000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007d537d0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.888000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:48.890000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.890000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4007ed9b00 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.890000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:48.890000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:48.890000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a85c0e0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:53:48.890000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:53:49.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.160:22-139.178.89.65:43636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:49.150410 systemd[1]: Started sshd@26-172.31.25.160:22-139.178.89.65:43636.service. Oct 2 18:53:49.336000 audit[3722]: USER_ACCT pid=3722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.338884 sshd[3722]: Accepted publickey for core from 139.178.89.65 port 43636 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:49.339000 audit[3722]: CRED_ACQ pid=3722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.340000 audit[3722]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff11ecef0 a2=3 a3=1 items=0 ppid=1 pid=3722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:49.340000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:49.342720 sshd[3722]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:49.351462 systemd-logind[1721]: New session 27 of user core. Oct 2 18:53:49.353442 systemd[1]: Started session-27.scope. Oct 2 18:53:49.364000 audit[3722]: USER_START pid=3722 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.372000 audit[3725]: CRED_ACQ pid=3725 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.648207 sshd[3722]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:49.655000 audit[3722]: USER_END pid=3722 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.656000 audit[3722]: CRED_DISP pid=3722 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.661866 systemd-logind[1721]: Session 27 logged out. Waiting for processes to exit. Oct 2 18:53:49.663515 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 18:53:49.664870 systemd[1]: sshd@26-172.31.25.160:22-139.178.89.65:43636.service: Deactivated successfully. Oct 2 18:53:49.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.160:22-139.178.89.65:43636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:49.667194 systemd-logind[1721]: Removed session 27. Oct 2 18:53:49.796000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:49.796000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:49.796000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001360660 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:53:49.796000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:49.796000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400147f770 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:53:49.796000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:51.419886 update_engine[1722]: I1002 18:53:51.419353 1722 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 18:53:51.419886 update_engine[1722]: I1002 18:53:51.419411 1722 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 18:53:51.419886 update_engine[1722]: I1002 18:53:51.419827 1722 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 18:53:51.423169 update_engine[1722]: I1002 18:53:51.420632 1722 omaha_request_params.cc:62] Current group set to lts Oct 2 18:53:51.423169 update_engine[1722]: I1002 18:53:51.420874 1722 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 18:53:51.423169 update_engine[1722]: I1002 18:53:51.420889 1722 update_attempter.cc:638] Scheduling an action processor start. Oct 2 18:53:51.423169 update_engine[1722]: I1002 18:53:51.420918 1722 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 18:53:51.423169 update_engine[1722]: I1002 18:53:51.420971 1722 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 18:53:51.423169 update_engine[1722]: I1002 18:53:51.421892 1722 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 18:53:51.423169 update_engine[1722]: I1002 18:53:51.421923 1722 omaha_request_action.cc:269] Request: Oct 2 18:53:51.423169 update_engine[1722]: Oct 2 18:53:51.423169 update_engine[1722]: Oct 2 18:53:51.423169 update_engine[1722]: Oct 2 18:53:51.423169 update_engine[1722]: Oct 2 18:53:51.423169 update_engine[1722]: Oct 2 18:53:51.423169 update_engine[1722]: Oct 2 18:53:51.423169 update_engine[1722]: Oct 2 18:53:51.423169 update_engine[1722]: Oct 2 18:53:51.423169 update_engine[1722]: I1002 18:53:51.421934 1722 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 18:53:51.424971 locksmithd[1774]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 18:53:51.425574 update_engine[1722]: I1002 18:53:51.425514 1722 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 18:53:51.425884 update_engine[1722]: I1002 18:53:51.425833 1722 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 18:53:52.647818 update_engine[1722]: I1002 18:53:52.647708 1722 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 18:53:52.648460 update_engine[1722]: I1002 18:53:52.648234 1722 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 18:53:52.648702 update_engine[1722]: I1002 18:53:52.648639 1722 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 18:53:52.971106 update_engine[1722]: I1002 18:53:52.971030 1722 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 18:53:52.973476 update_engine[1722]: I1002 18:53:52.973402 1722 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 18:53:52.973476 update_engine[1722]: I1002 18:53:52.973453 1722 omaha_request_action.cc:619] Omaha request response: Oct 2 18:53:52.973476 update_engine[1722]: Oct 2 18:53:52.981275 update_engine[1722]: I1002 18:53:52.981200 1722 omaha_request_action.cc:409] No update. Oct 2 18:53:52.981275 update_engine[1722]: I1002 18:53:52.981261 1722 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 18:53:52.981275 update_engine[1722]: I1002 18:53:52.981274 1722 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 18:53:52.981275 update_engine[1722]: I1002 18:53:52.981285 1722 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 18:53:52.981820 update_engine[1722]: I1002 18:53:52.981294 1722 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 18:53:52.981820 update_engine[1722]: I1002 18:53:52.981303 1722 update_attempter.cc:302] Processing Done. Oct 2 18:53:52.981820 update_engine[1722]: I1002 18:53:52.981328 1722 update_attempter.cc:338] No update. Oct 2 18:53:52.981820 update_engine[1722]: I1002 18:53:52.981346 1722 update_check_scheduler.cc:74] Next update check in 45m21s Oct 2 18:53:52.982122 locksmithd[1774]: LastCheckedTime=1696272832 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 18:53:53.512155 kubelet[2851]: E1002 18:53:53.512101 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:53.781000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:53.781000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001360a60 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:53:53.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:53.781000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:53.781000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001360aa0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:53:53.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:53.782000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:53.782000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001360e20 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:53:53.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:53.783000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:53.783000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001360e60 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:53:53.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:55.860382 amazon-ssm-agent[1709]: 2023-10-02 18:53:55 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 18:53:55.960901 amazon-ssm-agent[1709]: 2023-10-02 18:53:55 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-089efdaee6521ad39 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-089efdaee6521ad39 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 18:53:55.960901 amazon-ssm-agent[1709]: status code: 400, request id: c1d7becc-4ab9-46e4-9ed2-6c69e0b35332 Oct 2 18:53:56.296192 kubelet[2851]: E1002 18:53:56.296135 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-r7dnz_kube-system(49549496-7e54-45dd-9052-51c33fe7ad79)\"" pod="kube-system/cilium-r7dnz" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" Oct 2 18:53:58.513875 kubelet[2851]: E1002 18:53:58.513823 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:59.681967 systemd[1]: Started sshd@27-172.31.25.160:22-139.178.89.65:36352.service. Oct 2 18:53:59.685141 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 18:53:59.685218 kernel: audit: type=1130 audit(1696272839.681:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.160:22-139.178.89.65:36352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:59.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.160:22-139.178.89.65:36352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:59.875000 audit[3738]: USER_ACCT pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:59.877866 sshd[3738]: Accepted publickey for core from 139.178.89.65 port 36352 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:59.886927 kernel: audit: type=1101 audit(1696272839.875:1314): pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:59.888000 audit[3738]: CRED_ACQ pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:59.890013 sshd[3738]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:59.906292 systemd[1]: Started session-28.scope. Oct 2 18:53:59.909833 kernel: audit: type=1103 audit(1696272839.888:1315): pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:59.909932 kernel: audit: type=1006 audit(1696272839.888:1316): pid=3738 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 18:53:59.909271 systemd-logind[1721]: New session 28 of user core. Oct 2 18:53:59.888000 audit[3738]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3f1f410 a2=3 a3=1 items=0 ppid=1 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:59.926542 kernel: audit: type=1300 audit(1696272839.888:1316): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3f1f410 a2=3 a3=1 items=0 ppid=1 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:59.888000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:59.932977 kernel: audit: type=1327 audit(1696272839.888:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:59.918000 audit[3738]: USER_START pid=3738 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:59.934214 kernel: audit: type=1105 audit(1696272839.918:1317): pid=3738 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:59.927000 audit[3742]: CRED_ACQ pid=3742 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:59.954286 kernel: audit: type=1103 audit(1696272839.927:1318): pid=3742 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.214167 sshd[3738]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:00.215000 audit[3738]: USER_END pid=3738 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.221483 systemd-logind[1721]: Session 28 logged out. Waiting for processes to exit. Oct 2 18:54:00.224167 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 18:54:00.226581 systemd-logind[1721]: Removed session 28. Oct 2 18:54:00.228177 systemd[1]: sshd@27-172.31.25.160:22-139.178.89.65:36352.service: Deactivated successfully. Oct 2 18:54:00.228809 kernel: audit: type=1106 audit(1696272840.215:1319): pid=3738 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.215000 audit[3738]: CRED_DISP pid=3738 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.160:22-139.178.89.65:36352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:00.238872 kernel: audit: type=1104 audit(1696272840.215:1320): pid=3738 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.160:22-139.178.89.65:36364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:00.247311 systemd[1]: Started sshd@28-172.31.25.160:22-139.178.89.65:36364.service. Oct 2 18:54:00.436000 audit[3751]: USER_ACCT pid=3751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.437645 sshd[3751]: Accepted publickey for core from 139.178.89.65 port 36364 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:00.440000 audit[3751]: CRED_ACQ pid=3751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.440000 audit[3751]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1978530 a2=3 a3=1 items=0 ppid=1 pid=3751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:00.440000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:00.442527 sshd[3751]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:00.454968 systemd[1]: Started session-29.scope. Oct 2 18:54:00.455964 systemd-logind[1721]: New session 29 of user core. Oct 2 18:54:00.464000 audit[3751]: USER_START pid=3751 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.471000 audit[3753]: CRED_ACQ pid=3753 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:03.491578 env[1731]: time="2023-10-02T18:54:03.487676197Z" level=info msg="StopPodSandbox for \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\"" Oct 2 18:54:03.491578 env[1731]: time="2023-10-02T18:54:03.487972393Z" level=info msg="Container to stop \"1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:54:03.491399 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9-shm.mount: Deactivated successfully. Oct 2 18:54:03.515839 kubelet[2851]: E1002 18:54:03.515760 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:03.522118 systemd[1]: cri-containerd-82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9.scope: Deactivated successfully. Oct 2 18:54:03.521000 audit: BPF prog-id=123 op=UNLOAD Oct 2 18:54:03.526000 audit: BPF prog-id=126 op=UNLOAD Oct 2 18:54:03.561767 env[1731]: time="2023-10-02T18:54:03.561699806Z" level=info msg="StopContainer for \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\" with timeout 30 (s)" Oct 2 18:54:03.567630 env[1731]: time="2023-10-02T18:54:03.567559978Z" level=info msg="Stop container \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\" with signal terminated" Oct 2 18:54:03.637404 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9-rootfs.mount: Deactivated successfully. Oct 2 18:54:03.641276 systemd[1]: cri-containerd-c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763.scope: Deactivated successfully. Oct 2 18:54:03.641000 audit: BPF prog-id=130 op=UNLOAD Oct 2 18:54:03.645000 audit: BPF prog-id=133 op=UNLOAD Oct 2 18:54:03.666647 env[1731]: time="2023-10-02T18:54:03.666567504Z" level=info msg="shim disconnected" id=82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9 Oct 2 18:54:03.666647 env[1731]: time="2023-10-02T18:54:03.666642339Z" level=warning msg="cleaning up after shim disconnected" id=82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9 namespace=k8s.io Oct 2 18:54:03.667051 env[1731]: time="2023-10-02T18:54:03.666665812Z" level=info msg="cleaning up dead shim" Oct 2 18:54:03.702561 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763-rootfs.mount: Deactivated successfully. Oct 2 18:54:03.711726 env[1731]: time="2023-10-02T18:54:03.711649868Z" level=info msg="shim disconnected" id=c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763 Oct 2 18:54:03.712083 env[1731]: time="2023-10-02T18:54:03.711728700Z" level=warning msg="cleaning up after shim disconnected" id=c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763 namespace=k8s.io Oct 2 18:54:03.712083 env[1731]: time="2023-10-02T18:54:03.711754309Z" level=info msg="cleaning up dead shim" Oct 2 18:54:03.717510 env[1731]: time="2023-10-02T18:54:03.717428210Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3790 runtime=io.containerd.runc.v2\n" Oct 2 18:54:03.718162 env[1731]: time="2023-10-02T18:54:03.718047531Z" level=info msg="TearDown network for sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" successfully" Oct 2 18:54:03.718162 env[1731]: time="2023-10-02T18:54:03.718105373Z" level=info msg="StopPodSandbox for \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" returns successfully" Oct 2 18:54:03.752012 env[1731]: time="2023-10-02T18:54:03.750872900Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3809 runtime=io.containerd.runc.v2\n" Oct 2 18:54:03.755279 env[1731]: time="2023-10-02T18:54:03.755212467Z" level=info msg="StopContainer for \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\" returns successfully" Oct 2 18:54:03.756401 env[1731]: time="2023-10-02T18:54:03.756315792Z" level=info msg="StopPodSandbox for \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\"" Oct 2 18:54:03.756731 env[1731]: time="2023-10-02T18:54:03.756429880Z" level=info msg="Container to stop \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:54:03.759606 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859-shm.mount: Deactivated successfully. Oct 2 18:54:03.775073 kubelet[2851]: I1002 18:54:03.774430 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/49549496-7e54-45dd-9052-51c33fe7ad79-clustermesh-secrets\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.775073 kubelet[2851]: I1002 18:54:03.774622 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-hubble-tls\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.775073 kubelet[2851]: I1002 18:54:03.774804 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cni-path\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.775073 kubelet[2851]: I1002 18:54:03.774900 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-pxsfc\" (UniqueName: \"kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-kube-api-access-pxsfc\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.775073 kubelet[2851]: I1002 18:54:03.774948 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-lib-modules\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.775073 kubelet[2851]: I1002 18:54:03.775019 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-etc-cni-netd\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.775898 kubelet[2851]: I1002 18:54:03.775743 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-xtables-lock\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.777274 kubelet[2851]: I1002 18:54:03.777224 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-run\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.777594 kubelet[2851]: I1002 18:54:03.777537 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-hostproc\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.778100 kubelet[2851]: I1002 18:54:03.778056 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-bpf-maps\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.779525 kubelet[2851]: I1002 18:54:03.779487 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-host-proc-sys-net\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.779847 kubelet[2851]: I1002 18:54:03.779821 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-cgroup\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.780101 kubelet[2851]: I1002 18:54:03.780050 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-config-path\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.780993 kubelet[2851]: I1002 18:54:03.780944 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-host-proc-sys-kernel\") pod \"49549496-7e54-45dd-9052-51c33fe7ad79\" (UID: \"49549496-7e54-45dd-9052-51c33fe7ad79\") " Oct 2 18:54:03.782695 kubelet[2851]: I1002 18:54:03.782614 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.783056 kubelet[2851]: I1002 18:54:03.783018 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.783290 kubelet[2851]: I1002 18:54:03.777819 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-hostproc" (OuterVolumeSpecName: "hostproc") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.783466 kubelet[2851]: I1002 18:54:03.776246 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cni-path" (OuterVolumeSpecName: "cni-path") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.783665 kubelet[2851]: I1002 18:54:03.777032 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.783922 kubelet[2851]: I1002 18:54:03.777134 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.784147 kubelet[2851]: I1002 18:54:03.776177 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.784332 kubelet[2851]: I1002 18:54:03.777856 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.784586 kubelet[2851]: I1002 18:54:03.784510 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.785135 kubelet[2851]: I1002 18:54:03.785095 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:03.794481 systemd[1]: var-lib-kubelet-pods-49549496\x2d7e54\x2d45dd\x2d9052\x2d51c33fe7ad79-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 18:54:03.798217 kubelet[2851]: I1002 18:54:03.798137 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 18:54:03.801100 kubelet[2851]: I1002 18:54:03.801029 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/49549496-7e54-45dd-9052-51c33fe7ad79-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 18:54:03.802510 kubelet[2851]: I1002 18:54:03.802413 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:54:03.808000 audit: BPF prog-id=115 op=UNLOAD Oct 2 18:54:03.808444 systemd[1]: cri-containerd-b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859.scope: Deactivated successfully. Oct 2 18:54:03.812000 audit: BPF prog-id=118 op=UNLOAD Oct 2 18:54:03.817136 kubelet[2851]: I1002 18:54:03.817083 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-kube-api-access-pxsfc" (OuterVolumeSpecName: "kube-api-access-pxsfc") pod "49549496-7e54-45dd-9052-51c33fe7ad79" (UID: "49549496-7e54-45dd-9052-51c33fe7ad79"). InnerVolumeSpecName "kube-api-access-pxsfc". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:54:03.883967 env[1731]: time="2023-10-02T18:54:03.883378698Z" level=info msg="shim disconnected" id=b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859 Oct 2 18:54:03.883967 env[1731]: time="2023-10-02T18:54:03.883464046Z" level=warning msg="cleaning up after shim disconnected" id=b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859 namespace=k8s.io Oct 2 18:54:03.883967 env[1731]: time="2023-10-02T18:54:03.883491179Z" level=info msg="cleaning up dead shim" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883529 2851 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cni-path\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883574 2851 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-etc-cni-netd\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883603 2851 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-pxsfc\" (UniqueName: \"kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-kube-api-access-pxsfc\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883633 2851 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-lib-modules\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883662 2851 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-xtables-lock\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883686 2851 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-host-proc-sys-net\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883711 2851 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-run\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883734 2851 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-hostproc\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883756 2851 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-bpf-maps\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883807 2851 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-cgroup\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883836 2851 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/49549496-7e54-45dd-9052-51c33fe7ad79-cilium-config-path\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883861 2851 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/49549496-7e54-45dd-9052-51c33fe7ad79-host-proc-sys-kernel\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883885 2851 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/49549496-7e54-45dd-9052-51c33fe7ad79-clustermesh-secrets\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.884424 kubelet[2851]: I1002 18:54:03.883908 2851 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/49549496-7e54-45dd-9052-51c33fe7ad79-hubble-tls\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:03.914354 env[1731]: time="2023-10-02T18:54:03.914267237Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3848 runtime=io.containerd.runc.v2\n" Oct 2 18:54:03.915046 env[1731]: time="2023-10-02T18:54:03.914983546Z" level=info msg="TearDown network for sandbox \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\" successfully" Oct 2 18:54:03.915204 env[1731]: time="2023-10-02T18:54:03.915043069Z" level=info msg="StopPodSandbox for \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\" returns successfully" Oct 2 18:54:03.984466 kubelet[2851]: I1002 18:54:03.984408 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/55f72970-0b95-4cbe-8cb9-841c6c7797b1-cilium-config-path\") pod \"55f72970-0b95-4cbe-8cb9-841c6c7797b1\" (UID: \"55f72970-0b95-4cbe-8cb9-841c6c7797b1\") " Oct 2 18:54:03.984860 kubelet[2851]: I1002 18:54:03.984763 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-m96fr\" (UniqueName: \"kubernetes.io/projected/55f72970-0b95-4cbe-8cb9-841c6c7797b1-kube-api-access-m96fr\") pod \"55f72970-0b95-4cbe-8cb9-841c6c7797b1\" (UID: \"55f72970-0b95-4cbe-8cb9-841c6c7797b1\") " Oct 2 18:54:03.990312 kubelet[2851]: I1002 18:54:03.990192 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/55f72970-0b95-4cbe-8cb9-841c6c7797b1-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "55f72970-0b95-4cbe-8cb9-841c6c7797b1" (UID: "55f72970-0b95-4cbe-8cb9-841c6c7797b1"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 18:54:03.995678 kubelet[2851]: I1002 18:54:03.995607 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/55f72970-0b95-4cbe-8cb9-841c6c7797b1-kube-api-access-m96fr" (OuterVolumeSpecName: "kube-api-access-m96fr") pod "55f72970-0b95-4cbe-8cb9-841c6c7797b1" (UID: "55f72970-0b95-4cbe-8cb9-841c6c7797b1"). InnerVolumeSpecName "kube-api-access-m96fr". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:54:04.050603 kubelet[2851]: I1002 18:54:04.050425 2851 scope.go:117] "RemoveContainer" containerID="c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763" Oct 2 18:54:04.057128 env[1731]: time="2023-10-02T18:54:04.057022214Z" level=info msg="RemoveContainer for \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\"" Oct 2 18:54:04.063463 systemd[1]: Removed slice kubepods-besteffort-pod55f72970_0b95_4cbe_8cb9_841c6c7797b1.slice. Oct 2 18:54:04.065711 env[1731]: time="2023-10-02T18:54:04.065271974Z" level=info msg="RemoveContainer for \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\" returns successfully" Oct 2 18:54:04.067668 kubelet[2851]: I1002 18:54:04.067631 2851 scope.go:117] "RemoveContainer" containerID="c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763" Oct 2 18:54:04.069396 env[1731]: time="2023-10-02T18:54:04.069200526Z" level=error msg="ContainerStatus for \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\": not found" Oct 2 18:54:04.069818 kubelet[2851]: E1002 18:54:04.069764 2851 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\": not found" containerID="c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763" Oct 2 18:54:04.070916 kubelet[2851]: I1002 18:54:04.070887 2851 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763"} err="failed to get container status \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\": rpc error: code = NotFound desc = an error occurred when try to find container \"c6667c30dd364c30e164b1a211309958fcb1df1d5c30685992cac4b45fd08763\": not found" Oct 2 18:54:04.071107 kubelet[2851]: I1002 18:54:04.071084 2851 scope.go:117] "RemoveContainer" containerID="1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb" Oct 2 18:54:04.074757 env[1731]: time="2023-10-02T18:54:04.074245207Z" level=info msg="RemoveContainer for \"1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb\"" Oct 2 18:54:04.079934 env[1731]: time="2023-10-02T18:54:04.079849339Z" level=info msg="RemoveContainer for \"1e2aae001961e4420d1fecc3b43a10d9b7b1c619e4c0ef57d845f7cdb4f44ebb\" returns successfully" Oct 2 18:54:04.085044 systemd[1]: Removed slice kubepods-burstable-pod49549496_7e54_45dd_9052_51c33fe7ad79.slice. Oct 2 18:54:04.086926 kubelet[2851]: I1002 18:54:04.086892 2851 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/55f72970-0b95-4cbe-8cb9-841c6c7797b1-cilium-config-path\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:04.087316 kubelet[2851]: I1002 18:54:04.087295 2851 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-m96fr\" (UniqueName: \"kubernetes.io/projected/55f72970-0b95-4cbe-8cb9-841c6c7797b1-kube-api-access-m96fr\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:54:04.491020 systemd[1]: var-lib-kubelet-pods-49549496\x2d7e54\x2d45dd\x2d9052\x2d51c33fe7ad79-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 18:54:04.491485 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859-rootfs.mount: Deactivated successfully. Oct 2 18:54:04.491941 systemd[1]: var-lib-kubelet-pods-49549496\x2d7e54\x2d45dd\x2d9052\x2d51c33fe7ad79-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dpxsfc.mount: Deactivated successfully. Oct 2 18:54:04.492375 systemd[1]: var-lib-kubelet-pods-55f72970\x2d0b95\x2d4cbe\x2d8cb9\x2d841c6c7797b1-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dm96fr.mount: Deactivated successfully. Oct 2 18:54:05.300186 kubelet[2851]: I1002 18:54:05.300111 2851 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" path="/var/lib/kubelet/pods/49549496-7e54-45dd-9052-51c33fe7ad79/volumes" Oct 2 18:54:05.301287 kubelet[2851]: I1002 18:54:05.301237 2851 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="55f72970-0b95-4cbe-8cb9-841c6c7797b1" path="/var/lib/kubelet/pods/55f72970-0b95-4cbe-8cb9-841c6c7797b1/volumes" Oct 2 18:54:05.440154 sshd[3751]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:05.442000 audit[3751]: USER_END pid=3751 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.445615 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 18:54:05.445754 kernel: audit: type=1106 audit(1696272845.442:1334): pid=3751 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.447487 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 18:54:05.447836 systemd[1]: session-29.scope: Consumed 2.275s CPU time. Oct 2 18:54:05.448985 systemd[1]: sshd@28-172.31.25.160:22-139.178.89.65:36364.service: Deactivated successfully. Oct 2 18:54:05.458709 systemd-logind[1721]: Session 29 logged out. Waiting for processes to exit. Oct 2 18:54:05.443000 audit[3751]: CRED_DISP pid=3751 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.469549 kernel: audit: type=1104 audit(1696272845.443:1335): pid=3751 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.160:22-139.178.89.65:36364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:05.485536 kernel: audit: type=1131 audit(1696272845.448:1336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.160:22-139.178.89.65:36364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:05.473264 systemd[1]: Started sshd@29-172.31.25.160:22-139.178.89.65:36376.service. Oct 2 18:54:05.480885 systemd-logind[1721]: Removed session 29. Oct 2 18:54:05.496411 kernel: audit: type=1130 audit(1696272845.471:1337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.160:22-139.178.89.65:36376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:05.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.160:22-139.178.89.65:36376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:05.669000 audit[3864]: USER_ACCT pid=3864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.672982 sshd[3864]: Accepted publickey for core from 139.178.89.65 port 36376 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:05.682859 kernel: audit: type=1101 audit(1696272845.669:1338): pid=3864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.683000 audit[3864]: CRED_ACQ pid=3864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.685187 sshd[3864]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:05.701176 kernel: audit: type=1103 audit(1696272845.683:1339): pid=3864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.701320 kernel: audit: type=1006 audit(1696272845.683:1340): pid=3864 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 18:54:05.701373 kernel: audit: type=1300 audit(1696272845.683:1340): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6577350 a2=3 a3=1 items=0 ppid=1 pid=3864 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:05.683000 audit[3864]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6577350 a2=3 a3=1 items=0 ppid=1 pid=3864 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:05.700173 systemd[1]: Started session-30.scope. Oct 2 18:54:05.703163 systemd-logind[1721]: New session 30 of user core. Oct 2 18:54:05.683000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:05.715285 kernel: audit: type=1327 audit(1696272845.683:1340): proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:05.721965 kernel: audit: type=1105 audit(1696272845.715:1341): pid=3864 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.715000 audit[3864]: USER_START pid=3864 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:05.723000 audit[3866]: CRED_ACQ pid=3866 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:07.610840 kubelet[2851]: I1002 18:54:07.610798 2851 topology_manager.go:215] "Topology Admit Handler" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" podNamespace="kube-system" podName="cilium-8w47x" Oct 2 18:54:07.611703 kubelet[2851]: E1002 18:54:07.611671 2851 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.611931 kubelet[2851]: E1002 18:54:07.611908 2851 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.612089 kubelet[2851]: E1002 18:54:07.612067 2851 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="55f72970-0b95-4cbe-8cb9-841c6c7797b1" containerName="cilium-operator" Oct 2 18:54:07.612235 kubelet[2851]: E1002 18:54:07.612212 2851 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.612390 kubelet[2851]: E1002 18:54:07.612368 2851 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.612573 kubelet[2851]: I1002 18:54:07.612539 2851 memory_manager.go:346] "RemoveStaleState removing state" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.612755 kubelet[2851]: I1002 18:54:07.612723 2851 memory_manager.go:346] "RemoveStaleState removing state" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.612975 kubelet[2851]: I1002 18:54:07.612952 2851 memory_manager.go:346] "RemoveStaleState removing state" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.613148 kubelet[2851]: I1002 18:54:07.613125 2851 memory_manager.go:346] "RemoveStaleState removing state" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.613301 kubelet[2851]: I1002 18:54:07.613281 2851 memory_manager.go:346] "RemoveStaleState removing state" podUID="55f72970-0b95-4cbe-8cb9-841c6c7797b1" containerName="cilium-operator" Oct 2 18:54:07.613441 kubelet[2851]: I1002 18:54:07.613421 2851 memory_manager.go:346] "RemoveStaleState removing state" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.613629 kubelet[2851]: E1002 18:54:07.613598 2851 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.613766 kubelet[2851]: E1002 18:54:07.613746 2851 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.613947 kubelet[2851]: I1002 18:54:07.613925 2851 memory_manager.go:346] "RemoveStaleState removing state" podUID="49549496-7e54-45dd-9052-51c33fe7ad79" containerName="mount-cgroup" Oct 2 18:54:07.628247 systemd[1]: Created slice kubepods-burstable-pod9e7d8d1a_903c_4ff8_8a65_bc25de4eaca7.slice. Oct 2 18:54:07.809826 kubelet[2851]: I1002 18:54:07.809761 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-run\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.810184 kubelet[2851]: I1002 18:54:07.810161 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-cgroup\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.810431 kubelet[2851]: I1002 18:54:07.810366 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-etc-cni-netd\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.810747 kubelet[2851]: I1002 18:54:07.810595 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-config-path\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.811009 kubelet[2851]: I1002 18:54:07.810942 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-hostproc\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.811236 kubelet[2851]: I1002 18:54:07.811168 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-clustermesh-secrets\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.811441 kubelet[2851]: I1002 18:54:07.811404 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-hubble-tls\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.811691 kubelet[2851]: I1002 18:54:07.811670 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-ipsec-secrets\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.811956 kubelet[2851]: I1002 18:54:07.811891 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-host-proc-sys-kernel\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.812205 kubelet[2851]: I1002 18:54:07.812139 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-lib-modules\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.812428 kubelet[2851]: I1002 18:54:07.812366 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-xtables-lock\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.812647 kubelet[2851]: I1002 18:54:07.812586 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-host-proc-sys-net\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.812922 kubelet[2851]: I1002 18:54:07.812859 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6p6s9\" (UniqueName: \"kubernetes.io/projected/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-kube-api-access-6p6s9\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.813143 kubelet[2851]: I1002 18:54:07.813082 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-bpf-maps\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:07.813392 kubelet[2851]: I1002 18:54:07.813319 2851 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cni-path\") pod \"cilium-8w47x\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " pod="kube-system/cilium-8w47x" Oct 2 18:54:08.235910 env[1731]: time="2023-10-02T18:54:08.235694354Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-8w47x,Uid:9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7,Namespace:kube-system,Attempt:0,}" Oct 2 18:54:08.277137 env[1731]: time="2023-10-02T18:54:08.276968160Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:54:08.277338 env[1731]: time="2023-10-02T18:54:08.277172193Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:54:08.277338 env[1731]: time="2023-10-02T18:54:08.277259593Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:54:08.277886 env[1731]: time="2023-10-02T18:54:08.277764754Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6 pid=3884 runtime=io.containerd.runc.v2 Oct 2 18:54:08.308043 systemd[1]: Started cri-containerd-08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6.scope. Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.349000 audit: BPF prog-id=134 op=LOAD Oct 2 18:54:08.350000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.350000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3884 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:08.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623737656431343562666635343363303338633431626535343434 Oct 2 18:54:08.350000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.350000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3884 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:08.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623737656431343562666635343363303338633431626535343434 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.351000 audit: BPF prog-id=135 op=LOAD Oct 2 18:54:08.351000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3884 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:08.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623737656431343562666635343363303338633431626535343434 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.353000 audit: BPF prog-id=136 op=LOAD Oct 2 18:54:08.353000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3884 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:08.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623737656431343562666635343363303338633431626535343434 Oct 2 18:54:08.355000 audit: BPF prog-id=136 op=UNLOAD Oct 2 18:54:08.355000 audit: BPF prog-id=135 op=UNLOAD Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:08.355000 audit: BPF prog-id=137 op=LOAD Oct 2 18:54:08.355000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3884 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:08.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038623737656431343562666635343363303338633431626535343434 Oct 2 18:54:08.391789 env[1731]: time="2023-10-02T18:54:08.391718037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-8w47x,Uid:9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7,Namespace:kube-system,Attempt:0,} returns sandbox id \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\"" Oct 2 18:54:08.399404 env[1731]: time="2023-10-02T18:54:08.399349627Z" level=info msg="CreateContainer within sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 18:54:08.421069 env[1731]: time="2023-10-02T18:54:08.420980046Z" level=info msg="CreateContainer within sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\"" Oct 2 18:54:08.422937 env[1731]: time="2023-10-02T18:54:08.422881454Z" level=info msg="StartContainer for \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\"" Oct 2 18:54:08.468060 systemd[1]: Started cri-containerd-c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955.scope. Oct 2 18:54:08.506447 systemd[1]: cri-containerd-c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955.scope: Deactivated successfully. Oct 2 18:54:08.518947 kubelet[2851]: E1002 18:54:08.518895 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:08.545748 env[1731]: time="2023-10-02T18:54:08.545678522Z" level=info msg="shim disconnected" id=c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955 Oct 2 18:54:08.546147 env[1731]: time="2023-10-02T18:54:08.546099716Z" level=warning msg="cleaning up after shim disconnected" id=c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955 namespace=k8s.io Oct 2 18:54:08.546322 env[1731]: time="2023-10-02T18:54:08.546245894Z" level=info msg="cleaning up dead shim" Oct 2 18:54:08.574123 env[1731]: time="2023-10-02T18:54:08.574036508Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3943 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:54:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:54:08.574900 env[1731]: time="2023-10-02T18:54:08.574815761Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 18:54:08.576360 env[1731]: time="2023-10-02T18:54:08.575895147Z" level=error msg="Failed to pipe stdout of container \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\"" error="reading from a closed fifo" Oct 2 18:54:08.576499 env[1731]: time="2023-10-02T18:54:08.575948969Z" level=error msg="Failed to pipe stderr of container \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\"" error="reading from a closed fifo" Oct 2 18:54:08.578387 env[1731]: time="2023-10-02T18:54:08.578254314Z" level=error msg="StartContainer for \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:54:08.578816 kubelet[2851]: E1002 18:54:08.578752 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955" Oct 2 18:54:08.578999 kubelet[2851]: E1002 18:54:08.578930 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:54:08.578999 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:54:08.578999 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:54:08.578999 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6p6s9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:54:08.578999 kubelet[2851]: E1002 18:54:08.578995 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:54:09.085265 env[1731]: time="2023-10-02T18:54:09.085206778Z" level=info msg="CreateContainer within sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 18:54:09.111328 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1939048529.mount: Deactivated successfully. Oct 2 18:54:09.133018 env[1731]: time="2023-10-02T18:54:09.132948201Z" level=info msg="CreateContainer within sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\"" Oct 2 18:54:09.133918 env[1731]: time="2023-10-02T18:54:09.133841326Z" level=info msg="StartContainer for \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\"" Oct 2 18:54:09.191318 systemd[1]: Started cri-containerd-1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd.scope. Oct 2 18:54:09.230691 systemd[1]: cri-containerd-1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd.scope: Deactivated successfully. Oct 2 18:54:09.250332 env[1731]: time="2023-10-02T18:54:09.250264869Z" level=info msg="shim disconnected" id=1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd Oct 2 18:54:09.251312 env[1731]: time="2023-10-02T18:54:09.251270643Z" level=warning msg="cleaning up after shim disconnected" id=1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd namespace=k8s.io Oct 2 18:54:09.251454 env[1731]: time="2023-10-02T18:54:09.251424874Z" level=info msg="cleaning up dead shim" Oct 2 18:54:09.282233 env[1731]: time="2023-10-02T18:54:09.282171079Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3980 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:54:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:54:09.283912 env[1731]: time="2023-10-02T18:54:09.283821257Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 18:54:09.285341 env[1731]: time="2023-10-02T18:54:09.284221138Z" level=error msg="Failed to pipe stdout of container \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\"" error="reading from a closed fifo" Oct 2 18:54:09.285550 env[1731]: time="2023-10-02T18:54:09.285274051Z" level=error msg="Failed to pipe stderr of container \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\"" error="reading from a closed fifo" Oct 2 18:54:09.287654 env[1731]: time="2023-10-02T18:54:09.287558648Z" level=error msg="StartContainer for \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:54:09.288669 kubelet[2851]: E1002 18:54:09.288090 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd" Oct 2 18:54:09.288669 kubelet[2851]: E1002 18:54:09.288223 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:54:09.288669 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:54:09.288669 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:54:09.288669 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6p6s9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:54:09.288669 kubelet[2851]: E1002 18:54:09.288286 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:54:09.930502 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd-rootfs.mount: Deactivated successfully. Oct 2 18:54:10.087487 kubelet[2851]: I1002 18:54:10.087453 2851 scope.go:117] "RemoveContainer" containerID="c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955" Oct 2 18:54:10.088350 kubelet[2851]: I1002 18:54:10.088321 2851 scope.go:117] "RemoveContainer" containerID="c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955" Oct 2 18:54:10.091828 env[1731]: time="2023-10-02T18:54:10.091292964Z" level=info msg="RemoveContainer for \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\"" Oct 2 18:54:10.092932 env[1731]: time="2023-10-02T18:54:10.092845891Z" level=info msg="RemoveContainer for \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\"" Oct 2 18:54:10.093403 env[1731]: time="2023-10-02T18:54:10.093338644Z" level=error msg="RemoveContainer for \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\" failed" error="failed to set removing state for container \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\": container is already in removing state" Oct 2 18:54:10.095987 kubelet[2851]: E1002 18:54:10.095953 2851 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\": container is already in removing state" containerID="c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955" Oct 2 18:54:10.096345 kubelet[2851]: E1002 18:54:10.096317 2851 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955": container is already in removing state; Skipping pod "cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7)" Oct 2 18:54:10.097084 kubelet[2851]: E1002 18:54:10.097053 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7)\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:54:10.098704 env[1731]: time="2023-10-02T18:54:10.098611609Z" level=info msg="RemoveContainer for \"c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955\" returns successfully" Oct 2 18:54:11.653368 kubelet[2851]: W1002 18:54:11.653256 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9e7d8d1a_903c_4ff8_8a65_bc25de4eaca7.slice/cri-containerd-c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955.scope WatchSource:0}: container "c4874d1a2cb1a83672ac06193ca35963cf966f2eb9f8ec1851ba73970a9d5955" in namespace "k8s.io": not found Oct 2 18:54:13.520236 kubelet[2851]: E1002 18:54:13.520164 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:14.763079 kubelet[2851]: W1002 18:54:14.763028 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9e7d8d1a_903c_4ff8_8a65_bc25de4eaca7.slice/cri-containerd-1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd.scope WatchSource:0}: task 1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd not found: not found Oct 2 18:54:18.522125 kubelet[2851]: E1002 18:54:18.522082 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:22.300172 env[1731]: time="2023-10-02T18:54:22.300072746Z" level=info msg="CreateContainer within sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 18:54:22.328353 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2953830345.mount: Deactivated successfully. Oct 2 18:54:22.342667 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3459428996.mount: Deactivated successfully. Oct 2 18:54:22.350828 env[1731]: time="2023-10-02T18:54:22.350695796Z" level=info msg="CreateContainer within sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f\"" Oct 2 18:54:22.352076 env[1731]: time="2023-10-02T18:54:22.352012053Z" level=info msg="StartContainer for \"5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f\"" Oct 2 18:54:22.435130 systemd[1]: Started cri-containerd-5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f.scope. Oct 2 18:54:22.486881 systemd[1]: cri-containerd-5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f.scope: Deactivated successfully. Oct 2 18:54:22.514430 env[1731]: time="2023-10-02T18:54:22.514341544Z" level=info msg="shim disconnected" id=5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f Oct 2 18:54:22.515050 env[1731]: time="2023-10-02T18:54:22.514981090Z" level=warning msg="cleaning up after shim disconnected" id=5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f namespace=k8s.io Oct 2 18:54:22.515273 env[1731]: time="2023-10-02T18:54:22.515241238Z" level=info msg="cleaning up dead shim" Oct 2 18:54:22.548031 env[1731]: time="2023-10-02T18:54:22.547968014Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4020 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:54:22Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:54:22.548740 env[1731]: time="2023-10-02T18:54:22.548660290Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 18:54:22.550004 env[1731]: time="2023-10-02T18:54:22.549127124Z" level=error msg="Failed to pipe stdout of container \"5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f\"" error="reading from a closed fifo" Oct 2 18:54:22.551058 env[1731]: time="2023-10-02T18:54:22.549849125Z" level=error msg="Failed to pipe stderr of container \"5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f\"" error="reading from a closed fifo" Oct 2 18:54:22.552173 env[1731]: time="2023-10-02T18:54:22.552097957Z" level=error msg="StartContainer for \"5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:54:22.552881 kubelet[2851]: E1002 18:54:22.552546 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f" Oct 2 18:54:22.552881 kubelet[2851]: E1002 18:54:22.552692 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:54:22.552881 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:54:22.552881 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:54:22.552881 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6p6s9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:54:22.552881 kubelet[2851]: E1002 18:54:22.552755 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:54:23.127106 kubelet[2851]: I1002 18:54:23.127049 2851 scope.go:117] "RemoveContainer" containerID="1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd" Oct 2 18:54:23.128997 kubelet[2851]: I1002 18:54:23.128919 2851 scope.go:117] "RemoveContainer" containerID="1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd" Oct 2 18:54:23.129925 env[1731]: time="2023-10-02T18:54:23.129857184Z" level=info msg="RemoveContainer for \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\"" Oct 2 18:54:23.131987 env[1731]: time="2023-10-02T18:54:23.131900795Z" level=info msg="RemoveContainer for \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\"" Oct 2 18:54:23.132431 env[1731]: time="2023-10-02T18:54:23.132352881Z" level=error msg="RemoveContainer for \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\" failed" error="failed to set removing state for container \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\": container is already in removing state" Oct 2 18:54:23.133137 kubelet[2851]: E1002 18:54:23.133082 2851 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\": container is already in removing state" containerID="1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd" Oct 2 18:54:23.133996 kubelet[2851]: E1002 18:54:23.133957 2851 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd": container is already in removing state; Skipping pod "cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7)" Oct 2 18:54:23.137638 kubelet[2851]: E1002 18:54:23.137590 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7)\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:54:23.145517 env[1731]: time="2023-10-02T18:54:23.145426662Z" level=info msg="RemoveContainer for \"1aa45912e27ecf08548647d7ede825fb2e563d4f82b2ded24a5c1c74ad63b8cd\" returns successfully" Oct 2 18:54:23.318567 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f-rootfs.mount: Deactivated successfully. Oct 2 18:54:23.523563 kubelet[2851]: E1002 18:54:23.523517 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:25.621817 kubelet[2851]: W1002 18:54:25.620319 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9e7d8d1a_903c_4ff8_8a65_bc25de4eaca7.slice/cri-containerd-5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f.scope WatchSource:0}: task 5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f not found: not found Oct 2 18:54:28.525683 kubelet[2851]: E1002 18:54:28.525646 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:33.527376 kubelet[2851]: E1002 18:54:33.527341 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:37.296686 kubelet[2851]: E1002 18:54:37.296619 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7)\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:54:38.529605 kubelet[2851]: E1002 18:54:38.529542 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:43.531242 kubelet[2851]: E1002 18:54:43.531200 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:48.533204 kubelet[2851]: E1002 18:54:48.533129 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:48.851000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.853560 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 18:54:48.853724 kernel: audit: type=1400 audit(1696272888.851:1361): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.851000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40072b3710 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.875849 kernel: audit: type=1300 audit(1696272888.851:1361): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40072b3710 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.851000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:48.887052 kernel: audit: type=1327 audit(1696272888.851:1361): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:48.887223 kernel: audit: type=1400 audit(1696272888.852:1362): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.852000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.852000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400733bad0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.910107 kernel: audit: type=1300 audit(1696272888.852:1362): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400733bad0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.910302 kernel: audit: type=1327 audit(1696272888.852:1362): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:48.852000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:48.886000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.930214 kernel: audit: type=1400 audit(1696272888.886:1363): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.930390 kernel: audit: type=1300 audit(1696272888.886:1363): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40072e0b80 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.886000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40072e0b80 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.886000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:48.953492 kernel: audit: type=1327 audit(1696272888.886:1363): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:48.953712 kernel: audit: type=1400 audit(1696272888.886:1364): avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.886000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.886000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40072e0bc0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.886000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:48.886000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.886000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400733bbc0 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.886000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:48.896000 audit[2730]: AVC avc: denied { watch } for pid=2730 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:48.896000 audit[2730]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40072b3740 a2=fc6 a3=0 items=0 ppid=2568 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c366,c398 key=(null) Oct 2 18:54:48.896000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313630002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 18:54:49.797000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:49.797000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:49.797000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027c68c0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:54:49.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:49.797000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013755f0 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:54:49.797000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:52.300192 env[1731]: time="2023-10-02T18:54:52.299861485Z" level=info msg="CreateContainer within sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 18:54:52.322580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3248404756.mount: Deactivated successfully. Oct 2 18:54:52.338873 env[1731]: time="2023-10-02T18:54:52.338758753Z" level=info msg="CreateContainer within sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3\"" Oct 2 18:54:52.341764 env[1731]: time="2023-10-02T18:54:52.340230462Z" level=info msg="StartContainer for \"a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3\"" Oct 2 18:54:52.401192 systemd[1]: Started cri-containerd-a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3.scope. Oct 2 18:54:52.453904 systemd[1]: cri-containerd-a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3.scope: Deactivated successfully. Oct 2 18:54:52.487331 env[1731]: time="2023-10-02T18:54:52.487257369Z" level=info msg="shim disconnected" id=a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3 Oct 2 18:54:52.487764 env[1731]: time="2023-10-02T18:54:52.487700037Z" level=warning msg="cleaning up after shim disconnected" id=a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3 namespace=k8s.io Oct 2 18:54:52.488038 env[1731]: time="2023-10-02T18:54:52.487997616Z" level=info msg="cleaning up dead shim" Oct 2 18:54:52.516734 env[1731]: time="2023-10-02T18:54:52.516662592Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4060 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:54:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:54:52.517610 env[1731]: time="2023-10-02T18:54:52.517508469Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 18:54:52.519314 env[1731]: time="2023-10-02T18:54:52.518292554Z" level=error msg="Failed to pipe stdout of container \"a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3\"" error="reading from a closed fifo" Oct 2 18:54:52.519656 env[1731]: time="2023-10-02T18:54:52.519447639Z" level=error msg="Failed to pipe stderr of container \"a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3\"" error="reading from a closed fifo" Oct 2 18:54:52.522856 env[1731]: time="2023-10-02T18:54:52.522718736Z" level=error msg="StartContainer for \"a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:54:52.523568 kubelet[2851]: E1002 18:54:52.523445 2851 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3" Oct 2 18:54:52.524855 kubelet[2851]: E1002 18:54:52.523954 2851 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:54:52.524855 kubelet[2851]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:54:52.524855 kubelet[2851]: rm /hostbin/cilium-mount Oct 2 18:54:52.524855 kubelet[2851]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6p6s9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:54:52.524855 kubelet[2851]: E1002 18:54:52.524042 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:54:53.056885 kubelet[2851]: I1002 18:54:53.056841 2851 scope.go:117] "RemoveContainer" containerID="5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f" Oct 2 18:54:53.060074 env[1731]: time="2023-10-02T18:54:53.059997248Z" level=info msg="RemoveContainer for \"5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f\"" Oct 2 18:54:53.068221 env[1731]: time="2023-10-02T18:54:53.067987259Z" level=info msg="RemoveContainer for \"5e62c6ed0b18dd654a519c326b309f3b93c163012e89d5407cc2b4268ed2af0f\" returns successfully" Oct 2 18:54:53.072582 env[1731]: time="2023-10-02T18:54:53.072241892Z" level=info msg="StopPodSandbox for \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\"" Oct 2 18:54:53.072582 env[1731]: time="2023-10-02T18:54:53.072381555Z" level=info msg="TearDown network for sandbox \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\" successfully" Oct 2 18:54:53.072582 env[1731]: time="2023-10-02T18:54:53.072439902Z" level=info msg="StopPodSandbox for \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\" returns successfully" Oct 2 18:54:53.074546 env[1731]: time="2023-10-02T18:54:53.073668515Z" level=info msg="RemovePodSandbox for \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\"" Oct 2 18:54:53.074546 env[1731]: time="2023-10-02T18:54:53.073751812Z" level=info msg="Forcibly stopping sandbox \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\"" Oct 2 18:54:53.074546 env[1731]: time="2023-10-02T18:54:53.073926241Z" level=info msg="TearDown network for sandbox \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\" successfully" Oct 2 18:54:53.081049 env[1731]: time="2023-10-02T18:54:53.080954665Z" level=info msg="RemovePodSandbox \"b948f40bedaf4f523ff5d3673d4f943a9dcdca2fb74152ec1a4ecc0602dad859\" returns successfully" Oct 2 18:54:53.082178 env[1731]: time="2023-10-02T18:54:53.081858949Z" level=info msg="StopPodSandbox for \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\"" Oct 2 18:54:53.082178 env[1731]: time="2023-10-02T18:54:53.081997148Z" level=info msg="TearDown network for sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" successfully" Oct 2 18:54:53.082178 env[1731]: time="2023-10-02T18:54:53.082072608Z" level=info msg="StopPodSandbox for \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" returns successfully" Oct 2 18:54:53.085861 env[1731]: time="2023-10-02T18:54:53.083060716Z" level=info msg="RemovePodSandbox for \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\"" Oct 2 18:54:53.085861 env[1731]: time="2023-10-02T18:54:53.083117947Z" level=info msg="Forcibly stopping sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\"" Oct 2 18:54:53.085861 env[1731]: time="2023-10-02T18:54:53.083254659Z" level=info msg="TearDown network for sandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" successfully" Oct 2 18:54:53.091050 env[1731]: time="2023-10-02T18:54:53.090972351Z" level=info msg="RemovePodSandbox \"82e30ac7a51566856ae9b0a8c5e6fa12ffb710c2126d9b9d6f26cfc3d0166fd9\" returns successfully" Oct 2 18:54:53.209649 kubelet[2851]: E1002 18:54:53.209604 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7)\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:54:53.316929 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3-rootfs.mount: Deactivated successfully. Oct 2 18:54:53.393745 kubelet[2851]: W1002 18:54:53.393699 2851 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:54:53.534558 kubelet[2851]: E1002 18:54:53.534502 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:53.782000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:53.782000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:53.782000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027c7640 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:54:53.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:53.782000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e67040 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:54:53.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:53.784000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:53.784000 audit[2723]: AVC avc: denied { watch } for pid=2723 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:53.784000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027c7860 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:54:53.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:53.784000 audit[2723]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001e67060 a2=fc6 a3=0 items=0 ppid=2562 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:54:53.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:55.594647 kubelet[2851]: W1002 18:54:55.594597 2851 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9e7d8d1a_903c_4ff8_8a65_bc25de4eaca7.slice/cri-containerd-a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3.scope WatchSource:0}: task a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3 not found: not found Oct 2 18:54:58.535657 kubelet[2851]: E1002 18:54:58.535599 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:03.537063 kubelet[2851]: E1002 18:55:03.537004 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:06.296659 kubelet[2851]: E1002 18:55:06.296602 2851 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-8w47x_kube-system(9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7)\"" pod="kube-system/cilium-8w47x" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" Oct 2 18:55:08.538378 kubelet[2851]: E1002 18:55:08.538334 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:09.423352 env[1731]: time="2023-10-02T18:55:09.423189242Z" level=info msg="StopPodSandbox for \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\"" Oct 2 18:55:09.424550 env[1731]: time="2023-10-02T18:55:09.423315189Z" level=info msg="Container to stop \"a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:55:09.427084 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6-shm.mount: Deactivated successfully. Oct 2 18:55:09.463207 systemd[1]: cri-containerd-08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6.scope: Deactivated successfully. Oct 2 18:55:09.462000 audit: BPF prog-id=134 op=UNLOAD Oct 2 18:55:09.466978 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 18:55:09.467140 kernel: audit: type=1334 audit(1696272909.462:1373): prog-id=134 op=UNLOAD Oct 2 18:55:09.471000 audit: BPF prog-id=137 op=UNLOAD Oct 2 18:55:09.475826 kernel: audit: type=1334 audit(1696272909.471:1374): prog-id=137 op=UNLOAD Oct 2 18:55:09.552675 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6-rootfs.mount: Deactivated successfully. Oct 2 18:55:09.572613 env[1731]: time="2023-10-02T18:55:09.572547548Z" level=info msg="shim disconnected" id=08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6 Oct 2 18:55:09.573844 env[1731]: time="2023-10-02T18:55:09.573758247Z" level=warning msg="cleaning up after shim disconnected" id=08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6 namespace=k8s.io Oct 2 18:55:09.574096 env[1731]: time="2023-10-02T18:55:09.574062032Z" level=info msg="cleaning up dead shim" Oct 2 18:55:09.628148 env[1731]: time="2023-10-02T18:55:09.628084864Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:55:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4095 runtime=io.containerd.runc.v2\n" Oct 2 18:55:09.629009 env[1731]: time="2023-10-02T18:55:09.628947916Z" level=info msg="TearDown network for sandbox \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" successfully" Oct 2 18:55:09.629221 env[1731]: time="2023-10-02T18:55:09.629182733Z" level=info msg="StopPodSandbox for \"08b77ed145bff543c038c41be5444b044aaba6ccadfc4d6735c29dc22a2481e6\" returns successfully" Oct 2 18:55:09.722195 sshd[3864]: pam_unix(sshd:session): session closed for user core Oct 2 18:55:09.723000 audit[3864]: USER_END pid=3864 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:55:09.732140 kubelet[2851]: I1002 18:55:09.732079 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-ipsec-secrets\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.732926 kubelet[2851]: I1002 18:55:09.732898 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-bpf-maps\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.733127 kubelet[2851]: I1002 18:55:09.733105 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-xtables-lock\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.733297 kubelet[2851]: I1002 18:55:09.733276 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-run\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.733473 kubelet[2851]: I1002 18:55:09.733451 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-host-proc-sys-net\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.733639 kubelet[2851]: I1002 18:55:09.733619 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-hostproc\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.733930 kubelet[2851]: I1002 18:55:09.733907 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-6p6s9\" (UniqueName: \"kubernetes.io/projected/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-kube-api-access-6p6s9\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.734115 kubelet[2851]: I1002 18:55:09.734094 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cni-path\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.734313 kubelet[2851]: I1002 18:55:09.734280 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-clustermesh-secrets\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.734494 kubelet[2851]: I1002 18:55:09.734461 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-hubble-tls\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.734649 kubelet[2851]: I1002 18:55:09.734629 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-host-proc-sys-kernel\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.734857 kubelet[2851]: I1002 18:55:09.734825 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-lib-modules\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.735007 kubelet[2851]: I1002 18:55:09.734987 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-cgroup\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.735228 kubelet[2851]: I1002 18:55:09.735207 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-etc-cni-netd\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.735398 kubelet[2851]: I1002 18:55:09.735378 2851 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-config-path\") pod \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\" (UID: \"9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7\") " Oct 2 18:55:09.738421 systemd[1]: sshd@29-172.31.25.160:22-139.178.89.65:36376.service: Deactivated successfully. Oct 2 18:55:09.739720 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 18:55:09.740479 kubelet[2851]: I1002 18:55:09.740424 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cni-path" (OuterVolumeSpecName: "cni-path") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.740703 kubelet[2851]: I1002 18:55:09.740663 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.740983 kubelet[2851]: I1002 18:55:09.740879 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.741398 kubelet[2851]: I1002 18:55:09.741362 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.741402 systemd[1]: session-30.scope: Consumed 2.429s CPU time. Oct 2 18:55:09.742761 kubelet[2851]: I1002 18:55:09.742700 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.743490 systemd-logind[1721]: Session 30 logged out. Waiting for processes to exit. Oct 2 18:55:09.723000 audit[3864]: CRED_DISP pid=3864 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:55:09.748333 kubelet[2851]: I1002 18:55:09.745872 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-hostproc" (OuterVolumeSpecName: "hostproc") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.748541 kubelet[2851]: I1002 18:55:09.747860 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.748693 kubelet[2851]: I1002 18:55:09.747898 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.748877 kubelet[2851]: I1002 18:55:09.747956 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.749030 kubelet[2851]: I1002 18:55:09.747984 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:55:09.752541 kubelet[2851]: I1002 18:55:09.752478 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 18:55:09.754211 kernel: audit: type=1106 audit(1696272909.723:1375): pid=3864 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:55:09.754337 kernel: audit: type=1104 audit(1696272909.723:1376): pid=3864 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:55:09.755440 systemd-logind[1721]: Removed session 30. Oct 2 18:55:09.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.160:22-139.178.89.65:36376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:55:09.768190 kernel: audit: type=1131 audit(1696272909.738:1377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.160:22-139.178.89.65:36376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:55:09.776196 systemd[1]: var-lib-kubelet-pods-9e7d8d1a\x2d903c\x2d4ff8\x2d8a65\x2dbc25de4eaca7-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d6p6s9.mount: Deactivated successfully. Oct 2 18:55:09.776390 systemd[1]: var-lib-kubelet-pods-9e7d8d1a\x2d903c\x2d4ff8\x2d8a65\x2dbc25de4eaca7-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 18:55:09.781293 kubelet[2851]: I1002 18:55:09.781236 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 18:55:09.786131 kubelet[2851]: I1002 18:55:09.782994 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-kube-api-access-6p6s9" (OuterVolumeSpecName: "kube-api-access-6p6s9") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "kube-api-access-6p6s9". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:55:09.788852 systemd[1]: var-lib-kubelet-pods-9e7d8d1a\x2d903c\x2d4ff8\x2d8a65\x2dbc25de4eaca7-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 18:55:09.791607 kubelet[2851]: I1002 18:55:09.791521 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 18:55:09.792125 kubelet[2851]: I1002 18:55:09.792079 2851 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" (UID: "9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:55:09.836531 kubelet[2851]: I1002 18:55:09.836480 2851 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-etc-cni-netd\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.836716 kubelet[2851]: I1002 18:55:09.836535 2851 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-config-path\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.836716 kubelet[2851]: I1002 18:55:09.836572 2851 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-ipsec-secrets\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.836716 kubelet[2851]: I1002 18:55:09.836598 2851 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-bpf-maps\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.836716 kubelet[2851]: I1002 18:55:09.836621 2851 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-xtables-lock\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.836716 kubelet[2851]: I1002 18:55:09.836645 2851 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-run\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.836716 kubelet[2851]: I1002 18:55:09.836669 2851 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-host-proc-sys-net\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.836716 kubelet[2851]: I1002 18:55:09.836691 2851 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-hostproc\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.836716 kubelet[2851]: I1002 18:55:09.836713 2851 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cni-path\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.837253 kubelet[2851]: I1002 18:55:09.836737 2851 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-6p6s9\" (UniqueName: \"kubernetes.io/projected/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-kube-api-access-6p6s9\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.837253 kubelet[2851]: I1002 18:55:09.836764 2851 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-lib-modules\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.837253 kubelet[2851]: I1002 18:55:09.836825 2851 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-clustermesh-secrets\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.837253 kubelet[2851]: I1002 18:55:09.836850 2851 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-hubble-tls\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.837253 kubelet[2851]: I1002 18:55:09.836874 2851 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-host-proc-sys-kernel\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:09.837253 kubelet[2851]: I1002 18:55:09.836900 2851 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7-cilium-cgroup\") on node \"ip-172-31-25-160\" DevicePath \"\"" Oct 2 18:55:10.256545 kubelet[2851]: I1002 18:55:10.256489 2851 scope.go:117] "RemoveContainer" containerID="a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3" Oct 2 18:55:10.261957 env[1731]: time="2023-10-02T18:55:10.261430409Z" level=info msg="RemoveContainer for \"a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3\"" Oct 2 18:55:10.268482 systemd[1]: Removed slice kubepods-burstable-pod9e7d8d1a_903c_4ff8_8a65_bc25de4eaca7.slice. Oct 2 18:55:10.275381 env[1731]: time="2023-10-02T18:55:10.275305217Z" level=info msg="RemoveContainer for \"a221c4de58fceeee7a74ec377693c646863c2397de45e6ed18376b86f25ed5b3\" returns successfully" Oct 2 18:55:10.427169 systemd[1]: var-lib-kubelet-pods-9e7d8d1a\x2d903c\x2d4ff8\x2d8a65\x2dbc25de4eaca7-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 18:55:11.300530 kubelet[2851]: I1002 18:55:11.300474 2851 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7" path="/var/lib/kubelet/pods/9e7d8d1a-903c-4ff8-8a65-bc25de4eaca7/volumes" Oct 2 18:55:13.540432 kubelet[2851]: E1002 18:55:13.540378 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:18.541963 kubelet[2851]: E1002 18:55:18.541928 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:23.544160 kubelet[2851]: E1002 18:55:23.544126 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:24.513278 systemd[1]: cri-containerd-279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b.scope: Deactivated successfully. Oct 2 18:55:24.513818 systemd[1]: cri-containerd-279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b.scope: Consumed 8.592s CPU time. Oct 2 18:55:24.516000 audit: BPF prog-id=85 op=UNLOAD Oct 2 18:55:24.516000 audit: BPF prog-id=102 op=UNLOAD Oct 2 18:55:24.524884 kernel: audit: type=1334 audit(1696272924.516:1378): prog-id=85 op=UNLOAD Oct 2 18:55:24.525057 kernel: audit: type=1334 audit(1696272924.516:1379): prog-id=102 op=UNLOAD Oct 2 18:55:24.568300 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b-rootfs.mount: Deactivated successfully. Oct 2 18:55:24.593010 env[1731]: time="2023-10-02T18:55:24.592946666Z" level=info msg="shim disconnected" id=279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b Oct 2 18:55:24.593989 env[1731]: time="2023-10-02T18:55:24.593941631Z" level=warning msg="cleaning up after shim disconnected" id=279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b namespace=k8s.io Oct 2 18:55:24.594166 env[1731]: time="2023-10-02T18:55:24.594133870Z" level=info msg="cleaning up dead shim" Oct 2 18:55:24.622557 env[1731]: time="2023-10-02T18:55:24.622493081Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:55:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4126 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:55:24Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Oct 2 18:55:25.299471 kubelet[2851]: I1002 18:55:25.299405 2851 scope.go:117] "RemoveContainer" containerID="279f92b7e066f2cfd5b637d6b0708bf6641dac3370f908629e04ed1ad53ade7b" Oct 2 18:55:25.305151 env[1731]: time="2023-10-02T18:55:25.305084331Z" level=info msg="CreateContainer within sandbox \"4cd2baa83b0b2a9391485191523ec2bd67a9c033cb778aac9c61365a98470083\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 18:55:25.323303 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3198151167.mount: Deactivated successfully. Oct 2 18:55:25.335304 env[1731]: time="2023-10-02T18:55:25.335231539Z" level=info msg="CreateContainer within sandbox \"4cd2baa83b0b2a9391485191523ec2bd67a9c033cb778aac9c61365a98470083\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"e930d191d42245146d6fd537c2abcc06f38c328ad99de233abd0b3439817e429\"" Oct 2 18:55:25.336346 env[1731]: time="2023-10-02T18:55:25.336277039Z" level=info msg="StartContainer for \"e930d191d42245146d6fd537c2abcc06f38c328ad99de233abd0b3439817e429\"" Oct 2 18:55:25.381759 systemd[1]: Started cri-containerd-e930d191d42245146d6fd537c2abcc06f38c328ad99de233abd0b3439817e429.scope. Oct 2 18:55:25.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450195 kernel: audit: type=1400 audit(1696272925.433:1380): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450370 kernel: audit: type=1400 audit(1696272925.440:1381): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450437 kernel: audit: type=1400 audit(1696272925.440:1382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.465485 kernel: audit: type=1400 audit(1696272925.440:1383): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.465662 kernel: audit: type=1400 audit(1696272925.440:1384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.473538 kernel: audit: type=1400 audit(1696272925.440:1385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.491635 kernel: audit: type=1400 audit(1696272925.440:1386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.501664 kernel: audit: type=1400 audit(1696272925.441:1387): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.441000 audit: BPF prog-id=138 op=LOAD Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2562 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:25.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333064313931643432323435313436643666643533376332616263 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2562 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:25.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333064313931643432323435313436643666643533376332616263 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.442000 audit: BPF prog-id=139 op=LOAD Oct 2 18:55:25.442000 audit[4147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2562 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:25.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333064313931643432323435313436643666643533376332616263 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.450000 audit: BPF prog-id=140 op=LOAD Oct 2 18:55:25.450000 audit[4147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2562 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:25.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333064313931643432323435313436643666643533376332616263 Oct 2 18:55:25.457000 audit: BPF prog-id=140 op=UNLOAD Oct 2 18:55:25.457000 audit: BPF prog-id=139 op=UNLOAD Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { perfmon } for pid=4147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit[4147]: AVC avc: denied { bpf } for pid=4147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:25.457000 audit: BPF prog-id=141 op=LOAD Oct 2 18:55:25.457000 audit[4147]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2562 pid=4147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:25.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333064313931643432323435313436643666643533376332616263 Oct 2 18:55:25.555524 env[1731]: time="2023-10-02T18:55:25.552736208Z" level=info msg="StartContainer for \"e930d191d42245146d6fd537c2abcc06f38c328ad99de233abd0b3439817e429\" returns successfully" Oct 2 18:55:28.442000 audit[4158]: AVC avc: denied { watch } for pid=4158 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:28.442000 audit[4158]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400062a030 a2=fc6 a3=0 items=0 ppid=2562 pid=4158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:55:28.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:28.443000 audit[4158]: AVC avc: denied { watch } for pid=4158 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:28.443000 audit[4158]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400099c080 a2=fc6 a3=0 items=0 ppid=2562 pid=4158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c307,c905 key=(null) Oct 2 18:55:28.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:28.546854 kubelet[2851]: E1002 18:55:28.546807 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:29.792068 systemd[1]: cri-containerd-fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29.scope: Deactivated successfully. Oct 2 18:55:29.792639 systemd[1]: cri-containerd-fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29.scope: Consumed 3.070s CPU time. Oct 2 18:55:29.796000 audit: BPF prog-id=93 op=UNLOAD Oct 2 18:55:29.799136 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 18:55:29.799272 kernel: audit: type=1334 audit(1696272929.796:1400): prog-id=93 op=UNLOAD Oct 2 18:55:29.796000 audit: BPF prog-id=111 op=UNLOAD Oct 2 18:55:29.804851 kernel: audit: type=1334 audit(1696272929.796:1401): prog-id=111 op=UNLOAD Oct 2 18:55:29.850382 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29-rootfs.mount: Deactivated successfully. Oct 2 18:55:29.874101 env[1731]: time="2023-10-02T18:55:29.874013803Z" level=info msg="shim disconnected" id=fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29 Oct 2 18:55:29.874858 env[1731]: time="2023-10-02T18:55:29.874088183Z" level=warning msg="cleaning up after shim disconnected" id=fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29 namespace=k8s.io Oct 2 18:55:29.874858 env[1731]: time="2023-10-02T18:55:29.874148631Z" level=info msg="cleaning up dead shim" Oct 2 18:55:29.901115 env[1731]: time="2023-10-02T18:55:29.901039583Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:55:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4188 runtime=io.containerd.runc.v2\n" Oct 2 18:55:30.106195 kubelet[2851]: E1002 18:55:30.105458 2851 controller.go:193] "Failed to update lease" err="the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io ip-172-31-25-160)" Oct 2 18:55:30.312198 kubelet[2851]: I1002 18:55:30.312154 2851 scope.go:117] "RemoveContainer" containerID="fb493f3b954bccc343920034290c5fe2dffdf19e77fcd85a7266894db0acfb29" Oct 2 18:55:30.315628 env[1731]: time="2023-10-02T18:55:30.315571827Z" level=info msg="CreateContainer within sandbox \"84c60c362c5e0292dd810c5de3b1b01abcd45e5c8f0c97d9513c4019a42a7178\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 18:55:30.332562 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3055071444.mount: Deactivated successfully. Oct 2 18:55:30.345350 env[1731]: time="2023-10-02T18:55:30.345276560Z" level=info msg="CreateContainer within sandbox \"84c60c362c5e0292dd810c5de3b1b01abcd45e5c8f0c97d9513c4019a42a7178\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"2c521d680d2f36be3ca9507ac6b66431f572c108a305dd275d929da388afc67d\"" Oct 2 18:55:30.346307 env[1731]: time="2023-10-02T18:55:30.346261217Z" level=info msg="StartContainer for \"2c521d680d2f36be3ca9507ac6b66431f572c108a305dd275d929da388afc67d\"" Oct 2 18:55:30.396623 systemd[1]: Started cri-containerd-2c521d680d2f36be3ca9507ac6b66431f572c108a305dd275d929da388afc67d.scope. Oct 2 18:55:30.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.456317 kernel: audit: type=1400 audit(1696272930.440:1402): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.456463 kernel: audit: type=1400 audit(1696272930.445:1403): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.472352 kernel: audit: type=1400 audit(1696272930.445:1404): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.472548 kernel: audit: type=1400 audit(1696272930.445:1405): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.480663 kernel: audit: type=1400 audit(1696272930.445:1406): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.488879 kernel: audit: type=1400 audit(1696272930.445:1407): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.496703 kernel: audit: type=1400 audit(1696272930.445:1408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.496869 kernel: audit: type=1400 audit(1696272930.445:1409): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.447000 audit: BPF prog-id=142 op=LOAD Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2540 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:30.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263353231643638306432663336626533636139353037616336623636 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2540 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:30.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263353231643638306432663336626533636139353037616336623636 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.448000 audit: BPF prog-id=143 op=LOAD Oct 2 18:55:30.448000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2540 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:30.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263353231643638306432663336626533636139353037616336623636 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit: BPF prog-id=144 op=LOAD Oct 2 18:55:30.455000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2540 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:30.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263353231643638306432663336626533636139353037616336623636 Oct 2 18:55:30.455000 audit: BPF prog-id=144 op=UNLOAD Oct 2 18:55:30.455000 audit: BPF prog-id=143 op=UNLOAD Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:30.455000 audit: BPF prog-id=145 op=LOAD Oct 2 18:55:30.455000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2540 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:30.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263353231643638306432663336626533636139353037616336623636 Oct 2 18:55:30.538436 env[1731]: time="2023-10-02T18:55:30.538377210Z" level=info msg="StartContainer for \"2c521d680d2f36be3ca9507ac6b66431f572c108a305dd275d929da388afc67d\" returns successfully" Oct 2 18:55:33.547903 kubelet[2851]: E1002 18:55:33.547854 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:38.550061 kubelet[2851]: E1002 18:55:38.549639 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:39.460141 kubelet[2851]: E1002 18:55:39.460101 2851 kubelet_node_status.go:540] "Error updating node status, will retry" err="failed to patch status \"{\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"type\\\":\\\"DiskPressure\\\"},{\\\"type\\\":\\\"PIDPressure\\\"},{\\\"type\\\":\\\"Ready\\\"}],\\\"conditions\\\":[{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T18:55:29Z\\\",\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T18:55:29Z\\\",\\\"type\\\":\\\"DiskPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T18:55:29Z\\\",\\\"type\\\":\\\"PIDPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T18:55:29Z\\\",\\\"type\\\":\\\"Ready\\\"}]}}\" for node \"ip-172-31-25-160\": Patch \"https://172.31.25.160:6443/api/v1/nodes/ip-172-31-25-160/status?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 18:55:40.106512 kubelet[2851]: E1002 18:55:40.106448 2851 controller.go:193] "Failed to update lease" err="Put \"https://172.31.25.160:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-160?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 18:55:43.551283 kubelet[2851]: E1002 18:55:43.551225 2851 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"