Oct 2 19:01:03.200839 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:01:03.200877 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:01:03.200902 kernel: efi: EFI v2.70 by EDK II Oct 2 19:01:03.200918 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:01:03.200933 kernel: ACPI: Early table checksum verification disabled Oct 2 19:01:03.200947 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:01:03.200963 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:01:03.200977 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:01:03.200991 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:01:03.201005 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:01:03.201023 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:01:03.201037 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:01:03.201050 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:01:03.201064 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:01:03.201080 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:01:03.201099 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:01:03.201113 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:01:03.201128 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:01:03.201142 kernel: printk: bootconsole [uart0] enabled Oct 2 19:01:03.201156 kernel: NUMA: Failed to initialise from firmware Oct 2 19:01:03.201171 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:01:03.201185 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:01:03.201199 kernel: Zone ranges: Oct 2 19:01:03.201214 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:01:03.201228 kernel: DMA32 empty Oct 2 19:01:03.201242 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:01:03.201260 kernel: Movable zone start for each node Oct 2 19:01:03.201275 kernel: Early memory node ranges Oct 2 19:01:03.201289 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:01:03.203360 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:01:03.203381 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:01:03.203397 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:01:03.203412 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:01:03.203427 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:01:03.203441 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:01:03.203455 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:01:03.203470 kernel: psci: probing for conduit method from ACPI. Oct 2 19:01:03.203484 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:01:03.203506 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:01:03.203521 kernel: psci: Trusted OS migration not required Oct 2 19:01:03.203542 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:01:03.203558 kernel: ACPI: SRAT not present Oct 2 19:01:03.203574 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:01:03.203593 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:01:03.203609 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:01:03.203624 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:01:03.203639 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:01:03.203655 kernel: CPU features: detected: Spectre-v2 Oct 2 19:01:03.203670 kernel: CPU features: detected: Spectre-v3a Oct 2 19:01:03.203686 kernel: CPU features: detected: Spectre-BHB Oct 2 19:01:03.203701 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:01:03.203716 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:01:03.203731 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:01:03.203746 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:01:03.203765 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:01:03.203781 kernel: Policy zone: Normal Oct 2 19:01:03.203799 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:01:03.203815 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:01:03.203831 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:01:03.203846 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:01:03.203861 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:01:03.203876 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:01:03.203893 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:01:03.203909 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:01:03.203928 kernel: trace event string verifier disabled Oct 2 19:01:03.203943 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:01:03.203960 kernel: rcu: RCU event tracing is enabled. Oct 2 19:01:03.203975 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:01:03.203991 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:01:03.204006 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:01:03.204022 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:01:03.204037 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:01:03.204052 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:01:03.204067 kernel: GICv3: 96 SPIs implemented Oct 2 19:01:03.204082 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:01:03.204097 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:01:03.204117 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:01:03.204132 kernel: GICv3: 16 PPIs implemented Oct 2 19:01:03.204147 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:01:03.204162 kernel: ACPI: SRAT not present Oct 2 19:01:03.204176 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:01:03.204192 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:01:03.204207 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:01:03.204223 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:01:03.204238 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:01:03.204253 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:01:03.204268 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:01:03.204287 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:01:03.204332 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:01:03.204350 kernel: Console: colour dummy device 80x25 Oct 2 19:01:03.204366 kernel: printk: console [tty1] enabled Oct 2 19:01:03.204382 kernel: ACPI: Core revision 20210730 Oct 2 19:01:03.204399 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:01:03.204415 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:01:03.204430 kernel: LSM: Security Framework initializing Oct 2 19:01:03.204446 kernel: SELinux: Initializing. Oct 2 19:01:03.204462 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:01:03.204484 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:01:03.204499 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:01:03.204515 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:01:03.204530 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:01:03.204545 kernel: Remapping and enabling EFI services. Oct 2 19:01:03.204561 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:01:03.204576 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:01:03.204592 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:01:03.204608 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:01:03.204628 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:01:03.204643 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:01:03.204659 kernel: SMP: Total of 2 processors activated. Oct 2 19:01:03.204674 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:01:03.204690 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:01:03.204705 kernel: CPU features: detected: CRC32 instructions Oct 2 19:01:03.204721 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:01:03.204736 kernel: alternatives: patching kernel code Oct 2 19:01:03.204751 kernel: devtmpfs: initialized Oct 2 19:01:03.204770 kernel: KASLR disabled due to lack of seed Oct 2 19:01:03.204786 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:01:03.204803 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:01:03.204828 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:01:03.204848 kernel: SMBIOS 3.0.0 present. Oct 2 19:01:03.204864 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:01:03.204880 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:01:03.204897 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:01:03.204913 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:01:03.204930 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:01:03.204946 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:01:03.204962 kernel: audit: type=2000 audit(0.247:1): state=initialized audit_enabled=0 res=1 Oct 2 19:01:03.204983 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:01:03.205000 kernel: cpuidle: using governor menu Oct 2 19:01:03.205016 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:01:03.205032 kernel: ASID allocator initialised with 32768 entries Oct 2 19:01:03.205049 kernel: ACPI: bus type PCI registered Oct 2 19:01:03.205070 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:01:03.205087 kernel: Serial: AMBA PL011 UART driver Oct 2 19:01:03.205103 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:01:03.205119 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:01:03.205135 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:01:03.205152 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:01:03.205168 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:01:03.205184 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:01:03.205200 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:01:03.205220 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:01:03.205236 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:01:03.205252 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:01:03.205268 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:01:03.205284 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:01:03.205320 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:01:03.205340 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:01:03.205356 kernel: ACPI: Interpreter enabled Oct 2 19:01:03.205373 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:01:03.205394 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:01:03.205410 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:01:03.205837 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:01:03.206035 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:01:03.206227 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:01:03.213522 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:01:03.213751 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:01:03.213786 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:01:03.213805 kernel: acpiphp: Slot [1] registered Oct 2 19:01:03.213822 kernel: acpiphp: Slot [2] registered Oct 2 19:01:03.213838 kernel: acpiphp: Slot [3] registered Oct 2 19:01:03.213855 kernel: acpiphp: Slot [4] registered Oct 2 19:01:03.213871 kernel: acpiphp: Slot [5] registered Oct 2 19:01:03.213887 kernel: acpiphp: Slot [6] registered Oct 2 19:01:03.213904 kernel: acpiphp: Slot [7] registered Oct 2 19:01:03.213919 kernel: acpiphp: Slot [8] registered Oct 2 19:01:03.213940 kernel: acpiphp: Slot [9] registered Oct 2 19:01:03.213956 kernel: acpiphp: Slot [10] registered Oct 2 19:01:03.213972 kernel: acpiphp: Slot [11] registered Oct 2 19:01:03.213988 kernel: acpiphp: Slot [12] registered Oct 2 19:01:03.214005 kernel: acpiphp: Slot [13] registered Oct 2 19:01:03.214021 kernel: acpiphp: Slot [14] registered Oct 2 19:01:03.214037 kernel: acpiphp: Slot [15] registered Oct 2 19:01:03.214053 kernel: acpiphp: Slot [16] registered Oct 2 19:01:03.214069 kernel: acpiphp: Slot [17] registered Oct 2 19:01:03.214085 kernel: acpiphp: Slot [18] registered Oct 2 19:01:03.214105 kernel: acpiphp: Slot [19] registered Oct 2 19:01:03.214121 kernel: acpiphp: Slot [20] registered Oct 2 19:01:03.214138 kernel: acpiphp: Slot [21] registered Oct 2 19:01:03.214153 kernel: acpiphp: Slot [22] registered Oct 2 19:01:03.214169 kernel: acpiphp: Slot [23] registered Oct 2 19:01:03.214185 kernel: acpiphp: Slot [24] registered Oct 2 19:01:03.214201 kernel: acpiphp: Slot [25] registered Oct 2 19:01:03.214217 kernel: acpiphp: Slot [26] registered Oct 2 19:01:03.214233 kernel: acpiphp: Slot [27] registered Oct 2 19:01:03.214254 kernel: acpiphp: Slot [28] registered Oct 2 19:01:03.214270 kernel: acpiphp: Slot [29] registered Oct 2 19:01:03.214286 kernel: acpiphp: Slot [30] registered Oct 2 19:01:03.214321 kernel: acpiphp: Slot [31] registered Oct 2 19:01:03.214340 kernel: PCI host bridge to bus 0000:00 Oct 2 19:01:03.214544 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:01:03.214722 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:01:03.218382 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:01:03.218583 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:01:03.218801 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:01:03.219014 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:01:03.219213 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:01:03.219468 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:01:03.219667 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:01:03.219870 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:01:03.220078 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:01:03.220271 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:01:03.220504 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:01:03.220698 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:01:03.220890 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:01:03.221082 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:01:03.221282 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:01:03.221513 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:01:03.221708 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:01:03.221935 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:01:03.222122 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:01:03.222315 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:01:03.222500 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:01:03.222528 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:01:03.222546 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:01:03.222563 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:01:03.222580 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:01:03.222596 kernel: iommu: Default domain type: Translated Oct 2 19:01:03.222612 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:01:03.222628 kernel: vgaarb: loaded Oct 2 19:01:03.222644 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:01:03.222661 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:01:03.222681 kernel: PTP clock support registered Oct 2 19:01:03.222697 kernel: Registered efivars operations Oct 2 19:01:03.222714 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:01:03.222730 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:01:03.222747 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:01:03.222763 kernel: pnp: PnP ACPI init Oct 2 19:01:03.222970 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:01:03.222995 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:01:03.223012 kernel: NET: Registered PF_INET protocol family Oct 2 19:01:03.223033 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:01:03.223050 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:01:03.223067 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:01:03.223083 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:01:03.223099 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:01:03.223116 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:01:03.223132 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:01:03.223148 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:01:03.223165 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:01:03.223185 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:01:03.223201 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:01:03.223217 kernel: kvm [1]: HYP mode not available Oct 2 19:01:03.223234 kernel: Initialise system trusted keyrings Oct 2 19:01:03.223251 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:01:03.223267 kernel: Key type asymmetric registered Oct 2 19:01:03.223283 kernel: Asymmetric key parser 'x509' registered Oct 2 19:01:03.227384 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:01:03.227422 kernel: io scheduler mq-deadline registered Oct 2 19:01:03.227448 kernel: io scheduler kyber registered Oct 2 19:01:03.227466 kernel: io scheduler bfq registered Oct 2 19:01:03.227713 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:01:03.227739 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:01:03.227757 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:01:03.227774 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:01:03.227791 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:01:03.227986 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:01:03.228015 kernel: printk: console [ttyS0] disabled Oct 2 19:01:03.228032 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:01:03.228049 kernel: printk: console [ttyS0] enabled Oct 2 19:01:03.228065 kernel: printk: bootconsole [uart0] disabled Oct 2 19:01:03.228081 kernel: thunder_xcv, ver 1.0 Oct 2 19:01:03.228098 kernel: thunder_bgx, ver 1.0 Oct 2 19:01:03.228114 kernel: nicpf, ver 1.0 Oct 2 19:01:03.228130 kernel: nicvf, ver 1.0 Oct 2 19:01:03.228351 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:01:03.228544 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:01:02 UTC (1696273262) Oct 2 19:01:03.228568 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:01:03.228585 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:01:03.228601 kernel: Segment Routing with IPv6 Oct 2 19:01:03.228618 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:01:03.228634 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:01:03.228650 kernel: Key type dns_resolver registered Oct 2 19:01:03.228666 kernel: registered taskstats version 1 Oct 2 19:01:03.228687 kernel: Loading compiled-in X.509 certificates Oct 2 19:01:03.228704 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:01:03.228720 kernel: Key type .fscrypt registered Oct 2 19:01:03.228736 kernel: Key type fscrypt-provisioning registered Oct 2 19:01:03.228752 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:01:03.228768 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:01:03.228784 kernel: ima: No architecture policies found Oct 2 19:01:03.228801 kernel: Freeing unused kernel memory: 34560K Oct 2 19:01:03.228817 kernel: Run /init as init process Oct 2 19:01:03.228836 kernel: with arguments: Oct 2 19:01:03.228853 kernel: /init Oct 2 19:01:03.228868 kernel: with environment: Oct 2 19:01:03.228884 kernel: HOME=/ Oct 2 19:01:03.228900 kernel: TERM=linux Oct 2 19:01:03.228916 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:01:03.228937 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:01:03.228958 systemd[1]: Detected virtualization amazon. Oct 2 19:01:03.228980 systemd[1]: Detected architecture arm64. Oct 2 19:01:03.228999 systemd[1]: Running in initrd. Oct 2 19:01:03.229016 systemd[1]: No hostname configured, using default hostname. Oct 2 19:01:03.229033 systemd[1]: Hostname set to . Oct 2 19:01:03.229051 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:01:03.229069 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:01:03.229087 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:01:03.229104 systemd[1]: Reached target cryptsetup.target. Oct 2 19:01:03.229125 systemd[1]: Reached target paths.target. Oct 2 19:01:03.229143 systemd[1]: Reached target slices.target. Oct 2 19:01:03.229160 systemd[1]: Reached target swap.target. Oct 2 19:01:03.229177 systemd[1]: Reached target timers.target. Oct 2 19:01:03.229196 systemd[1]: Listening on iscsid.socket. Oct 2 19:01:03.229213 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:01:03.229231 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:01:03.229249 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:01:03.229270 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:01:03.229288 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:01:03.229325 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:01:03.229346 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:01:03.229365 systemd[1]: Reached target sockets.target. Oct 2 19:01:03.229383 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:01:03.229401 systemd[1]: Finished network-cleanup.service. Oct 2 19:01:03.229419 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:01:03.229436 systemd[1]: Starting systemd-journald.service... Oct 2 19:01:03.229459 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:01:03.229477 systemd[1]: Starting systemd-resolved.service... Oct 2 19:01:03.229495 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:01:03.229513 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:01:03.229531 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:01:03.229549 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:01:03.229566 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:01:03.229584 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:01:03.229601 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:01:03.229624 kernel: audit: type=1130 audit(1696273263.191:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.229646 systemd-journald[308]: Journal started Oct 2 19:01:03.229726 systemd-journald[308]: Runtime Journal (/run/log/journal/ec240b7efc12d91776348575be83a519) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:01:03.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.161327 systemd-modules-load[309]: Inserted module 'overlay' Oct 2 19:01:03.252294 systemd[1]: Started systemd-journald.service. Oct 2 19:01:03.252362 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:01:03.252391 kernel: Bridge firewalling registered Oct 2 19:01:03.194599 systemd-resolved[310]: Positive Trust Anchors: Oct 2 19:01:03.267274 kernel: audit: type=1130 audit(1696273263.251:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.194612 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:01:03.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.194674 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:01:03.306032 kernel: audit: type=1130 audit(1696273263.266:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.242561 systemd-modules-load[309]: Inserted module 'br_netfilter' Oct 2 19:01:03.311592 kernel: SCSI subsystem initialized Oct 2 19:01:03.252802 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:01:03.311941 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:01:03.334937 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:01:03.335002 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:01:03.338270 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:01:03.342730 systemd-modules-load[309]: Inserted module 'dm_multipath' Oct 2 19:01:03.348838 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:01:03.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.354401 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:01:03.372058 kernel: audit: type=1130 audit(1696273263.351:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.379869 dracut-cmdline[325]: dracut-dracut-053 Oct 2 19:01:03.389657 dracut-cmdline[325]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:01:03.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.439905 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:01:03.454665 kernel: audit: type=1130 audit(1696273263.442:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.615342 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:01:03.628342 kernel: iscsi: registered transport (tcp) Oct 2 19:01:03.655118 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:01:03.655200 kernel: QLogic iSCSI HBA Driver Oct 2 19:01:03.829326 kernel: random: crng init done Oct 2 19:01:03.829497 systemd-resolved[310]: Defaulting to hostname 'linux'. Oct 2 19:01:03.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.835912 systemd[1]: Started systemd-resolved.service. Oct 2 19:01:03.855090 kernel: audit: type=1130 audit(1696273263.838:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.840157 systemd[1]: Reached target nss-lookup.target. Oct 2 19:01:03.886904 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:01:03.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.894192 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:01:03.903831 kernel: audit: type=1130 audit(1696273263.891:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.987341 kernel: raid6: neonx8 gen() 6417 MB/s Oct 2 19:01:04.005330 kernel: raid6: neonx8 xor() 4718 MB/s Oct 2 19:01:04.023329 kernel: raid6: neonx4 gen() 6596 MB/s Oct 2 19:01:04.041329 kernel: raid6: neonx4 xor() 4906 MB/s Oct 2 19:01:04.059329 kernel: raid6: neonx2 gen() 5818 MB/s Oct 2 19:01:04.077329 kernel: raid6: neonx2 xor() 4527 MB/s Oct 2 19:01:04.095329 kernel: raid6: neonx1 gen() 4511 MB/s Oct 2 19:01:04.113329 kernel: raid6: neonx1 xor() 3676 MB/s Oct 2 19:01:04.131330 kernel: raid6: int64x8 gen() 3429 MB/s Oct 2 19:01:04.149329 kernel: raid6: int64x8 xor() 2090 MB/s Oct 2 19:01:04.167329 kernel: raid6: int64x4 gen() 3843 MB/s Oct 2 19:01:04.185329 kernel: raid6: int64x4 xor() 2201 MB/s Oct 2 19:01:04.203329 kernel: raid6: int64x2 gen() 3613 MB/s Oct 2 19:01:04.221329 kernel: raid6: int64x2 xor() 1953 MB/s Oct 2 19:01:04.239329 kernel: raid6: int64x1 gen() 2770 MB/s Oct 2 19:01:04.258844 kernel: raid6: int64x1 xor() 1454 MB/s Oct 2 19:01:04.258873 kernel: raid6: using algorithm neonx4 gen() 6596 MB/s Oct 2 19:01:04.258902 kernel: raid6: .... xor() 4906 MB/s, rmw enabled Oct 2 19:01:04.260655 kernel: raid6: using neon recovery algorithm Oct 2 19:01:04.279335 kernel: xor: measuring software checksum speed Oct 2 19:01:04.281327 kernel: 8regs : 9332 MB/sec Oct 2 19:01:04.284330 kernel: 32regs : 11108 MB/sec Oct 2 19:01:04.288248 kernel: arm64_neon : 9566 MB/sec Oct 2 19:01:04.288278 kernel: xor: using function: 32regs (11108 MB/sec) Oct 2 19:01:04.377341 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:01:04.415220 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:01:04.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.425000 audit: BPF prog-id=7 op=LOAD Oct 2 19:01:04.429106 kernel: audit: type=1130 audit(1696273264.416:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.429158 kernel: audit: type=1334 audit(1696273264.425:10): prog-id=7 op=LOAD Oct 2 19:01:04.427233 systemd[1]: Starting systemd-udevd.service... Oct 2 19:01:04.425000 audit: BPF prog-id=8 op=LOAD Oct 2 19:01:04.465204 systemd-udevd[507]: Using default interface naming scheme 'v252'. Oct 2 19:01:04.474143 systemd[1]: Started systemd-udevd.service. Oct 2 19:01:04.491869 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:01:04.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.539199 dracut-pre-trigger[528]: rd.md=0: removing MD RAID activation Oct 2 19:01:04.650599 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:01:04.656017 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:01:04.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.770770 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:01:04.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.908854 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:01:04.908915 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:01:04.923169 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:01:04.923529 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:01:04.928366 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:01:04.928429 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:01:04.939352 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:91:14:4a:7f:93 Oct 2 19:01:04.939629 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:01:04.947065 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:01:04.947117 kernel: GPT:9289727 != 16777215 Oct 2 19:01:04.949347 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:01:04.950702 kernel: GPT:9289727 != 16777215 Oct 2 19:01:04.952611 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:01:04.954178 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:01:04.958553 (udev-worker)[559]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:01:05.018342 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (568) Oct 2 19:01:05.082256 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:01:05.143989 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:01:05.232757 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:01:05.269447 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:01:05.278132 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:01:05.284513 systemd[1]: Starting disk-uuid.service... Oct 2 19:01:05.310027 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:01:05.310622 disk-uuid[673]: Primary Header is updated. Oct 2 19:01:05.310622 disk-uuid[673]: Secondary Entries is updated. Oct 2 19:01:05.310622 disk-uuid[673]: Secondary Header is updated. Oct 2 19:01:06.338325 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:01:06.339143 disk-uuid[674]: The operation has completed successfully. Oct 2 19:01:06.616460 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:01:06.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:06.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:06.616656 systemd[1]: Finished disk-uuid.service. Oct 2 19:01:06.635532 systemd[1]: Starting verity-setup.service... Oct 2 19:01:06.684366 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:01:06.776386 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:01:06.785949 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:01:06.793573 systemd[1]: Finished verity-setup.service. Oct 2 19:01:06.803325 kernel: kauditd_printk_skb: 6 callbacks suppressed Oct 2 19:01:06.803386 kernel: audit: type=1130 audit(1696273266.798:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:06.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:06.876332 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:01:06.878389 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:01:06.882285 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:01:06.883687 systemd[1]: Starting ignition-setup.service... Oct 2 19:01:06.897379 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:01:06.933660 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:01:06.933727 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:01:06.933751 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:01:06.956346 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:01:06.988427 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:01:07.018516 systemd[1]: Finished ignition-setup.service. Oct 2 19:01:07.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.021996 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:01:07.036340 kernel: audit: type=1130 audit(1696273267.019:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.260736 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:01:07.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.274000 audit: BPF prog-id=9 op=LOAD Oct 2 19:01:07.278975 kernel: audit: type=1130 audit(1696273267.266:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.279033 kernel: audit: type=1334 audit(1696273267.274:20): prog-id=9 op=LOAD Oct 2 19:01:07.276381 systemd[1]: Starting systemd-networkd.service... Oct 2 19:01:07.334108 systemd-networkd[1020]: lo: Link UP Oct 2 19:01:07.334129 systemd-networkd[1020]: lo: Gained carrier Oct 2 19:01:07.338446 systemd-networkd[1020]: Enumeration completed Oct 2 19:01:07.355074 kernel: audit: type=1130 audit(1696273267.340:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.338965 systemd-networkd[1020]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:01:07.339126 systemd[1]: Started systemd-networkd.service. Oct 2 19:01:07.341386 systemd[1]: Reached target network.target. Oct 2 19:01:07.345338 systemd[1]: Starting iscsiuio.service... Oct 2 19:01:07.354724 systemd-networkd[1020]: eth0: Link UP Oct 2 19:01:07.406373 kernel: audit: type=1130 audit(1696273267.370:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.354732 systemd-networkd[1020]: eth0: Gained carrier Oct 2 19:01:07.408522 iscsid[1025]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:01:07.408522 iscsid[1025]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 19:01:07.408522 iscsid[1025]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:01:07.408522 iscsid[1025]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:01:07.408522 iscsid[1025]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:01:07.408522 iscsid[1025]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:01:07.408522 iscsid[1025]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:01:07.483419 kernel: audit: type=1130 audit(1696273267.405:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.504226 kernel: audit: type=1130 audit(1696273267.471:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.369263 systemd[1]: Started iscsiuio.service. Oct 2 19:01:07.375113 systemd[1]: Starting iscsid.service... Oct 2 19:01:07.400124 systemd-networkd[1020]: eth0: DHCPv4 address 172.31.18.117/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:01:07.401629 systemd[1]: Started iscsid.service. Oct 2 19:01:07.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.409033 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:01:07.535349 kernel: audit: type=1130 audit(1696273267.524:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.467874 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:01:07.483068 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:01:07.485486 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:01:07.487645 systemd[1]: Reached target remote-fs.target. Oct 2 19:01:07.490919 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:01:07.522646 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:01:07.744265 ignition[937]: Ignition 2.14.0 Oct 2 19:01:07.744291 ignition[937]: Stage: fetch-offline Oct 2 19:01:07.744715 ignition[937]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:07.744824 ignition[937]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:07.767339 ignition[937]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:07.770787 ignition[937]: Ignition finished successfully Oct 2 19:01:07.774403 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:01:07.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.790351 kernel: audit: type=1130 audit(1696273267.775:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.787203 systemd[1]: Starting ignition-fetch.service... Oct 2 19:01:07.817653 ignition[1044]: Ignition 2.14.0 Oct 2 19:01:07.817682 ignition[1044]: Stage: fetch Oct 2 19:01:07.818025 ignition[1044]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:07.818082 ignition[1044]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:07.835421 ignition[1044]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:07.838263 ignition[1044]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:07.860128 ignition[1044]: INFO : PUT result: OK Oct 2 19:01:07.863350 ignition[1044]: DEBUG : parsed url from cmdline: "" Oct 2 19:01:07.863350 ignition[1044]: INFO : no config URL provided Oct 2 19:01:07.863350 ignition[1044]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:01:07.863350 ignition[1044]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:01:07.863350 ignition[1044]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:07.875778 ignition[1044]: INFO : PUT result: OK Oct 2 19:01:07.875778 ignition[1044]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:01:07.880263 ignition[1044]: INFO : GET result: OK Oct 2 19:01:07.880263 ignition[1044]: DEBUG : parsing config with SHA512: f2eaaa88f1a7b56c5a25e42e18bc0d8026c3d814dace74c9705c56a5c03d9b27062dad5d0b7a6380166d66027fabbea9585486097e54d2939152fec0bad3787c Oct 2 19:01:07.919552 unknown[1044]: fetched base config from "system" Oct 2 19:01:07.919580 unknown[1044]: fetched base config from "system" Oct 2 19:01:07.919600 unknown[1044]: fetched user config from "aws" Oct 2 19:01:07.926656 ignition[1044]: fetch: fetch complete Oct 2 19:01:07.926681 ignition[1044]: fetch: fetch passed Oct 2 19:01:07.930151 ignition[1044]: Ignition finished successfully Oct 2 19:01:07.934597 systemd[1]: Finished ignition-fetch.service. Oct 2 19:01:07.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.936199 systemd[1]: Starting ignition-kargs.service... Oct 2 19:01:07.975736 ignition[1050]: Ignition 2.14.0 Oct 2 19:01:07.975765 ignition[1050]: Stage: kargs Oct 2 19:01:07.976115 ignition[1050]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:07.976198 ignition[1050]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:07.993659 ignition[1050]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:07.996529 ignition[1050]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:08.000818 ignition[1050]: INFO : PUT result: OK Oct 2 19:01:08.005803 ignition[1050]: kargs: kargs passed Oct 2 19:01:08.006083 ignition[1050]: Ignition finished successfully Oct 2 19:01:08.011083 systemd[1]: Finished ignition-kargs.service. Oct 2 19:01:08.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.015952 systemd[1]: Starting ignition-disks.service... Oct 2 19:01:08.046127 ignition[1056]: Ignition 2.14.0 Oct 2 19:01:08.046156 ignition[1056]: Stage: disks Oct 2 19:01:08.046545 ignition[1056]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:08.046602 ignition[1056]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:08.063796 ignition[1056]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:08.066602 ignition[1056]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:08.070699 ignition[1056]: INFO : PUT result: OK Oct 2 19:01:08.075741 ignition[1056]: disks: disks passed Oct 2 19:01:08.076015 ignition[1056]: Ignition finished successfully Oct 2 19:01:08.080993 systemd[1]: Finished ignition-disks.service. Oct 2 19:01:08.084846 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:01:08.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.087088 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:01:08.089180 systemd[1]: Reached target local-fs.target. Oct 2 19:01:08.091180 systemd[1]: Reached target sysinit.target. Oct 2 19:01:08.093142 systemd[1]: Reached target basic.target. Oct 2 19:01:08.096470 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:01:08.151133 systemd-fsck[1064]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:01:08.162749 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:01:08.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.168072 systemd[1]: Mounting sysroot.mount... Oct 2 19:01:08.200329 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:01:08.203670 systemd[1]: Mounted sysroot.mount. Oct 2 19:01:08.207651 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:01:08.221792 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:01:08.229598 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:01:08.229708 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:01:08.229774 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:01:08.253442 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:01:08.269493 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:01:08.272906 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:01:08.302342 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1081) Oct 2 19:01:08.309915 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:01:08.309983 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:01:08.314515 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:01:08.321328 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:01:08.322975 initrd-setup-root[1086]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:01:08.329171 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:01:08.363635 initrd-setup-root[1112]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:01:08.381448 initrd-setup-root[1120]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:01:08.399082 initrd-setup-root[1128]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:01:08.433476 systemd-networkd[1020]: eth0: Gained IPv6LL Oct 2 19:01:08.657126 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:01:08.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.662490 systemd[1]: Starting ignition-mount.service... Oct 2 19:01:08.665605 systemd[1]: Starting sysroot-boot.service... Oct 2 19:01:08.698338 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:01:08.698529 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:01:08.741612 systemd[1]: Finished sysroot-boot.service. Oct 2 19:01:08.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.762420 ignition[1149]: INFO : Ignition 2.14.0 Oct 2 19:01:08.762420 ignition[1149]: INFO : Stage: mount Oct 2 19:01:08.766445 ignition[1149]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:08.766445 ignition[1149]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:08.783972 ignition[1149]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:08.787091 ignition[1149]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:08.791224 ignition[1149]: INFO : PUT result: OK Oct 2 19:01:08.799128 ignition[1149]: INFO : mount: mount passed Oct 2 19:01:08.801264 ignition[1149]: INFO : Ignition finished successfully Oct 2 19:01:08.804992 systemd[1]: Finished ignition-mount.service. Oct 2 19:01:08.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.810407 systemd[1]: Starting ignition-files.service... Oct 2 19:01:08.832815 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:01:08.857340 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1156) Oct 2 19:01:08.862901 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:01:08.862936 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:01:08.865087 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:01:08.872347 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:01:08.877333 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:01:08.912223 ignition[1175]: INFO : Ignition 2.14.0 Oct 2 19:01:08.912223 ignition[1175]: INFO : Stage: files Oct 2 19:01:08.919178 ignition[1175]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:08.919178 ignition[1175]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:08.934274 ignition[1175]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:08.934274 ignition[1175]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:08.941856 ignition[1175]: INFO : PUT result: OK Oct 2 19:01:08.947529 ignition[1175]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:01:08.952618 ignition[1175]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:01:08.955966 ignition[1175]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:01:08.983444 ignition[1175]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:01:08.987122 ignition[1175]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:01:08.991667 unknown[1175]: wrote ssh authorized keys file for user: core Oct 2 19:01:08.994361 ignition[1175]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:01:08.999273 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:01:09.004073 ignition[1175]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 19:01:09.329929 ignition[1175]: INFO : GET result: OK Oct 2 19:01:09.772251 ignition[1175]: DEBUG : file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 19:01:09.779520 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:01:09.779520 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:01:09.779520 ignition[1175]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:01:10.029866 ignition[1175]: INFO : GET result: OK Oct 2 19:01:10.273914 ignition[1175]: DEBUG : file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 19:01:10.280630 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:01:10.280630 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:01:10.280630 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:01:10.280630 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:01:10.280630 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:01:10.308129 ignition[1175]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2338208039" Oct 2 19:01:10.316288 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1177) Oct 2 19:01:10.316349 ignition[1175]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2338208039": device or resource busy Oct 2 19:01:10.316349 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2338208039", trying btrfs: device or resource busy Oct 2 19:01:10.316349 ignition[1175]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2338208039" Oct 2 19:01:10.328354 ignition[1175]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2338208039" Oct 2 19:01:10.343158 ignition[1175]: INFO : op(3): [started] unmounting "/mnt/oem2338208039" Oct 2 19:01:10.345975 ignition[1175]: INFO : op(3): [finished] unmounting "/mnt/oem2338208039" Oct 2 19:01:10.345975 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:01:10.353226 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:01:10.352447 systemd[1]: mnt-oem2338208039.mount: Deactivated successfully. Oct 2 19:01:10.360034 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:01:10.449795 ignition[1175]: INFO : GET result: OK Oct 2 19:01:11.714525 ignition[1175]: DEBUG : file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 19:01:11.720684 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:01:11.720684 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:01:11.720684 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:01:11.769368 ignition[1175]: INFO : GET result: OK Oct 2 19:01:13.779159 ignition[1175]: DEBUG : file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 19:01:13.785271 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:01:13.785271 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:01:13.785271 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:01:13.829441 ignition[1175]: INFO : GET result: OK Oct 2 19:01:14.684210 ignition[1175]: DEBUG : file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 19:01:14.691696 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:01:14.691696 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:01:14.691696 ignition[1175]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:01:14.794782 ignition[1175]: INFO : GET result: OK Oct 2 19:01:14.919807 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:01:14.924293 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:01:14.930799 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:01:14.934684 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:01:14.934684 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:01:14.934684 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:01:14.934684 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:01:14.960198 ignition[1175]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1161618512" Oct 2 19:01:14.963708 ignition[1175]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1161618512": device or resource busy Oct 2 19:01:14.963708 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1161618512", trying btrfs: device or resource busy Oct 2 19:01:14.963708 ignition[1175]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1161618512" Oct 2 19:01:14.963708 ignition[1175]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1161618512" Oct 2 19:01:14.963708 ignition[1175]: INFO : op(6): [started] unmounting "/mnt/oem1161618512" Oct 2 19:01:14.963708 ignition[1175]: INFO : op(6): [finished] unmounting "/mnt/oem1161618512" Oct 2 19:01:14.963708 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:01:14.963708 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:01:14.963708 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:01:15.019270 ignition[1175]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem126197100" Oct 2 19:01:15.019270 ignition[1175]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem126197100": device or resource busy Oct 2 19:01:15.019270 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem126197100", trying btrfs: device or resource busy Oct 2 19:01:15.019270 ignition[1175]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem126197100" Oct 2 19:01:15.019270 ignition[1175]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem126197100" Oct 2 19:01:15.019270 ignition[1175]: INFO : op(9): [started] unmounting "/mnt/oem126197100" Oct 2 19:01:15.019270 ignition[1175]: INFO : op(9): [finished] unmounting "/mnt/oem126197100" Oct 2 19:01:15.019270 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:01:15.019270 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:01:15.019270 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:01:14.972635 systemd[1]: mnt-oem1161618512.mount: Deactivated successfully. Oct 2 19:01:15.003968 systemd[1]: mnt-oem126197100.mount: Deactivated successfully. Oct 2 19:01:15.072781 ignition[1175]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem74294372" Oct 2 19:01:15.081454 ignition[1175]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem74294372": device or resource busy Oct 2 19:01:15.081454 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem74294372", trying btrfs: device or resource busy Oct 2 19:01:15.081454 ignition[1175]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem74294372" Oct 2 19:01:15.081454 ignition[1175]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem74294372" Oct 2 19:01:15.081454 ignition[1175]: INFO : op(c): [started] unmounting "/mnt/oem74294372" Oct 2 19:01:15.081454 ignition[1175]: INFO : op(c): [finished] unmounting "/mnt/oem74294372" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(12): [started] processing unit "nvidia.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(12): [finished] processing unit "nvidia.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(13): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(13): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:01:15.081454 ignition[1175]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(19): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(1b): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(1b): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(1c): [started] setting preset to enabled for "nvidia.service" Oct 2 19:01:15.152025 ignition[1175]: INFO : files: op(1c): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:01:15.205292 ignition[1175]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:01:15.209617 ignition[1175]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:01:15.209617 ignition[1175]: INFO : files: files passed Oct 2 19:01:15.222375 ignition[1175]: INFO : Ignition finished successfully Oct 2 19:01:15.225058 systemd[1]: Finished ignition-files.service. Oct 2 19:01:15.238611 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:01:15.238671 kernel: audit: type=1130 audit(1696273275.228:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.238770 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:01:15.251446 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:01:15.262833 systemd[1]: Starting ignition-quench.service... Oct 2 19:01:15.278785 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:01:15.281466 systemd[1]: Finished ignition-quench.service. Oct 2 19:01:15.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.302537 kernel: audit: type=1130 audit(1696273275.286:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.302608 kernel: audit: type=1131 audit(1696273275.286:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.302636 initrd-setup-root-after-ignition[1200]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:01:15.306815 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:01:15.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.312029 systemd[1]: Reached target ignition-complete.target. Oct 2 19:01:15.336125 kernel: audit: type=1130 audit(1696273275.310:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.324194 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:01:15.374557 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:01:15.374814 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:01:15.399406 kernel: audit: type=1130 audit(1696273275.377:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.399444 kernel: audit: type=1131 audit(1696273275.385:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.386748 systemd[1]: Reached target initrd-fs.target. Oct 2 19:01:15.395926 systemd[1]: Reached target initrd.target. Oct 2 19:01:15.399525 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:01:15.401927 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:01:15.446739 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:01:15.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.458004 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:01:15.462330 kernel: audit: type=1130 audit(1696273275.449:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.487026 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:01:15.491325 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:01:15.495809 systemd[1]: Stopped target timers.target. Oct 2 19:01:15.499648 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:01:15.502246 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:01:15.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.507629 systemd[1]: Stopped target initrd.target. Oct 2 19:01:15.515544 systemd[1]: Stopped target basic.target. Oct 2 19:01:15.517532 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:01:15.519799 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:01:15.522074 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:01:15.524426 systemd[1]: Stopped target remote-fs.target. Oct 2 19:01:15.526536 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:01:15.531029 systemd[1]: Stopped target sysinit.target. Oct 2 19:01:15.548075 systemd[1]: Stopped target local-fs.target. Oct 2 19:01:15.550167 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:01:15.552377 systemd[1]: Stopped target swap.target. Oct 2 19:01:15.554267 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:01:15.554581 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:01:15.566137 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:01:15.568258 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:01:15.568472 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:01:15.588179 kernel: audit: type=1131 audit(1696273275.505:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.588217 kernel: audit: type=1131 audit(1696273275.563:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.570802 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:01:15.617670 kernel: audit: type=1131 audit(1696273275.568:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.571006 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:01:15.628643 iscsid[1025]: iscsid shutting down. Oct 2 19:01:15.573649 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:01:15.573831 systemd[1]: Stopped ignition-files.service. Oct 2 19:01:15.577968 systemd[1]: Stopping ignition-mount.service... Oct 2 19:01:15.602958 systemd[1]: Stopping iscsid.service... Oct 2 19:01:15.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.611723 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:01:15.618114 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:01:15.618464 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:01:15.682740 ignition[1213]: INFO : Ignition 2.14.0 Oct 2 19:01:15.682740 ignition[1213]: INFO : Stage: umount Oct 2 19:01:15.682740 ignition[1213]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:15.682740 ignition[1213]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:15.620995 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:01:15.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.621221 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:01:15.688060 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:01:15.695394 systemd[1]: Stopped iscsid.service. Oct 2 19:01:15.699798 systemd[1]: Stopping iscsiuio.service... Oct 2 19:01:15.705129 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:01:15.705322 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:01:15.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.733060 ignition[1213]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:15.733060 ignition[1213]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:15.721768 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:01:15.721967 systemd[1]: Stopped iscsiuio.service. Oct 2 19:01:15.743168 ignition[1213]: INFO : PUT result: OK Oct 2 19:01:15.749028 ignition[1213]: INFO : umount: umount passed Oct 2 19:01:15.751213 ignition[1213]: INFO : Ignition finished successfully Oct 2 19:01:15.754892 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:01:15.755368 systemd[1]: Stopped ignition-mount.service. Oct 2 19:01:15.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.759544 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:01:15.759631 systemd[1]: Stopped ignition-disks.service. Oct 2 19:01:15.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.761649 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:01:15.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.761728 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:01:15.763788 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:01:15.809000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:01:15.763862 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:01:15.765964 systemd[1]: Stopped target network.target. Oct 2 19:01:15.767910 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:01:15.768011 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:01:15.770116 systemd[1]: Stopped target paths.target. Oct 2 19:01:15.771964 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:01:15.774411 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:01:15.780431 systemd[1]: Stopped target slices.target. Oct 2 19:01:15.786449 systemd[1]: Stopped target sockets.target. Oct 2 19:01:15.788500 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:01:15.788581 systemd[1]: Closed iscsid.socket. Oct 2 19:01:15.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.790377 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:01:15.790441 systemd[1]: Closed iscsiuio.socket. Oct 2 19:01:15.792237 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:01:15.792339 systemd[1]: Stopped ignition-setup.service. Oct 2 19:01:15.794685 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:01:15.796994 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:01:15.802582 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:01:15.802807 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:01:15.813390 systemd-networkd[1020]: eth0: DHCPv6 lease lost Oct 2 19:01:15.862000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:01:15.819994 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:01:15.829500 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:01:15.840176 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:01:15.840568 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:01:15.864682 systemd[1]: Stopping network-cleanup.service... Oct 2 19:01:15.877401 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:01:15.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.877526 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:01:15.882257 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:01:15.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.882394 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:01:15.894071 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:01:15.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.894169 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:01:15.896653 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:01:15.915923 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:01:15.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.916280 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:01:15.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.919091 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:01:15.919181 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:01:15.921452 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:01:15.921523 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:01:15.923658 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:01:15.923750 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:01:15.928203 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:01:15.928293 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:01:15.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.960211 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:01:15.960326 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:01:15.980843 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:01:15.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.983015 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:01:15.983141 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:01:16.003366 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:01:16.003465 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:01:16.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:16.014593 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:01:16.014692 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:01:16.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:16.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:16.021191 systemd[1]: mnt-oem74294372.mount: Deactivated successfully. Oct 2 19:01:16.021349 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:01:16.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:16.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:16.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:16.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:16.021469 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:01:16.021576 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:01:16.023133 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:01:16.023346 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:01:16.027658 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:01:16.029008 systemd[1]: Stopped network-cleanup.service. Oct 2 19:01:16.032353 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:01:16.032537 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:01:16.035123 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:01:16.039046 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:01:16.039134 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:01:16.042442 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:01:16.114857 systemd-journald[308]: Received SIGTERM from PID 1 (n/a). Oct 2 19:01:16.069370 systemd[1]: Switching root. Oct 2 19:01:16.117774 systemd-journald[308]: Journal stopped Oct 2 19:01:22.032573 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:01:22.033203 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:01:22.033239 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:01:22.033271 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:01:22.033327 kernel: SELinux: policy capability open_perms=1 Oct 2 19:01:22.033367 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:01:22.033398 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:01:22.033428 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:01:22.033459 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:01:22.033490 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:01:22.033522 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:01:22.033554 systemd[1]: Successfully loaded SELinux policy in 96.634ms. Oct 2 19:01:22.033775 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.559ms. Oct 2 19:01:22.033812 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:01:22.033848 systemd[1]: Detected virtualization amazon. Oct 2 19:01:22.033884 systemd[1]: Detected architecture arm64. Oct 2 19:01:22.033916 systemd[1]: Detected first boot. Oct 2 19:01:22.033948 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:01:22.033978 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:01:22.034008 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:01:22.034042 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:01:22.034079 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:01:22.034171 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 19:01:22.034204 kernel: audit: type=1334 audit(1696273281.495:84): prog-id=12 op=LOAD Oct 2 19:01:22.034235 kernel: audit: type=1334 audit(1696273281.495:85): prog-id=3 op=UNLOAD Oct 2 19:01:22.034264 kernel: audit: type=1334 audit(1696273281.497:86): prog-id=13 op=LOAD Oct 2 19:01:22.036817 kernel: audit: type=1334 audit(1696273281.500:87): prog-id=14 op=LOAD Oct 2 19:01:22.036879 kernel: audit: type=1334 audit(1696273281.500:88): prog-id=4 op=UNLOAD Oct 2 19:01:22.036912 kernel: audit: type=1334 audit(1696273281.500:89): prog-id=5 op=UNLOAD Oct 2 19:01:22.036946 kernel: audit: type=1334 audit(1696273281.505:90): prog-id=15 op=LOAD Oct 2 19:01:22.036977 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:01:22.037014 kernel: audit: type=1334 audit(1696273281.505:91): prog-id=12 op=UNLOAD Oct 2 19:01:22.037109 kernel: audit: type=1334 audit(1696273281.507:92): prog-id=16 op=LOAD Oct 2 19:01:22.037146 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:01:22.037175 kernel: audit: type=1334 audit(1696273281.510:93): prog-id=17 op=LOAD Oct 2 19:01:22.037206 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:01:22.037243 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:01:22.037280 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:01:22.037342 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:01:22.037377 systemd[1]: Created slice system-getty.slice. Oct 2 19:01:22.037411 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:01:22.037443 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:01:22.037475 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:01:22.037505 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:01:22.037534 systemd[1]: Created slice user.slice. Oct 2 19:01:22.037567 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:01:22.037597 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:01:22.037629 systemd[1]: Set up automount boot.automount. Oct 2 19:01:22.037660 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:01:22.037689 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:01:22.037721 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:01:22.037751 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:01:22.037783 systemd[1]: Reached target integritysetup.target. Oct 2 19:01:22.037812 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:01:22.037844 systemd[1]: Reached target remote-fs.target. Oct 2 19:01:22.037878 systemd[1]: Reached target slices.target. Oct 2 19:01:22.037908 systemd[1]: Reached target swap.target. Oct 2 19:01:22.037938 systemd[1]: Reached target torcx.target. Oct 2 19:01:22.037973 systemd[1]: Reached target veritysetup.target. Oct 2 19:01:22.038006 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:01:22.038035 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:01:22.038065 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:01:22.038097 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:01:22.038126 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:01:22.038159 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:01:22.038188 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:01:22.038218 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:01:22.038250 systemd[1]: Mounting media.mount... Oct 2 19:01:22.038279 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:01:22.038336 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:01:22.038369 systemd[1]: Mounting tmp.mount... Oct 2 19:01:22.038402 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:01:22.038432 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:01:22.038466 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:01:22.038495 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:01:22.038526 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:01:22.038557 systemd[1]: Starting modprobe@drm.service... Oct 2 19:01:22.038587 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:01:22.038616 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:01:22.038648 systemd[1]: Starting modprobe@loop.service... Oct 2 19:01:22.038679 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:01:22.038709 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:01:22.038742 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:01:22.038772 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:01:22.038801 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:01:22.038830 systemd[1]: Stopped systemd-journald.service. Oct 2 19:01:22.038946 systemd[1]: Starting systemd-journald.service... Oct 2 19:01:22.038977 kernel: fuse: init (API version 7.34) Oct 2 19:01:22.039008 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:01:22.039041 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:01:22.039069 kernel: loop: module loaded Oct 2 19:01:22.039101 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:01:22.039136 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:01:22.039186 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:01:22.039220 systemd[1]: Stopped verity-setup.service. Oct 2 19:01:22.039252 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:01:22.039399 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:01:22.039433 systemd[1]: Mounted media.mount. Oct 2 19:01:22.039462 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:01:22.039492 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:01:22.039523 systemd[1]: Mounted tmp.mount. Oct 2 19:01:22.039557 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:01:22.039587 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:01:22.039618 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:01:22.039648 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:01:22.039677 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:01:22.039711 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:01:22.039742 systemd[1]: Finished modprobe@drm.service. Oct 2 19:01:22.039774 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:01:22.039813 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:01:22.039850 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:01:22.039882 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:01:22.039913 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:01:22.039946 systemd[1]: Finished modprobe@loop.service. Oct 2 19:01:22.039976 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:01:22.040006 systemd[1]: Reached target network-pre.target. Oct 2 19:01:22.040035 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:01:22.040068 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:01:22.040098 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:01:22.040134 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:01:22.040166 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:01:22.040196 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:01:22.040228 systemd-journald[1323]: Journal started Oct 2 19:01:22.040348 systemd-journald[1323]: Runtime Journal (/run/log/journal/ec240b7efc12d91776348575be83a519) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:01:16.894000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:01:17.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:01:17.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:01:17.085000 audit: BPF prog-id=10 op=LOAD Oct 2 19:01:17.085000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:01:17.085000 audit: BPF prog-id=11 op=LOAD Oct 2 19:01:17.085000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:01:21.495000 audit: BPF prog-id=12 op=LOAD Oct 2 19:01:21.495000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:01:21.497000 audit: BPF prog-id=13 op=LOAD Oct 2 19:01:21.500000 audit: BPF prog-id=14 op=LOAD Oct 2 19:01:21.500000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:01:21.500000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:01:21.505000 audit: BPF prog-id=15 op=LOAD Oct 2 19:01:21.505000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:01:21.507000 audit: BPF prog-id=16 op=LOAD Oct 2 19:01:21.510000 audit: BPF prog-id=17 op=LOAD Oct 2 19:01:21.510000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:01:21.510000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:01:22.051372 systemd[1]: Started systemd-journald.service. Oct 2 19:01:21.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.528000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:01:21.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.830000 audit: BPF prog-id=18 op=LOAD Oct 2 19:01:21.830000 audit: BPF prog-id=19 op=LOAD Oct 2 19:01:21.830000 audit: BPF prog-id=20 op=LOAD Oct 2 19:01:21.830000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:01:21.830000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:01:21.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.028000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:01:22.028000 audit[1323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=fffff5e20910 a2=4000 a3=1 items=0 ppid=1 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:22.028000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:01:22.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.494727 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:01:17.300254 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:01:21.512919 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:01:17.311042 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:01:22.052528 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:01:17.311096 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:01:17.311161 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:01:17.311187 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:01:17.311252 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:01:17.311283 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:01:17.311707 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:01:17.311787 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:01:17.311822 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:01:17.312741 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:01:17.312840 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:01:17.312886 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:01:22.057629 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:01:17.312926 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:01:17.312972 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:01:17.313011 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:17Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:01:20.615603 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:20Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:01:20.616156 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:20Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:01:20.616422 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:20Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:01:20.616853 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:20Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:01:20.616959 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:20Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:01:22.065120 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:01:20.617096 /usr/lib/systemd/system-generators/torcx-generator[1248]: time="2023-10-02T19:01:20Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:01:22.072068 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:01:22.077686 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:01:22.082579 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:01:22.088842 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:01:22.121765 systemd-journald[1323]: Time spent on flushing to /var/log/journal/ec240b7efc12d91776348575be83a519 is 95.525ms for 1154 entries. Oct 2 19:01:22.121765 systemd-journald[1323]: System Journal (/var/log/journal/ec240b7efc12d91776348575be83a519) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:01:22.231036 systemd-journald[1323]: Received client request to flush runtime journal. Oct 2 19:01:22.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.140208 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:01:22.144801 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:01:22.207015 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:01:22.233618 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:01:22.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.264145 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:01:22.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.268841 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:01:22.294744 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:01:22.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.301251 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:01:22.312927 udevadm[1361]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:01:22.506085 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:01:22.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.512512 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:01:22.650227 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:01:22.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.026744 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:01:23.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.029000 audit: BPF prog-id=21 op=LOAD Oct 2 19:01:23.029000 audit: BPF prog-id=22 op=LOAD Oct 2 19:01:23.029000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:01:23.029000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:01:23.031738 systemd[1]: Starting systemd-udevd.service... Oct 2 19:01:23.077287 systemd-udevd[1370]: Using default interface naming scheme 'v252'. Oct 2 19:01:23.129821 systemd[1]: Started systemd-udevd.service. Oct 2 19:01:23.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.141000 audit: BPF prog-id=23 op=LOAD Oct 2 19:01:23.143889 systemd[1]: Starting systemd-networkd.service... Oct 2 19:01:23.163000 audit: BPF prog-id=24 op=LOAD Oct 2 19:01:23.163000 audit: BPF prog-id=25 op=LOAD Oct 2 19:01:23.164000 audit: BPF prog-id=26 op=LOAD Oct 2 19:01:23.166475 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:01:23.257062 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:01:23.304581 systemd[1]: Started systemd-userdbd.service. Oct 2 19:01:23.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.340010 (udev-worker)[1390]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:01:23.494420 systemd-networkd[1386]: lo: Link UP Oct 2 19:01:23.494442 systemd-networkd[1386]: lo: Gained carrier Oct 2 19:01:23.495408 systemd-networkd[1386]: Enumeration completed Oct 2 19:01:23.495568 systemd[1]: Started systemd-networkd.service. Oct 2 19:01:23.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.502053 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:01:23.508978 systemd-networkd[1386]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:01:23.517338 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:01:23.518080 systemd-networkd[1386]: eth0: Link UP Oct 2 19:01:23.518389 systemd-networkd[1386]: eth0: Gained carrier Oct 2 19:01:23.531601 systemd-networkd[1386]: eth0: DHCPv4 address 172.31.18.117/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:01:23.607356 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1387) Oct 2 19:01:23.806453 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:01:23.809718 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:01:23.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.820873 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:01:23.881653 lvm[1489]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:01:23.920345 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:01:23.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.923128 systemd[1]: Reached target cryptsetup.target. Oct 2 19:01:23.927866 systemd[1]: Starting lvm2-activation.service... Oct 2 19:01:23.943257 lvm[1490]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:01:23.977335 systemd[1]: Finished lvm2-activation.service. Oct 2 19:01:23.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.979671 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:01:23.981886 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:01:23.981941 systemd[1]: Reached target local-fs.target. Oct 2 19:01:23.983970 systemd[1]: Reached target machines.target. Oct 2 19:01:23.988049 systemd[1]: Starting ldconfig.service... Oct 2 19:01:23.992698 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:01:23.992834 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:01:23.995403 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:01:23.999438 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:01:24.004797 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:01:24.007196 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:01:24.007338 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:01:24.009825 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:01:24.039338 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1492 (bootctl) Oct 2 19:01:24.041605 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:01:24.066198 systemd-tmpfiles[1495]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:01:24.076484 systemd-tmpfiles[1495]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:01:24.079292 systemd-tmpfiles[1495]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:01:24.084487 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:01:24.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.177463 systemd-fsck[1500]: fsck.fat 4.2 (2021-01-31) Oct 2 19:01:24.177463 systemd-fsck[1500]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:01:24.185471 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:01:24.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.191258 systemd[1]: Mounting boot.mount... Oct 2 19:01:24.234057 systemd[1]: Mounted boot.mount. Oct 2 19:01:24.262923 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:01:24.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.427556 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:01:24.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.433140 systemd[1]: Starting audit-rules.service... Oct 2 19:01:24.438144 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:01:24.444865 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:01:24.449000 audit: BPF prog-id=27 op=LOAD Oct 2 19:01:24.452500 systemd[1]: Starting systemd-resolved.service... Oct 2 19:01:24.456000 audit: BPF prog-id=28 op=LOAD Oct 2 19:01:24.459289 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:01:24.464871 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:01:24.498000 audit[1519]: SYSTEM_BOOT pid=1519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.504733 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:01:24.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.509563 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:01:24.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.513916 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:01:24.580621 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:01:24.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.664920 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:01:24.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.668819 systemd[1]: Reached target time-set.target. Oct 2 19:01:24.683158 systemd-resolved[1517]: Positive Trust Anchors: Oct 2 19:01:24.683180 systemd-resolved[1517]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:01:24.683231 systemd-resolved[1517]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:01:24.713838 systemd-resolved[1517]: Defaulting to hostname 'linux'. Oct 2 19:01:24.717282 systemd[1]: Started systemd-resolved.service. Oct 2 19:01:24.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.720158 systemd[1]: Reached target network.target. Oct 2 19:01:24.722566 systemd[1]: Reached target nss-lookup.target. Oct 2 19:01:24.727000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:01:24.727000 audit[1535]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdfba1e50 a2=420 a3=0 items=0 ppid=1514 pid=1535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:24.727000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:01:24.729700 augenrules[1535]: No rules Oct 2 19:01:24.731264 systemd[1]: Finished audit-rules.service. Oct 2 19:01:26.120204 systemd-timesyncd[1518]: Contacted time server 207.192.69.118:123 (0.flatcar.pool.ntp.org). Oct 2 19:01:26.120432 systemd-timesyncd[1518]: Initial clock synchronization to Mon 2023-10-02 19:01:26.119916 UTC. Oct 2 19:01:26.120500 systemd-resolved[1517]: Clock change detected. Flushing caches. Oct 2 19:01:26.547369 ldconfig[1491]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:01:26.577105 systemd[1]: Finished ldconfig.service. Oct 2 19:01:26.581874 systemd[1]: Starting systemd-update-done.service... Oct 2 19:01:26.604805 systemd[1]: Finished systemd-update-done.service. Oct 2 19:01:26.607245 systemd[1]: Reached target sysinit.target. Oct 2 19:01:26.609501 systemd[1]: Started motdgen.path. Oct 2 19:01:26.611332 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:01:26.614434 systemd[1]: Started logrotate.timer. Oct 2 19:01:26.616549 systemd[1]: Started mdadm.timer. Oct 2 19:01:26.618284 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:01:26.620498 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:01:26.620549 systemd[1]: Reached target paths.target. Oct 2 19:01:26.622471 systemd[1]: Reached target timers.target. Oct 2 19:01:26.634540 systemd[1]: Listening on dbus.socket. Oct 2 19:01:26.638424 systemd[1]: Starting docker.socket... Oct 2 19:01:26.648146 systemd[1]: Listening on sshd.socket. Oct 2 19:01:26.650282 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:01:26.651174 systemd[1]: Listening on docker.socket. Oct 2 19:01:26.653215 systemd[1]: Reached target sockets.target. Oct 2 19:01:26.655301 systemd[1]: Reached target basic.target. Oct 2 19:01:26.657241 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:01:26.657292 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:01:26.659239 systemd[1]: Starting containerd.service... Oct 2 19:01:26.671240 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:01:26.675899 systemd[1]: Starting dbus.service... Oct 2 19:01:26.682952 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:01:26.688513 systemd[1]: Starting extend-filesystems.service... Oct 2 19:01:26.690551 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:01:26.693978 systemd[1]: Starting motdgen.service... Oct 2 19:01:26.699275 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:01:26.706308 systemd[1]: Starting prepare-critools.service... Oct 2 19:01:26.712684 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:01:26.717132 systemd[1]: Starting sshd-keygen.service... Oct 2 19:01:26.728628 systemd[1]: Starting systemd-logind.service... Oct 2 19:01:26.730535 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:01:26.730671 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:01:26.731545 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:01:26.770957 jq[1555]: true Oct 2 19:01:26.733730 systemd[1]: Starting update-engine.service... Oct 2 19:01:26.739641 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:01:26.787533 jq[1546]: false Oct 2 19:01:26.809162 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:01:26.809549 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:01:26.819809 tar[1557]: ./ Oct 2 19:01:26.823916 tar[1557]: ./macvlan Oct 2 19:01:26.831609 systemd-networkd[1386]: eth0: Gained IPv6LL Oct 2 19:01:26.837281 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:01:26.842434 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:01:26.842768 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:01:26.848879 tar[1558]: crictl Oct 2 19:01:26.848715 systemd[1]: Reached target network-online.target. Oct 2 19:01:26.854860 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:01:26.861120 systemd[1]: Started nvidia.service. Oct 2 19:01:26.870459 dbus-daemon[1545]: [system] SELinux support is enabled Oct 2 19:01:26.870766 systemd[1]: Started dbus.service. Oct 2 19:01:26.877598 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:01:26.877659 systemd[1]: Reached target system-config.target. Oct 2 19:01:26.881720 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:01:26.881767 systemd[1]: Reached target user-config.target. Oct 2 19:01:26.901576 systemd[1]: Created slice system-sshd.slice. Oct 2 19:01:26.910755 dbus-daemon[1545]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1386 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:01:26.920315 dbus-daemon[1545]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:01:26.952485 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:01:26.964222 jq[1560]: true Oct 2 19:01:27.128746 extend-filesystems[1547]: Found nvme0n1 Oct 2 19:01:27.132528 extend-filesystems[1547]: Found nvme0n1p1 Oct 2 19:01:27.132528 extend-filesystems[1547]: Found nvme0n1p2 Oct 2 19:01:27.132528 extend-filesystems[1547]: Found nvme0n1p3 Oct 2 19:01:27.132528 extend-filesystems[1547]: Found usr Oct 2 19:01:27.132528 extend-filesystems[1547]: Found nvme0n1p4 Oct 2 19:01:27.132528 extend-filesystems[1547]: Found nvme0n1p6 Oct 2 19:01:27.132528 extend-filesystems[1547]: Found nvme0n1p7 Oct 2 19:01:27.132528 extend-filesystems[1547]: Found nvme0n1p9 Oct 2 19:01:27.132528 extend-filesystems[1547]: Checking size of /dev/nvme0n1p9 Oct 2 19:01:27.216103 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:01:27.216477 systemd[1]: Finished motdgen.service. Oct 2 19:01:27.290379 tar[1557]: ./static Oct 2 19:01:27.368009 extend-filesystems[1547]: Resized partition /dev/nvme0n1p9 Oct 2 19:01:27.397828 amazon-ssm-agent[1572]: 2023/10/02 19:01:27 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:01:27.410686 dbus-daemon[1545]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:01:27.410941 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:01:27.415216 dbus-daemon[1545]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.4' (uid=0 pid=1586 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:01:27.429006 amazon-ssm-agent[1572]: Initializing new seelog logger Oct 2 19:01:27.429269 amazon-ssm-agent[1572]: New Seelog Logger Creation Complete Oct 2 19:01:27.429622 amazon-ssm-agent[1572]: 2023/10/02 19:01:27 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:01:27.429622 amazon-ssm-agent[1572]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:01:27.430221 amazon-ssm-agent[1572]: 2023/10/02 19:01:27 processing appconfig overrides Oct 2 19:01:27.432902 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:01:27.435978 systemd[1]: Starting polkit.service... Oct 2 19:01:27.441425 systemd-logind[1553]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:01:27.444091 extend-filesystems[1630]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:01:27.446565 systemd-logind[1553]: New seat seat0. Oct 2 19:01:27.458528 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:01:27.458895 systemd[1]: Started systemd-logind.service. Oct 2 19:01:27.474970 update_engine[1554]: I1002 19:01:27.463375 1554 main.cc:92] Flatcar Update Engine starting Oct 2 19:01:27.482297 systemd[1]: Started update-engine.service. Oct 2 19:01:27.525753 systemd[1]: Started locksmithd.service. Oct 2 19:01:27.535997 update_engine[1554]: I1002 19:01:27.482388 1554 update_check_scheduler.cc:74] Next update check in 2m11s Oct 2 19:01:27.540677 polkitd[1639]: Started polkitd version 121 Oct 2 19:01:27.597927 polkitd[1639]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:01:27.601793 env[1571]: time="2023-10-02T19:01:27.601388026Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:01:27.598030 polkitd[1639]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:01:27.611452 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:01:27.640556 bash[1632]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:01:27.631768 polkitd[1639]: Finished loading, compiling and executing 2 rules Oct 2 19:01:27.615254 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:01:27.636152 dbus-daemon[1545]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:01:27.636441 systemd[1]: Started polkit.service. Oct 2 19:01:27.647902 extend-filesystems[1630]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:01:27.647902 extend-filesystems[1630]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:01:27.647902 extend-filesystems[1630]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:01:27.691056 extend-filesystems[1547]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:01:27.659375 polkitd[1639]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:01:27.650166 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:01:27.650504 systemd[1]: Finished extend-filesystems.service. Oct 2 19:01:27.741339 tar[1557]: ./vlan Oct 2 19:01:27.746776 systemd-hostnamed[1586]: Hostname set to (transient) Oct 2 19:01:27.746945 systemd-resolved[1517]: System hostname changed to 'ip-172-31-18-117'. Oct 2 19:01:27.816574 env[1571]: time="2023-10-02T19:01:27.816405263Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:01:27.816768 env[1571]: time="2023-10-02T19:01:27.816720863Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:27.830068 env[1571]: time="2023-10-02T19:01:27.829958567Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:01:27.830068 env[1571]: time="2023-10-02T19:01:27.830025347Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:27.830483 env[1571]: time="2023-10-02T19:01:27.830428859Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:01:27.830584 env[1571]: time="2023-10-02T19:01:27.830479391Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:27.830584 env[1571]: time="2023-10-02T19:01:27.830513459Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:01:27.830584 env[1571]: time="2023-10-02T19:01:27.830538155Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:27.830745 env[1571]: time="2023-10-02T19:01:27.830711699Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:27.831403 env[1571]: time="2023-10-02T19:01:27.831348095Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:27.831753 env[1571]: time="2023-10-02T19:01:27.831664979Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:01:27.831753 env[1571]: time="2023-10-02T19:01:27.831715031Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:01:27.831943 env[1571]: time="2023-10-02T19:01:27.831847511Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:01:27.831943 env[1571]: time="2023-10-02T19:01:27.831875903Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:01:27.856020 env[1571]: time="2023-10-02T19:01:27.855917292Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:01:27.856020 env[1571]: time="2023-10-02T19:01:27.855992064Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:01:27.856270 env[1571]: time="2023-10-02T19:01:27.856026444Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:01:27.856270 env[1571]: time="2023-10-02T19:01:27.856109160Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.856616 env[1571]: time="2023-10-02T19:01:27.856567572Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.857005 env[1571]: time="2023-10-02T19:01:27.856624140Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.857005 env[1571]: time="2023-10-02T19:01:27.856657560Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.857319 env[1571]: time="2023-10-02T19:01:27.857257596Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.857405 env[1571]: time="2023-10-02T19:01:27.857321892Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.857577 env[1571]: time="2023-10-02T19:01:27.857480808Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.857650 env[1571]: time="2023-10-02T19:01:27.857576964Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.857650 env[1571]: time="2023-10-02T19:01:27.857609736Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:01:27.857907 env[1571]: time="2023-10-02T19:01:27.857833980Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:01:27.858056 env[1571]: time="2023-10-02T19:01:27.858016032Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:01:27.858908 env[1571]: time="2023-10-02T19:01:27.858857688Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:01:27.859018 env[1571]: time="2023-10-02T19:01:27.858926016Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859018 env[1571]: time="2023-10-02T19:01:27.858962268Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:01:27.859176 env[1571]: time="2023-10-02T19:01:27.859135620Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859503 env[1571]: time="2023-10-02T19:01:27.859447260Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859592 env[1571]: time="2023-10-02T19:01:27.859511328Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859592 env[1571]: time="2023-10-02T19:01:27.859544772Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859592 env[1571]: time="2023-10-02T19:01:27.859575696Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859751 env[1571]: time="2023-10-02T19:01:27.859605984Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859751 env[1571]: time="2023-10-02T19:01:27.859636164Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859751 env[1571]: time="2023-10-02T19:01:27.859665240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.859751 env[1571]: time="2023-10-02T19:01:27.859699056Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:01:27.859999 env[1571]: time="2023-10-02T19:01:27.859975572Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.860073 env[1571]: time="2023-10-02T19:01:27.860009760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.860073 env[1571]: time="2023-10-02T19:01:27.860040300Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.860179 env[1571]: time="2023-10-02T19:01:27.860069064Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:01:27.860179 env[1571]: time="2023-10-02T19:01:27.860103156Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:01:27.860179 env[1571]: time="2023-10-02T19:01:27.860130684Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:01:27.860179 env[1571]: time="2023-10-02T19:01:27.860167008Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:01:27.860395 env[1571]: time="2023-10-02T19:01:27.860231184Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:01:27.860742 env[1571]: time="2023-10-02T19:01:27.860628588Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:01:27.862187 env[1571]: time="2023-10-02T19:01:27.860743560Z" level=info msg="Connect containerd service" Oct 2 19:01:27.862187 env[1571]: time="2023-10-02T19:01:27.860803296Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:01:27.882120 env[1571]: time="2023-10-02T19:01:27.882050892Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:01:27.882648 env[1571]: time="2023-10-02T19:01:27.882600708Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:01:27.882744 env[1571]: time="2023-10-02T19:01:27.882708000Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:01:27.883116 env[1571]: time="2023-10-02T19:01:27.882803796Z" level=info msg="containerd successfully booted in 0.404361s" Oct 2 19:01:27.882928 systemd[1]: Started containerd.service. Oct 2 19:01:27.896583 env[1571]: time="2023-10-02T19:01:27.896501988Z" level=info msg="Start subscribing containerd event" Oct 2 19:01:27.896748 env[1571]: time="2023-10-02T19:01:27.896598072Z" level=info msg="Start recovering state" Oct 2 19:01:27.896748 env[1571]: time="2023-10-02T19:01:27.896716932Z" level=info msg="Start event monitor" Oct 2 19:01:27.896902 env[1571]: time="2023-10-02T19:01:27.896864652Z" level=info msg="Start snapshots syncer" Oct 2 19:01:27.896974 env[1571]: time="2023-10-02T19:01:27.896900268Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:01:27.896974 env[1571]: time="2023-10-02T19:01:27.896922672Z" level=info msg="Start streaming server" Oct 2 19:01:27.929367 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:01:27.976077 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:01:27.976753 tar[1557]: ./portmap Oct 2 19:01:28.093057 coreos-metadata[1544]: Oct 02 19:01:28.092 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:01:28.100743 coreos-metadata[1544]: Oct 02 19:01:28.100 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:01:28.101806 coreos-metadata[1544]: Oct 02 19:01:28.101 INFO Fetch successful Oct 2 19:01:28.101806 coreos-metadata[1544]: Oct 02 19:01:28.101 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:01:28.102950 coreos-metadata[1544]: Oct 02 19:01:28.102 INFO Fetch successful Oct 2 19:01:28.105402 unknown[1544]: wrote ssh authorized keys file for user: core Oct 2 19:01:28.146544 update-ssh-keys[1697]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:01:28.147340 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:01:28.148320 tar[1557]: ./host-local Oct 2 19:01:28.194902 amazon-ssm-agent[1572]: 2023-10-02 19:01:28 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-045ae72582bbaf141 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-045ae72582bbaf141 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:01:28.194902 amazon-ssm-agent[1572]: status code: 400, request id: e741d091-3d9c-461a-899e-bb62493fb82e Oct 2 19:01:28.194902 amazon-ssm-agent[1572]: 2023-10-02 19:01:28 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:01:28.264640 tar[1557]: ./vrf Oct 2 19:01:28.377803 tar[1557]: ./bridge Oct 2 19:01:28.523036 tar[1557]: ./tuning Oct 2 19:01:28.646637 tar[1557]: ./firewall Oct 2 19:01:28.799785 tar[1557]: ./host-device Oct 2 19:01:28.894557 tar[1557]: ./sbr Oct 2 19:01:28.985796 tar[1557]: ./loopback Oct 2 19:01:29.012043 systemd[1]: Finished prepare-critools.service. Oct 2 19:01:29.047118 tar[1557]: ./dhcp Oct 2 19:01:29.160227 tar[1557]: ./ptp Oct 2 19:01:29.210237 tar[1557]: ./ipvlan Oct 2 19:01:29.257757 tar[1557]: ./bandwidth Oct 2 19:01:29.330764 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:01:29.464136 locksmithd[1643]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:01:32.695707 sshd_keygen[1585]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:01:32.752785 systemd[1]: Finished sshd-keygen.service. Oct 2 19:01:32.758217 systemd[1]: Starting issuegen.service... Oct 2 19:01:32.763290 systemd[1]: Started sshd@0-172.31.18.117:22-139.178.89.65:39468.service. Oct 2 19:01:32.790345 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:01:32.790732 systemd[1]: Finished issuegen.service. Oct 2 19:01:32.796341 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:01:32.819671 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:01:32.827167 systemd[1]: Started getty@tty1.service. Oct 2 19:01:32.833011 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:01:32.836262 systemd[1]: Reached target getty.target. Oct 2 19:01:32.838521 systemd[1]: Reached target multi-user.target. Oct 2 19:01:32.843571 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:01:32.874575 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:01:32.874899 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:01:32.878323 systemd[1]: Startup finished in 1.173s (kernel) + 14.148s (initrd) + 14.755s (userspace) = 30.077s. Oct 2 19:01:32.998363 sshd[1761]: Accepted publickey for core from 139.178.89.65 port 39468 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:33.003599 sshd[1761]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:33.021743 systemd[1]: Created slice user-500.slice. Oct 2 19:01:33.024220 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:01:33.031514 systemd-logind[1553]: New session 1 of user core. Oct 2 19:01:33.052658 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:01:33.057955 systemd[1]: Starting user@500.service... Oct 2 19:01:33.070197 (systemd)[1770]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:33.278138 systemd[1770]: Queued start job for default target default.target. Oct 2 19:01:33.279217 systemd[1770]: Reached target paths.target. Oct 2 19:01:33.279270 systemd[1770]: Reached target sockets.target. Oct 2 19:01:33.279303 systemd[1770]: Reached target timers.target. Oct 2 19:01:33.279332 systemd[1770]: Reached target basic.target. Oct 2 19:01:33.279467 systemd[1770]: Reached target default.target. Oct 2 19:01:33.279534 systemd[1770]: Startup finished in 191ms. Oct 2 19:01:33.279673 systemd[1]: Started user@500.service. Oct 2 19:01:33.281656 systemd[1]: Started session-1.scope. Oct 2 19:01:33.434111 systemd[1]: Started sshd@1-172.31.18.117:22-139.178.89.65:39472.service. Oct 2 19:01:33.619700 sshd[1779]: Accepted publickey for core from 139.178.89.65 port 39472 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:33.622914 sshd[1779]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:33.630072 systemd-logind[1553]: New session 2 of user core. Oct 2 19:01:33.631977 systemd[1]: Started session-2.scope. Oct 2 19:01:33.788940 sshd[1779]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:33.794619 systemd-logind[1553]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:01:33.795526 systemd[1]: sshd@1-172.31.18.117:22-139.178.89.65:39472.service: Deactivated successfully. Oct 2 19:01:33.796819 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:01:33.798231 systemd-logind[1553]: Removed session 2. Oct 2 19:01:33.821250 systemd[1]: Started sshd@2-172.31.18.117:22-139.178.89.65:39486.service. Oct 2 19:01:34.011950 sshd[1785]: Accepted publickey for core from 139.178.89.65 port 39486 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:34.015645 sshd[1785]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:34.023586 systemd-logind[1553]: New session 3 of user core. Oct 2 19:01:34.024353 systemd[1]: Started session-3.scope. Oct 2 19:01:34.157050 sshd[1785]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:34.162456 systemd-logind[1553]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:01:34.163054 systemd[1]: sshd@2-172.31.18.117:22-139.178.89.65:39486.service: Deactivated successfully. Oct 2 19:01:34.164248 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:01:34.166014 systemd-logind[1553]: Removed session 3. Oct 2 19:01:34.187543 systemd[1]: Started sshd@3-172.31.18.117:22-139.178.89.65:39498.service. Oct 2 19:01:34.366554 sshd[1791]: Accepted publickey for core from 139.178.89.65 port 39498 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:34.370220 sshd[1791]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:34.379256 systemd[1]: Started session-4.scope. Oct 2 19:01:34.380202 systemd-logind[1553]: New session 4 of user core. Oct 2 19:01:34.525235 sshd[1791]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:34.531090 systemd[1]: sshd@3-172.31.18.117:22-139.178.89.65:39498.service: Deactivated successfully. Oct 2 19:01:34.532345 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:01:34.533381 systemd-logind[1553]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:01:34.534811 systemd-logind[1553]: Removed session 4. Oct 2 19:01:34.556498 systemd[1]: Started sshd@4-172.31.18.117:22-139.178.89.65:39508.service. Oct 2 19:01:34.736093 sshd[1797]: Accepted publickey for core from 139.178.89.65 port 39508 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:34.739307 sshd[1797]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:34.747587 systemd-logind[1553]: New session 5 of user core. Oct 2 19:01:34.748518 systemd[1]: Started session-5.scope. Oct 2 19:01:34.885513 sudo[1800]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:01:34.886008 sudo[1800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:01:34.931685 dbus-daemon[1545]: avc: received setenforce notice (enforcing=1) Oct 2 19:01:34.935135 sudo[1800]: pam_unix(sudo:session): session closed for user root Oct 2 19:01:34.960787 sshd[1797]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:34.966779 systemd-logind[1553]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:01:34.967493 systemd[1]: sshd@4-172.31.18.117:22-139.178.89.65:39508.service: Deactivated successfully. Oct 2 19:01:34.968769 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:01:34.970253 systemd-logind[1553]: Removed session 5. Oct 2 19:01:34.992648 systemd[1]: Started sshd@5-172.31.18.117:22-139.178.89.65:39522.service. Oct 2 19:01:35.174614 sshd[1804]: Accepted publickey for core from 139.178.89.65 port 39522 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:35.178362 sshd[1804]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:35.187012 systemd[1]: Started session-6.scope. Oct 2 19:01:35.188432 systemd-logind[1553]: New session 6 of user core. Oct 2 19:01:35.309084 sudo[1808]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:01:35.310324 sudo[1808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:01:35.318052 sudo[1808]: pam_unix(sudo:session): session closed for user root Oct 2 19:01:35.331622 sudo[1807]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:01:35.332625 sudo[1807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:01:35.355977 systemd[1]: Stopping audit-rules.service... Oct 2 19:01:35.359000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:01:35.363343 kernel: kauditd_printk_skb: 73 callbacks suppressed Oct 2 19:01:35.363450 kernel: audit: type=1305 audit(1696273295.359:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:01:35.366586 auditctl[1811]: No rules Oct 2 19:01:35.369056 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:01:35.359000 audit[1811]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffda438a60 a2=420 a3=0 items=0 ppid=1 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:35.380348 kernel: audit: type=1300 audit(1696273295.359:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffda438a60 a2=420 a3=0 items=0 ppid=1 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:35.369434 systemd[1]: Stopped audit-rules.service. Oct 2 19:01:35.380713 systemd[1]: Starting audit-rules.service... Oct 2 19:01:35.359000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:01:35.384325 kernel: audit: type=1327 audit(1696273295.359:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:01:35.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.392456 kernel: audit: type=1131 audit(1696273295.367:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.439649 augenrules[1828]: No rules Oct 2 19:01:35.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.441489 systemd[1]: Finished audit-rules.service. Oct 2 19:01:35.449883 sudo[1807]: pam_unix(sudo:session): session closed for user root Oct 2 19:01:35.448000 audit[1807]: USER_END pid=1807 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.459846 kernel: audit: type=1130 audit(1696273295.440:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.459929 kernel: audit: type=1106 audit(1696273295.448:166): pid=1807 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.448000 audit[1807]: CRED_DISP pid=1807 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.468157 kernel: audit: type=1104 audit(1696273295.448:167): pid=1807 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.481988 sshd[1804]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:35.482000 audit[1804]: USER_END pid=1804 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:35.496716 systemd[1]: sshd@5-172.31.18.117:22-139.178.89.65:39522.service: Deactivated successfully. Oct 2 19:01:35.482000 audit[1804]: CRED_DISP pid=1804 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:35.497896 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:01:35.505825 kernel: audit: type=1106 audit(1696273295.482:168): pid=1804 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:35.505914 kernel: audit: type=1104 audit(1696273295.482:169): pid=1804 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:35.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.18.117:22-139.178.89.65:39522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.506953 systemd-logind[1553]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:01:35.519483 kernel: audit: type=1131 audit(1696273295.495:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.18.117:22-139.178.89.65:39522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.516036 systemd[1]: Started sshd@6-172.31.18.117:22-139.178.89.65:39538.service. Oct 2 19:01:35.520603 systemd-logind[1553]: Removed session 6. Oct 2 19:01:35.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.18.117:22-139.178.89.65:39538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.698000 audit[1834]: USER_ACCT pid=1834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:35.700259 sshd[1834]: Accepted publickey for core from 139.178.89.65 port 39538 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:35.701000 audit[1834]: CRED_ACQ pid=1834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:35.701000 audit[1834]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe182ff30 a2=3 a3=1 items=0 ppid=1 pid=1834 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:35.701000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:01:35.703961 sshd[1834]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:35.711886 systemd-logind[1553]: New session 7 of user core. Oct 2 19:01:35.712776 systemd[1]: Started session-7.scope. Oct 2 19:01:35.720000 audit[1834]: USER_START pid=1834 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:35.726000 audit[1836]: CRED_ACQ pid=1836 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:35.830000 audit[1837]: USER_ACCT pid=1837 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.832731 sudo[1837]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:01:35.831000 audit[1837]: CRED_REFR pid=1837 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.833823 sudo[1837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:01:35.836000 audit[1837]: USER_START pid=1837 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.561700 systemd[1]: Starting docker.service... Oct 2 19:01:36.667075 env[1852]: time="2023-10-02T19:01:36.666986947Z" level=info msg="Starting up" Oct 2 19:01:36.670113 env[1852]: time="2023-10-02T19:01:36.670066807Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:01:36.670304 env[1852]: time="2023-10-02T19:01:36.670274875Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:01:36.670483 env[1852]: time="2023-10-02T19:01:36.670448563Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:01:36.670592 env[1852]: time="2023-10-02T19:01:36.670564675Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:01:36.675675 env[1852]: time="2023-10-02T19:01:36.675633067Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:01:36.675872 env[1852]: time="2023-10-02T19:01:36.675843955Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:01:36.676016 env[1852]: time="2023-10-02T19:01:36.675981439Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:01:36.676123 env[1852]: time="2023-10-02T19:01:36.676096591Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:01:37.011982 env[1852]: time="2023-10-02T19:01:37.011921993Z" level=info msg="Loading containers: start." Oct 2 19:01:37.144000 audit[1883]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1883 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.144000 audit[1883]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffef034b40 a2=0 a3=1 items=0 ppid=1852 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.144000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:01:37.151000 audit[1885]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1885 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.151000 audit[1885]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff6a74a30 a2=0 a3=1 items=0 ppid=1852 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.151000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:01:37.158000 audit[1887]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1887 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.158000 audit[1887]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffcdd544a0 a2=0 a3=1 items=0 ppid=1852 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.158000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:01:37.164000 audit[1889]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.164000 audit[1889]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdce158f0 a2=0 a3=1 items=0 ppid=1852 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.164000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:01:37.172000 audit[1891]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1891 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.172000 audit[1891]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc6a11c50 a2=0 a3=1 items=0 ppid=1852 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.172000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:01:37.212000 audit[1896]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1896 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.212000 audit[1896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc5788660 a2=0 a3=1 items=0 ppid=1852 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.212000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:01:37.227000 audit[1898]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1898 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.227000 audit[1898]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcaa6ec60 a2=0 a3=1 items=0 ppid=1852 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.227000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:01:37.234000 audit[1900]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1900 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.234000 audit[1900]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd33b91d0 a2=0 a3=1 items=0 ppid=1852 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.234000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:01:37.240000 audit[1902]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1902 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.240000 audit[1902]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffc74c6e80 a2=0 a3=1 items=0 ppid=1852 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.240000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:37.261000 audit[1906]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1906 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.261000 audit[1906]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe3295860 a2=0 a3=1 items=0 ppid=1852 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.261000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:37.265000 audit[1907]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1907 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.265000 audit[1907]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff3a165f0 a2=0 a3=1 items=0 ppid=1852 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.265000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:37.279461 kernel: Initializing XFRM netlink socket Oct 2 19:01:37.322875 env[1852]: time="2023-10-02T19:01:37.322806031Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:01:37.326688 (udev-worker)[1863]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:01:37.412000 audit[1915]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1915 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.412000 audit[1915]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffde8b46e0 a2=0 a3=1 items=0 ppid=1852 pid=1915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.412000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:01:37.434000 audit[1918]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1918 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.434000 audit[1918]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe681d130 a2=0 a3=1 items=0 ppid=1852 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.434000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:01:37.445000 audit[1921]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1921 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.445000 audit[1921]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffda6c7ba0 a2=0 a3=1 items=0 ppid=1852 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.445000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:01:37.453000 audit[1923]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1923 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.453000 audit[1923]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe38e6e10 a2=0 a3=1 items=0 ppid=1852 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.453000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:01:37.460000 audit[1925]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1925 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.460000 audit[1925]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffef9db7b0 a2=0 a3=1 items=0 ppid=1852 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.460000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:01:37.468000 audit[1927]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1927 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.468000 audit[1927]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffffdc07f70 a2=0 a3=1 items=0 ppid=1852 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:01:37.475000 audit[1929]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1929 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.475000 audit[1929]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffea0ccc20 a2=0 a3=1 items=0 ppid=1852 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.475000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:01:37.493000 audit[1932]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1932 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.493000 audit[1932]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe4d27c80 a2=0 a3=1 items=0 ppid=1852 pid=1932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.493000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:01:37.501000 audit[1934]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1934 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.501000 audit[1934]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffff8cd2220 a2=0 a3=1 items=0 ppid=1852 pid=1934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.501000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:01:37.508000 audit[1936]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1936 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.508000 audit[1936]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe9864fd0 a2=0 a3=1 items=0 ppid=1852 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.508000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:01:37.515000 audit[1938]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1938 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.515000 audit[1938]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff6d73600 a2=0 a3=1 items=0 ppid=1852 pid=1938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.515000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:01:37.519052 systemd-networkd[1386]: docker0: Link UP Oct 2 19:01:37.539000 audit[1942]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1942 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.539000 audit[1942]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc788a3f0 a2=0 a3=1 items=0 ppid=1852 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.539000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:37.542000 audit[1943]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1943 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.542000 audit[1943]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe5fe5910 a2=0 a3=1 items=0 ppid=1852 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.542000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:37.544649 env[1852]: time="2023-10-02T19:01:37.544609448Z" level=info msg="Loading containers: done." Oct 2 19:01:37.574974 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3130036169-merged.mount: Deactivated successfully. Oct 2 19:01:37.615646 env[1852]: time="2023-10-02T19:01:37.615594188Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:01:37.616230 env[1852]: time="2023-10-02T19:01:37.616199504Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:01:37.616548 env[1852]: time="2023-10-02T19:01:37.616520876Z" level=info msg="Daemon has completed initialization" Oct 2 19:01:37.651075 systemd[1]: Started docker.service. Oct 2 19:01:37.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:37.667844 env[1852]: time="2023-10-02T19:01:37.667772768Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:01:37.717460 systemd[1]: Reloading. Oct 2 19:01:37.893041 /usr/lib/systemd/system-generators/torcx-generator[1989]: time="2023-10-02T19:01:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:01:37.899510 /usr/lib/systemd/system-generators/torcx-generator[1989]: time="2023-10-02T19:01:37Z" level=info msg="torcx already run" Oct 2 19:01:38.153804 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:01:38.154262 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:01:38.196890 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:01:38.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.347000 audit: BPF prog-id=37 op=LOAD Oct 2 19:01:38.348000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:01:38.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.350000 audit: BPF prog-id=38 op=LOAD Oct 2 19:01:38.350000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:01:38.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.354000 audit: BPF prog-id=39 op=LOAD Oct 2 19:01:38.354000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:01:38.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.355000 audit: BPF prog-id=40 op=LOAD Oct 2 19:01:38.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.356000 audit: BPF prog-id=41 op=LOAD Oct 2 19:01:38.356000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:01:38.356000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:01:38.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.360000 audit: BPF prog-id=42 op=LOAD Oct 2 19:01:38.360000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:01:38.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.361000 audit: BPF prog-id=43 op=LOAD Oct 2 19:01:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.362000 audit: BPF prog-id=44 op=LOAD Oct 2 19:01:38.362000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:01:38.363000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:01:38.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.368000 audit: BPF prog-id=45 op=LOAD Oct 2 19:01:38.368000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:01:38.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.369000 audit: BPF prog-id=46 op=LOAD Oct 2 19:01:38.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.370000 audit: BPF prog-id=47 op=LOAD Oct 2 19:01:38.371000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:01:38.371000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:01:38.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.373000 audit: BPF prog-id=48 op=LOAD Oct 2 19:01:38.373000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:01:38.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.377000 audit: BPF prog-id=49 op=LOAD Oct 2 19:01:38.377000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:01:38.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.379000 audit: BPF prog-id=50 op=LOAD Oct 2 19:01:38.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.380000 audit: BPF prog-id=51 op=LOAD Oct 2 19:01:38.380000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:01:38.380000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.381000 audit: BPF prog-id=52 op=LOAD Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.382000 audit: BPF prog-id=53 op=LOAD Oct 2 19:01:38.382000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:01:38.382000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.385000 audit: BPF prog-id=54 op=LOAD Oct 2 19:01:38.385000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:01:38.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:38.422820 systemd[1]: Started kubelet.service. Oct 2 19:01:38.602664 kubelet[2044]: E1002 19:01:38.602585 2044 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:01:38.607112 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:01:38.607461 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:01:38.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:01:39.858794 env[1571]: time="2023-10-02T19:01:39.858731675Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:01:40.672625 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2899370189.mount: Deactivated successfully. Oct 2 19:01:43.930748 env[1571]: time="2023-10-02T19:01:43.930689019Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:43.935608 env[1571]: time="2023-10-02T19:01:43.935490531Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:43.941102 env[1571]: time="2023-10-02T19:01:43.941013148Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:43.946283 env[1571]: time="2023-10-02T19:01:43.946218412Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:43.948148 env[1571]: time="2023-10-02T19:01:43.948083896Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 19:01:43.977890 env[1571]: time="2023-10-02T19:01:43.977842084Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:01:47.038570 env[1571]: time="2023-10-02T19:01:47.038491095Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:47.041545 env[1571]: time="2023-10-02T19:01:47.041486019Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:47.046422 env[1571]: time="2023-10-02T19:01:47.046343679Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:47.049666 env[1571]: time="2023-10-02T19:01:47.049619091Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:47.051642 env[1571]: time="2023-10-02T19:01:47.051595803Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 19:01:47.082919 env[1571]: time="2023-10-02T19:01:47.082869663Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:01:48.641888 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:01:48.653580 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:01:48.653686 kernel: audit: type=1130 audit(1696273308.640:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:48.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:48.642212 systemd[1]: Stopped kubelet.service. Oct 2 19:01:48.663760 kernel: audit: type=1131 audit(1696273308.640:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:48.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:48.655973 systemd[1]: Started kubelet.service. Oct 2 19:01:48.676136 kernel: audit: type=1130 audit(1696273308.654:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:48.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:48.826067 kubelet[2073]: E1002 19:01:48.825978 2073 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:01:48.833952 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:01:48.834297 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:01:48.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:01:48.843456 kernel: audit: type=1131 audit(1696273308.833:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:01:49.138427 env[1571]: time="2023-10-02T19:01:49.138277565Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:49.141705 env[1571]: time="2023-10-02T19:01:49.141658037Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:49.144794 env[1571]: time="2023-10-02T19:01:49.144747029Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:49.147982 env[1571]: time="2023-10-02T19:01:49.147933713Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:49.149556 env[1571]: time="2023-10-02T19:01:49.149494829Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 19:01:49.178965 env[1571]: time="2023-10-02T19:01:49.178908138Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:01:50.612655 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1358317343.mount: Deactivated successfully. Oct 2 19:01:51.399460 env[1571]: time="2023-10-02T19:01:51.399376845Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.402618 env[1571]: time="2023-10-02T19:01:51.402558393Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.405174 env[1571]: time="2023-10-02T19:01:51.405123297Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.407376 env[1571]: time="2023-10-02T19:01:51.407316861Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.408485 env[1571]: time="2023-10-02T19:01:51.408441477Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 19:01:51.436912 env[1571]: time="2023-10-02T19:01:51.436853553Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:01:51.953101 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount150379497.mount: Deactivated successfully. Oct 2 19:01:51.963651 env[1571]: time="2023-10-02T19:01:51.963574955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.966542 env[1571]: time="2023-10-02T19:01:51.966481787Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.969295 env[1571]: time="2023-10-02T19:01:51.969237443Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.972054 env[1571]: time="2023-10-02T19:01:51.972006995Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.973044 env[1571]: time="2023-10-02T19:01:51.973003259Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:01:52.002068 env[1571]: time="2023-10-02T19:01:52.002020484Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:01:53.171915 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4211722083.mount: Deactivated successfully. Oct 2 19:01:56.312719 env[1571]: time="2023-10-02T19:01:56.312614077Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:56.335638 env[1571]: time="2023-10-02T19:01:56.335550973Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:56.366501 env[1571]: time="2023-10-02T19:01:56.366448537Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:56.384076 env[1571]: time="2023-10-02T19:01:56.382160881Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:56.384076 env[1571]: time="2023-10-02T19:01:56.382792477Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:01:56.414331 env[1571]: time="2023-10-02T19:01:56.414262513Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:01:57.476268 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2064862465.mount: Deactivated successfully. Oct 2 19:01:57.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:57.780994 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:01:57.791592 kernel: audit: type=1131 audit(1696273317.779:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:57.804000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:01:57.811025 kernel: audit: type=1334 audit(1696273317.804:418): prog-id=41 op=UNLOAD Oct 2 19:01:57.811121 kernel: audit: type=1334 audit(1696273317.804:419): prog-id=40 op=UNLOAD Oct 2 19:01:57.804000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:01:57.804000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:01:57.813943 kernel: audit: type=1334 audit(1696273317.804:420): prog-id=39 op=UNLOAD Oct 2 19:01:58.194603 env[1571]: time="2023-10-02T19:01:58.194544578Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:58.197634 env[1571]: time="2023-10-02T19:01:58.197587838Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:58.200499 env[1571]: time="2023-10-02T19:01:58.200435810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:58.203251 env[1571]: time="2023-10-02T19:01:58.203191682Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:58.204480 env[1571]: time="2023-10-02T19:01:58.204437258Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:01:58.852360 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:01:58.852829 systemd[1]: Stopped kubelet.service. Oct 2 19:01:58.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:58.855608 systemd[1]: Started kubelet.service. Oct 2 19:01:58.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:58.870588 kernel: audit: type=1130 audit(1696273318.851:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:58.870703 kernel: audit: type=1131 audit(1696273318.851:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:58.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:58.872437 kernel: audit: type=1130 audit(1696273318.852:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.016475 kubelet[2125]: E1002 19:01:59.016367 2125 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:01:59.022432 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:01:59.022751 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:01:59.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:01:59.032439 kernel: audit: type=1131 audit(1696273319.021:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:02:05.936649 systemd[1]: Stopped kubelet.service. Oct 2 19:02:05.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:05.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:05.953700 kernel: audit: type=1130 audit(1696273325.935:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:05.953868 kernel: audit: type=1131 audit(1696273325.935:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:05.985870 systemd[1]: Reloading. Oct 2 19:02:06.179160 /usr/lib/systemd/system-generators/torcx-generator[2192]: time="2023-10-02T19:02:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:02:06.179804 /usr/lib/systemd/system-generators/torcx-generator[2192]: time="2023-10-02T19:02:06Z" level=info msg="torcx already run" Oct 2 19:02:06.414512 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:02:06.414759 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:02:06.457062 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:02:06.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.621755 kernel: audit: type=1400 audit(1696273326.604:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.621863 kernel: audit: type=1400 audit(1696273326.613:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.629385 kernel: audit: type=1400 audit(1696273326.613:429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.637047 kernel: audit: type=1400 audit(1696273326.613:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.644638 kernel: audit: type=1400 audit(1696273326.613:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.654273 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:02:06.654341 kernel: audit: type=1400 audit(1696273326.613:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.654401 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit: BPF prog-id=55 op=LOAD Oct 2 19:02:06.613000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.620000 audit: BPF prog-id=56 op=LOAD Oct 2 19:02:06.620000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.627000 audit: BPF prog-id=57 op=LOAD Oct 2 19:02:06.628000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:02:06.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit: BPF prog-id=58 op=LOAD Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.635000 audit: BPF prog-id=59 op=LOAD Oct 2 19:02:06.635000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:02:06.635000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.643000 audit: BPF prog-id=60 op=LOAD Oct 2 19:02:06.643000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:02:06.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit: BPF prog-id=61 op=LOAD Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit: BPF prog-id=62 op=LOAD Oct 2 19:02:06.656000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:02:06.656000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.657000 audit: BPF prog-id=63 op=LOAD Oct 2 19:02:06.657000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit: BPF prog-id=64 op=LOAD Oct 2 19:02:06.660000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit: BPF prog-id=65 op=LOAD Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit: BPF prog-id=66 op=LOAD Oct 2 19:02:06.660000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:02:06.660000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit: BPF prog-id=67 op=LOAD Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.661000 audit: BPF prog-id=68 op=LOAD Oct 2 19:02:06.661000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:02:06.661000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:06.664000 audit: BPF prog-id=69 op=LOAD Oct 2 19:02:06.664000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:02:06.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.715875 systemd[1]: Started kubelet.service. Oct 2 19:02:06.851902 kubelet[2245]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:06.851902 kubelet[2245]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:06.852504 kubelet[2245]: I1002 19:02:06.852226 2245 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:02:06.856245 kubelet[2245]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:06.856458 kubelet[2245]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:07.453560 kubelet[2245]: I1002 19:02:07.453522 2245 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:02:07.453779 kubelet[2245]: I1002 19:02:07.453758 2245 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:02:07.454244 kubelet[2245]: I1002 19:02:07.454220 2245 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:02:07.462802 kubelet[2245]: E1002 19:02:07.462745 2245 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.18.117:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.462982 kubelet[2245]: I1002 19:02:07.462827 2245 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:02:07.465836 kubelet[2245]: W1002 19:02:07.465804 2245 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:02:07.467342 kubelet[2245]: I1002 19:02:07.467313 2245 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:02:07.468318 kubelet[2245]: I1002 19:02:07.468294 2245 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:02:07.468583 kubelet[2245]: I1002 19:02:07.468560 2245 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:02:07.468916 kubelet[2245]: I1002 19:02:07.468893 2245 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:02:07.469035 kubelet[2245]: I1002 19:02:07.469014 2245 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:02:07.469362 kubelet[2245]: I1002 19:02:07.469341 2245 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:07.476834 kubelet[2245]: I1002 19:02:07.476789 2245 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:02:07.476834 kubelet[2245]: I1002 19:02:07.476834 2245 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:02:07.477061 kubelet[2245]: I1002 19:02:07.476997 2245 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:02:07.477061 kubelet[2245]: I1002 19:02:07.477025 2245 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:02:07.478341 kubelet[2245]: W1002 19:02:07.478278 2245 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.18.117:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-18-117&limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.478558 kubelet[2245]: E1002 19:02:07.478535 2245 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.18.117:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-18-117&limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.478877 kubelet[2245]: I1002 19:02:07.478852 2245 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:02:07.480220 kubelet[2245]: W1002 19:02:07.480190 2245 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:02:07.481277 kubelet[2245]: I1002 19:02:07.481243 2245 server.go:1186] "Started kubelet" Oct 2 19:02:07.491270 kubelet[2245]: I1002 19:02:07.491225 2245 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:02:07.492090 kubelet[2245]: W1002 19:02:07.492002 2245 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.18.117:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.492212 kubelet[2245]: E1002 19:02:07.492104 2245 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.18.117:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.492428 kubelet[2245]: E1002 19:02:07.492235 2245 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aa67cbc9a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 481207962, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 481207962, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.18.117:6443/api/v1/namespaces/default/events": dial tcp 172.31.18.117:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:02:07.493343 kubelet[2245]: E1002 19:02:07.493296 2245 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:02:07.493505 kubelet[2245]: E1002 19:02:07.493358 2245 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:02:07.494361 kubelet[2245]: I1002 19:02:07.494330 2245 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:02:07.498000 audit[2245]: AVC avc: denied { mac_admin } for pid=2245 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.498000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:07.498000 audit[2245]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400110ee40 a1=40010501e0 a2=400110ee10 a3=25 items=0 ppid=1 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.498000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:07.498000 audit[2245]: AVC avc: denied { mac_admin } for pid=2245 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.498000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:07.498000 audit[2245]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4001107e20 a1=40010501f8 a2=400110eed0 a3=25 items=0 ppid=1 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.498000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:07.499815 kubelet[2245]: I1002 19:02:07.499031 2245 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:02:07.499815 kubelet[2245]: I1002 19:02:07.499112 2245 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:02:07.499815 kubelet[2245]: I1002 19:02:07.499224 2245 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:02:07.504082 kubelet[2245]: E1002 19:02:07.504050 2245 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ip-172-31-18-117\" not found" Oct 2 19:02:07.504368 kubelet[2245]: I1002 19:02:07.504343 2245 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:02:07.504658 kubelet[2245]: I1002 19:02:07.504633 2245 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:02:07.505550 kubelet[2245]: W1002 19:02:07.505484 2245 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.18.117:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.505773 kubelet[2245]: E1002 19:02:07.505749 2245 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.18.117:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.507686 kubelet[2245]: E1002 19:02:07.507639 2245 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.18.117:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-117?timeout=10s": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.513000 audit[2255]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.513000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe39202f0 a2=0 a3=1 items=0 ppid=2245 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.513000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:02:07.526000 audit[2258]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.526000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff53c3fa0 a2=0 a3=1 items=0 ppid=2245 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.526000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:02:07.541000 audit[2261]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.541000 audit[2261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc000db80 a2=0 a3=1 items=0 ppid=2245 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:02:07.553595 kubelet[2245]: I1002 19:02:07.553546 2245 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:02:07.553783 kubelet[2245]: I1002 19:02:07.553761 2245 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:02:07.553932 kubelet[2245]: I1002 19:02:07.553899 2245 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:07.554000 audit[2263]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.554000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd667b3e0 a2=0 a3=1 items=0 ppid=2245 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.554000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:02:07.557372 kubelet[2245]: I1002 19:02:07.557335 2245 policy_none.go:49] "None policy: Start" Oct 2 19:02:07.558762 kubelet[2245]: I1002 19:02:07.558706 2245 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:02:07.558762 kubelet[2245]: I1002 19:02:07.558758 2245 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:02:07.568400 systemd[1]: Created slice kubepods.slice. Oct 2 19:02:07.582723 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:02:07.586000 audit[2268]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2268 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.586000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc234bae0 a2=0 a3=1 items=0 ppid=2245 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.586000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:02:07.592000 audit[2269]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.592000 audit[2269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdb0bf610 a2=0 a3=1 items=0 ppid=2245 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.592000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:02:07.596216 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:02:07.601239 kubelet[2245]: I1002 19:02:07.601188 2245 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:02:07.602000 audit[2245]: AVC avc: denied { mac_admin } for pid=2245 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.602000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:07.602000 audit[2245]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000dac1b0 a1=400072f710 a2=4000dac180 a3=25 items=0 ppid=1 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.602000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:07.603601 kubelet[2245]: I1002 19:02:07.603572 2245 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:02:07.605229 kubelet[2245]: E1002 19:02:07.605196 2245 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-18-117\" not found" Oct 2 19:02:07.606975 kubelet[2245]: I1002 19:02:07.606802 2245 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-18-117" Oct 2 19:02:07.607975 kubelet[2245]: E1002 19:02:07.607944 2245 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.18.117:6443/api/v1/nodes\": dial tcp 172.31.18.117:6443: connect: connection refused" node="ip-172-31-18-117" Oct 2 19:02:07.609071 kubelet[2245]: I1002 19:02:07.609042 2245 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:02:07.616000 audit[2272]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.616000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff0912630 a2=0 a3=1 items=0 ppid=2245 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.616000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:02:07.629000 audit[2275]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.629000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffdcbfc670 a2=0 a3=1 items=0 ppid=2245 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.629000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:02:07.633000 audit[2276]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.633000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd11e6950 a2=0 a3=1 items=0 ppid=2245 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.633000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:02:07.637000 audit[2277]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.637000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe62895c0 a2=0 a3=1 items=0 ppid=2245 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:02:07.645000 audit[2279]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2279 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.645000 audit[2279]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffee0ea2e0 a2=0 a3=1 items=0 ppid=2245 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.645000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:02:07.653000 audit[2281]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.653000 audit[2281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff737d1f0 a2=0 a3=1 items=0 ppid=2245 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.653000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:02:07.661000 audit[2283]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.661000 audit[2283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffedc15fc0 a2=0 a3=1 items=0 ppid=2245 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.661000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:02:07.668000 audit[2285]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.668000 audit[2285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffff271b130 a2=0 a3=1 items=0 ppid=2245 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:02:07.677000 audit[2287]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.677000 audit[2287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffff263e500 a2=0 a3=1 items=0 ppid=2245 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.677000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:02:07.678622 kubelet[2245]: I1002 19:02:07.678587 2245 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:02:07.681000 audit[2289]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.681000 audit[2289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeaf68400 a2=0 a3=1 items=0 ppid=2245 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.681000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:02:07.681000 audit[2288]: NETFILTER_CFG table=mangle:42 family=10 entries=2 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.681000 audit[2288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc7a1aff0 a2=0 a3=1 items=0 ppid=2245 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.681000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:02:07.685000 audit[2290]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.685000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc65f78a0 a2=0 a3=1 items=0 ppid=2245 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.685000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:02:07.686000 audit[2291]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.686000 audit[2291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc92c6ad0 a2=0 a3=1 items=0 ppid=2245 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.686000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:02:07.691000 audit[2293]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.691000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe49bb810 a2=0 a3=1 items=0 ppid=2245 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.691000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:02:07.694000 audit[2294]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.694000 audit[2294]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffef8d8c70 a2=0 a3=1 items=0 ppid=2245 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.694000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:02:07.698000 audit[2295]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.698000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffee7407f0 a2=0 a3=1 items=0 ppid=2245 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.698000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:02:07.706000 audit[2297]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.709476 kubelet[2245]: E1002 19:02:07.708559 2245 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.18.117:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-117?timeout=10s": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.706000 audit[2297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffd8be1ee0 a2=0 a3=1 items=0 ppid=2245 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.706000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:02:07.713000 audit[2298]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.713000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe3a8f5e0 a2=0 a3=1 items=0 ppid=2245 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.713000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:02:07.717000 audit[2299]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.717000 audit[2299]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef567320 a2=0 a3=1 items=0 ppid=2245 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.717000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:02:07.725000 audit[2301]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.725000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffec333790 a2=0 a3=1 items=0 ppid=2245 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.725000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:02:07.733000 audit[2303]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2303 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.733000 audit[2303]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffed5168c0 a2=0 a3=1 items=0 ppid=2245 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.733000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:02:07.741000 audit[2305]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.741000 audit[2305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=fffff4816190 a2=0 a3=1 items=0 ppid=2245 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.741000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:02:07.751000 audit[2307]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.751000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffd77beaf0 a2=0 a3=1 items=0 ppid=2245 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.751000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:02:07.762000 audit[2309]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.762000 audit[2309]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=fffff374a9e0 a2=0 a3=1 items=0 ppid=2245 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.762000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:02:07.764116 kubelet[2245]: I1002 19:02:07.764085 2245 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:02:07.764273 kubelet[2245]: I1002 19:02:07.764251 2245 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:02:07.764397 kubelet[2245]: I1002 19:02:07.764375 2245 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:02:07.764601 kubelet[2245]: E1002 19:02:07.764581 2245 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:02:07.765834 kubelet[2245]: W1002 19:02:07.765790 2245 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.18.117:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.766058 kubelet[2245]: E1002 19:02:07.766035 2245 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.18.117:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:07.767000 audit[2310]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.767000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffce27e960 a2=0 a3=1 items=0 ppid=2245 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.767000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:02:07.772000 audit[2311]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.772000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8460ce0 a2=0 a3=1 items=0 ppid=2245 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:02:07.775000 audit[2312]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:07.775000 audit[2312]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcff22700 a2=0 a3=1 items=0 ppid=2245 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.775000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:02:07.810561 kubelet[2245]: I1002 19:02:07.810516 2245 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-18-117" Oct 2 19:02:07.810991 kubelet[2245]: E1002 19:02:07.810943 2245 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.18.117:6443/api/v1/nodes\": dial tcp 172.31.18.117:6443: connect: connection refused" node="ip-172-31-18-117" Oct 2 19:02:07.865223 kubelet[2245]: I1002 19:02:07.865176 2245 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:07.867616 kubelet[2245]: I1002 19:02:07.867577 2245 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:07.869822 kubelet[2245]: I1002 19:02:07.869791 2245 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:07.873307 kubelet[2245]: I1002 19:02:07.872989 2245 status_manager.go:698] "Failed to get status for pod" podUID=54d6029f1059f7972656bffc67721ec4 pod="kube-system/kube-apiserver-ip-172-31-18-117" err="Get \"https://172.31.18.117:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-18-117\": dial tcp 172.31.18.117:6443: connect: connection refused" Oct 2 19:02:07.876960 kubelet[2245]: I1002 19:02:07.876925 2245 status_manager.go:698] "Failed to get status for pod" podUID=b36bcadf8b3ad0a0128c096e91885d3e pod="kube-system/kube-controller-manager-ip-172-31-18-117" err="Get \"https://172.31.18.117:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-18-117\": dial tcp 172.31.18.117:6443: connect: connection refused" Oct 2 19:02:07.881212 kubelet[2245]: I1002 19:02:07.880539 2245 status_manager.go:698] "Failed to get status for pod" podUID=80fab6ec14d96d70d2de524a246d5427 pod="kube-system/kube-scheduler-ip-172-31-18-117" err="Get \"https://172.31.18.117:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-18-117\": dial tcp 172.31.18.117:6443: connect: connection refused" Oct 2 19:02:07.880887 systemd[1]: Created slice kubepods-burstable-pod54d6029f1059f7972656bffc67721ec4.slice. Oct 2 19:02:07.898710 systemd[1]: Created slice kubepods-burstable-podb36bcadf8b3ad0a0128c096e91885d3e.slice. Oct 2 19:02:07.908392 kubelet[2245]: I1002 19:02:07.908279 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-k8s-certs\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:07.908580 kubelet[2245]: I1002 19:02:07.908528 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:07.908645 kubelet[2245]: I1002 19:02:07.908613 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80fab6ec14d96d70d2de524a246d5427-kubeconfig\") pod \"kube-scheduler-ip-172-31-18-117\" (UID: \"80fab6ec14d96d70d2de524a246d5427\") " pod="kube-system/kube-scheduler-ip-172-31-18-117" Oct 2 19:02:07.909123 kubelet[2245]: I1002 19:02:07.908722 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/54d6029f1059f7972656bffc67721ec4-ca-certs\") pod \"kube-apiserver-ip-172-31-18-117\" (UID: \"54d6029f1059f7972656bffc67721ec4\") " pod="kube-system/kube-apiserver-ip-172-31-18-117" Oct 2 19:02:07.909123 kubelet[2245]: I1002 19:02:07.908822 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/54d6029f1059f7972656bffc67721ec4-k8s-certs\") pod \"kube-apiserver-ip-172-31-18-117\" (UID: \"54d6029f1059f7972656bffc67721ec4\") " pod="kube-system/kube-apiserver-ip-172-31-18-117" Oct 2 19:02:07.909123 kubelet[2245]: I1002 19:02:07.908932 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/54d6029f1059f7972656bffc67721ec4-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-18-117\" (UID: \"54d6029f1059f7972656bffc67721ec4\") " pod="kube-system/kube-apiserver-ip-172-31-18-117" Oct 2 19:02:07.909123 kubelet[2245]: I1002 19:02:07.909021 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-ca-certs\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:07.909432 kubelet[2245]: I1002 19:02:07.909307 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:07.909541 kubelet[2245]: I1002 19:02:07.909522 2245 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-kubeconfig\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:07.915723 systemd[1]: Created slice kubepods-burstable-pod80fab6ec14d96d70d2de524a246d5427.slice. Oct 2 19:02:08.110060 kubelet[2245]: E1002 19:02:08.109910 2245 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.18.117:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-117?timeout=10s": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:08.195762 env[1571]: time="2023-10-02T19:02:08.195702905Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-18-117,Uid:54d6029f1059f7972656bffc67721ec4,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:08.205238 env[1571]: time="2023-10-02T19:02:08.204702858Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-18-117,Uid:b36bcadf8b3ad0a0128c096e91885d3e,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:08.213638 kubelet[2245]: I1002 19:02:08.213606 2245 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-18-117" Oct 2 19:02:08.214322 kubelet[2245]: E1002 19:02:08.214296 2245 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.18.117:6443/api/v1/nodes\": dial tcp 172.31.18.117:6443: connect: connection refused" node="ip-172-31-18-117" Oct 2 19:02:08.220654 env[1571]: time="2023-10-02T19:02:08.220059362Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-18-117,Uid:80fab6ec14d96d70d2de524a246d5427,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:08.327092 kubelet[2245]: W1002 19:02:08.327005 2245 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.18.117:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:08.327092 kubelet[2245]: E1002 19:02:08.327061 2245 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.18.117:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:08.712460 kubelet[2245]: W1002 19:02:08.712369 2245 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.18.117:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:08.712643 kubelet[2245]: E1002 19:02:08.712469 2245 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.18.117:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:08.780092 kubelet[2245]: W1002 19:02:08.780000 2245 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.18.117:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-18-117&limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:08.780092 kubelet[2245]: E1002 19:02:08.780092 2245 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.18.117:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-18-117&limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:08.813276 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3563833614.mount: Deactivated successfully. Oct 2 19:02:08.822681 env[1571]: time="2023-10-02T19:02:08.822625077Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.824360 env[1571]: time="2023-10-02T19:02:08.824317628Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.828290 env[1571]: time="2023-10-02T19:02:08.828242653Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.831358 env[1571]: time="2023-10-02T19:02:08.831293192Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.833776 env[1571]: time="2023-10-02T19:02:08.833731857Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.835814 env[1571]: time="2023-10-02T19:02:08.835774413Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.837395 env[1571]: time="2023-10-02T19:02:08.837343919Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.843032 env[1571]: time="2023-10-02T19:02:08.842985494Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.846014 env[1571]: time="2023-10-02T19:02:08.845957723Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.848246 env[1571]: time="2023-10-02T19:02:08.848180874Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.853757 env[1571]: time="2023-10-02T19:02:08.853702489Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.865126 env[1571]: time="2023-10-02T19:02:08.865068221Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:08.911843 kubelet[2245]: E1002 19:02:08.910439 2245 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.18.117:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-117?timeout=10s": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:08.931183 env[1571]: time="2023-10-02T19:02:08.929858012Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:08.931183 env[1571]: time="2023-10-02T19:02:08.929928162Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:08.931183 env[1571]: time="2023-10-02T19:02:08.929952989Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:08.931183 env[1571]: time="2023-10-02T19:02:08.930618453Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3aacdb430a6b9dae8aba1c1d043683a37e8f46dea70932cdcdde409218df9d2e pid=2321 runtime=io.containerd.runc.v2 Oct 2 19:02:08.934955 env[1571]: time="2023-10-02T19:02:08.934811479Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:08.935131 env[1571]: time="2023-10-02T19:02:08.935010133Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:08.935198 env[1571]: time="2023-10-02T19:02:08.935112718Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:08.935825 env[1571]: time="2023-10-02T19:02:08.935699537Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/92aa2d2cbbf6de3cdda7a5f618d63cd5eb49bca9d0cbc1fbda6aadab3eff7e64 pid=2333 runtime=io.containerd.runc.v2 Oct 2 19:02:08.958201 env[1571]: time="2023-10-02T19:02:08.958057020Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:08.958345 env[1571]: time="2023-10-02T19:02:08.958224871Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:08.958425 env[1571]: time="2023-10-02T19:02:08.958316308Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:08.958811 env[1571]: time="2023-10-02T19:02:08.958725808Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e00fdf8cf157a6d2ce8914f21245f9aa104e21bda7d5f200d1e54733a492e086 pid=2358 runtime=io.containerd.runc.v2 Oct 2 19:02:08.989301 systemd[1]: Started cri-containerd-e00fdf8cf157a6d2ce8914f21245f9aa104e21bda7d5f200d1e54733a492e086.scope. Oct 2 19:02:09.017787 kubelet[2245]: I1002 19:02:09.017730 2245 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-18-117" Oct 2 19:02:09.018255 kubelet[2245]: E1002 19:02:09.018216 2245 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.18.117:6443/api/v1/nodes\": dial tcp 172.31.18.117:6443: connect: connection refused" node="ip-172-31-18-117" Oct 2 19:02:09.032364 systemd[1]: Started cri-containerd-3aacdb430a6b9dae8aba1c1d043683a37e8f46dea70932cdcdde409218df9d2e.scope. Oct 2 19:02:09.040998 systemd[1]: Started cri-containerd-92aa2d2cbbf6de3cdda7a5f618d63cd5eb49bca9d0cbc1fbda6aadab3eff7e64.scope. Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.056000 audit: BPF prog-id=70 op=LOAD Oct 2 19:02:09.059000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.059000 audit[2374]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2358 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530306664663863663135376136643263653839313466323132343566 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2358 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530306664663863663135376136643263653839313466323132343566 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit: BPF prog-id=71 op=LOAD Oct 2 19:02:09.060000 audit[2374]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2358 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530306664663863663135376136643263653839313466323132343566 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.060000 audit: BPF prog-id=72 op=LOAD Oct 2 19:02:09.060000 audit[2374]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2358 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530306664663863663135376136643263653839313466323132343566 Oct 2 19:02:09.060000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:02:09.060000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { perfmon } for pid=2374 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit[2374]: AVC avc: denied { bpf } for pid=2374 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.061000 audit: BPF prog-id=73 op=LOAD Oct 2 19:02:09.061000 audit[2374]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2358 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530306664663863663135376136643263653839313466323132343566 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.116000 audit: BPF prog-id=74 op=LOAD Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2333 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932616132643263626266366465336364646137613566363138643633 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2333 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932616132643263626266366465336364646137613566363138643633 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.118000 audit: BPF prog-id=75 op=LOAD Oct 2 19:02:09.118000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2333 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932616132643263626266366465336364646137613566363138643633 Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.123000 audit: BPF prog-id=76 op=LOAD Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.120000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.120000 audit: BPF prog-id=77 op=LOAD Oct 2 19:02:09.120000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2333 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932616132643263626266366465336364646137613566363138643633 Oct 2 19:02:09.125000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:02:09.125000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.125000 audit: BPF prog-id=78 op=LOAD Oct 2 19:02:09.125000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2333 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932616132643263626266366465336364646137613566363138643633 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=2321 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616364623433306136623964616538616261316331643034333638 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2321 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616364623433306136623964616538616261316331643034333638 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.127000 audit: BPF prog-id=79 op=LOAD Oct 2 19:02:09.127000 audit[2352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=2321 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616364623433306136623964616538616261316331643034333638 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.130000 audit: BPF prog-id=80 op=LOAD Oct 2 19:02:09.130000 audit[2352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=2321 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616364623433306136623964616538616261316331643034333638 Oct 2 19:02:09.131000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:02:09.131000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { perfmon } for pid=2352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit[2352]: AVC avc: denied { bpf } for pid=2352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.131000 audit: BPF prog-id=81 op=LOAD Oct 2 19:02:09.131000 audit[2352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=2321 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616364623433306136623964616538616261316331643034333638 Oct 2 19:02:09.162595 kubelet[2245]: W1002 19:02:09.162536 2245 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.18.117:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:09.162757 kubelet[2245]: E1002 19:02:09.162624 2245 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.18.117:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:09.169451 env[1571]: time="2023-10-02T19:02:09.165579593Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-18-117,Uid:54d6029f1059f7972656bffc67721ec4,Namespace:kube-system,Attempt:0,} returns sandbox id \"e00fdf8cf157a6d2ce8914f21245f9aa104e21bda7d5f200d1e54733a492e086\"" Oct 2 19:02:09.171648 env[1571]: time="2023-10-02T19:02:09.171551889Z" level=info msg="CreateContainer within sandbox \"e00fdf8cf157a6d2ce8914f21245f9aa104e21bda7d5f200d1e54733a492e086\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:02:09.202404 env[1571]: time="2023-10-02T19:02:09.202332606Z" level=info msg="CreateContainer within sandbox \"e00fdf8cf157a6d2ce8914f21245f9aa104e21bda7d5f200d1e54733a492e086\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"2a2eb88e9c4e09bb2a3ed6fcfdfd7a9bf38ae24a83191e86075128c119a5d7b1\"" Oct 2 19:02:09.203893 env[1571]: time="2023-10-02T19:02:09.203845321Z" level=info msg="StartContainer for \"2a2eb88e9c4e09bb2a3ed6fcfdfd7a9bf38ae24a83191e86075128c119a5d7b1\"" Oct 2 19:02:09.219670 env[1571]: time="2023-10-02T19:02:09.219611833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-18-117,Uid:b36bcadf8b3ad0a0128c096e91885d3e,Namespace:kube-system,Attempt:0,} returns sandbox id \"92aa2d2cbbf6de3cdda7a5f618d63cd5eb49bca9d0cbc1fbda6aadab3eff7e64\"" Oct 2 19:02:09.222023 env[1571]: time="2023-10-02T19:02:09.221926233Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-18-117,Uid:80fab6ec14d96d70d2de524a246d5427,Namespace:kube-system,Attempt:0,} returns sandbox id \"3aacdb430a6b9dae8aba1c1d043683a37e8f46dea70932cdcdde409218df9d2e\"" Oct 2 19:02:09.225801 env[1571]: time="2023-10-02T19:02:09.225747769Z" level=info msg="CreateContainer within sandbox \"92aa2d2cbbf6de3cdda7a5f618d63cd5eb49bca9d0cbc1fbda6aadab3eff7e64\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:02:09.229494 env[1571]: time="2023-10-02T19:02:09.229438424Z" level=info msg="CreateContainer within sandbox \"3aacdb430a6b9dae8aba1c1d043683a37e8f46dea70932cdcdde409218df9d2e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:02:09.253743 env[1571]: time="2023-10-02T19:02:09.253597578Z" level=info msg="CreateContainer within sandbox \"92aa2d2cbbf6de3cdda7a5f618d63cd5eb49bca9d0cbc1fbda6aadab3eff7e64\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f\"" Oct 2 19:02:09.262040 env[1571]: time="2023-10-02T19:02:09.261987892Z" level=info msg="StartContainer for \"4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f\"" Oct 2 19:02:09.268082 env[1571]: time="2023-10-02T19:02:09.267982520Z" level=info msg="CreateContainer within sandbox \"3aacdb430a6b9dae8aba1c1d043683a37e8f46dea70932cdcdde409218df9d2e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1\"" Oct 2 19:02:09.268833 env[1571]: time="2023-10-02T19:02:09.268690332Z" level=info msg="StartContainer for \"654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1\"" Oct 2 19:02:09.280938 systemd[1]: Started cri-containerd-2a2eb88e9c4e09bb2a3ed6fcfdfd7a9bf38ae24a83191e86075128c119a5d7b1.scope. Oct 2 19:02:09.334351 systemd[1]: Started cri-containerd-4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f.scope. Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.354000 audit: BPF prog-id=82 op=LOAD Oct 2 19:02:09.358000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.358000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2358 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261326562383865396334653039626232613365643666636664666437 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2358 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261326562383865396334653039626232613365643666636664666437 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.359000 audit: BPF prog-id=83 op=LOAD Oct 2 19:02:09.359000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2358 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261326562383865396334653039626232613365643666636664666437 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.361000 audit: BPF prog-id=84 op=LOAD Oct 2 19:02:09.361000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2358 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261326562383865396334653039626232613365643666636664666437 Oct 2 19:02:09.362000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:02:09.362000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.362000 audit: BPF prog-id=85 op=LOAD Oct 2 19:02:09.362000 audit[2449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2358 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261326562383865396334653039626232613365643666636664666437 Oct 2 19:02:09.406330 systemd[1]: Started cri-containerd-654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1.scope. Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.446000 audit: BPF prog-id=86 op=LOAD Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2333 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466386562663161343764383863353164336531396165643238646136 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2333 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466386562663161343764383863353164336531396165643238646136 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.450000 audit: BPF prog-id=87 op=LOAD Oct 2 19:02:09.450000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2333 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466386562663161343764383863353164336531396165643238646136 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit: BPF prog-id=88 op=LOAD Oct 2 19:02:09.451000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2333 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466386562663161343764383863353164336531396165643238646136 Oct 2 19:02:09.451000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:02:09.451000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.451000 audit: BPF prog-id=89 op=LOAD Oct 2 19:02:09.451000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2333 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466386562663161343764383863353164336531396165643238646136 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.472000 audit: BPF prog-id=90 op=LOAD Oct 2 19:02:09.474000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.474000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2321 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635346431383838636363613632663362623031633263333735613461 Oct 2 19:02:09.474000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.474000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2321 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635346431383838636363613632663362623031633263333735613461 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.475000 audit: BPF prog-id=91 op=LOAD Oct 2 19:02:09.475000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2321 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635346431383838636363613632663362623031633263333735613461 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.476000 audit: BPF prog-id=92 op=LOAD Oct 2 19:02:09.476000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2321 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635346431383838636363613632663362623031633263333735613461 Oct 2 19:02:09.480000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:02:09.480000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.485005 env[1571]: time="2023-10-02T19:02:09.482982802Z" level=info msg="StartContainer for \"2a2eb88e9c4e09bb2a3ed6fcfdfd7a9bf38ae24a83191e86075128c119a5d7b1\" returns successfully" Oct 2 19:02:09.480000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.480000 audit: BPF prog-id=93 op=LOAD Oct 2 19:02:09.480000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2321 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635346431383838636363613632663362623031633263333735613461 Oct 2 19:02:09.516582 kubelet[2245]: E1002 19:02:09.516402 2245 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.18.117:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.18.117:6443: connect: connection refused Oct 2 19:02:09.540886 env[1571]: time="2023-10-02T19:02:09.540812001Z" level=info msg="StartContainer for \"4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f\" returns successfully" Oct 2 19:02:09.652925 env[1571]: time="2023-10-02T19:02:09.652859820Z" level=info msg="StartContainer for \"654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1\" returns successfully" Oct 2 19:02:10.621328 kubelet[2245]: I1002 19:02:10.621241 2245 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-18-117" Oct 2 19:02:12.803548 update_engine[1554]: I1002 19:02:12.803484 1554 update_attempter.cc:505] Updating boot flags... Oct 2 19:02:14.284000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:14.286856 kernel: kauditd_printk_skb: 620 callbacks suppressed Oct 2 19:02:14.286957 kernel: audit: type=1400 audit(1696273334.284:743): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:14.293000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:14.310040 kernel: audit: type=1400 audit(1696273334.293:744): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:14.293000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011ab640 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:14.328363 kernel: audit: type=1300 audit(1696273334.293:744): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011ab640 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:14.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:14.342874 kernel: audit: type=1327 audit(1696273334.293:744): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:14.284000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400128e000 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:14.359710 kernel: audit: type=1300 audit(1696273334.284:743): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400128e000 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:14.284000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:14.374952 kernel: audit: type=1327 audit(1696273334.284:743): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:15.372000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.372000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40021de090 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:02:15.396876 kernel: audit: type=1400 audit(1696273335.372:745): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.396972 kernel: audit: type=1300 audit(1696273335.372:745): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40021de090 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:02:15.372000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.414252 kernel: audit: type=1327 audit(1696273335.372:745): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.373000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.426009 kernel: audit: type=1400 audit(1696273335.373:746): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.373000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4002c09980 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:02:15.373000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.374000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.374000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40021de4b0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:02:15.374000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.389000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521243 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.389000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=40038e6e40 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:02:15.389000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.393000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.393000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4002ba3c60 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:02:15.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.393000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.393000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=40038e79e0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:02:15.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.632591 kubelet[2245]: E1002 19:02:15.632432 2245 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-18-117\" not found" node="ip-172-31-18-117" Oct 2 19:02:15.899290 kubelet[2245]: I1002 19:02:15.899230 2245 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-18-117" Oct 2 19:02:15.912360 kubelet[2245]: E1002 19:02:15.912214 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aa67cbc9a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 481207962, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 481207962, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:15.972658 kubelet[2245]: E1002 19:02:15.972511 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aa735b111", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 493329169, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 493329169, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.036942 kubelet[2245]: E1002 19:02:16.036775 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba5bb9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-18-117 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552355257, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552355257, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.093044 kubelet[2245]: E1002 19:02:16.092891 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba7afd", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-18-117 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552363261, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552363261, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.150461 kubelet[2245]: E1002 19:02:16.150198 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba8d8c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-18-117 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552368012, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552368012, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.208457 kubelet[2245]: E1002 19:02:16.208300 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aadf59a53", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 606569555, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 606569555, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.268022 kubelet[2245]: E1002 19:02:16.267884 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba5bb9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-18-117 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552355257, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 606744197, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.327324 kubelet[2245]: E1002 19:02:16.327182 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba7afd", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-18-117 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552363261, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 606756497, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.388123 kubelet[2245]: E1002 19:02:16.387977 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba8d8c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-18-117 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552368012, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 606761393, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.497216 kubelet[2245]: I1002 19:02:16.497052 2245 apiserver.go:52] "Watching apiserver" Oct 2 19:02:16.505148 kubelet[2245]: I1002 19:02:16.505089 2245 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:02:16.570990 kubelet[2245]: E1002 19:02:16.570842 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba5bb9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-18-117 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552355257, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 810468795, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:16.587114 kubelet[2245]: I1002 19:02:16.587074 2245 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:02:16.969896 kubelet[2245]: E1002 19:02:16.969723 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba7afd", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-18-117 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552363261, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 810476847, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:17.370197 kubelet[2245]: E1002 19:02:17.369948 2245 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-18-117.178a5f9aaaba8d8c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-18-117", UID:"ip-172-31-18-117", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-18-117 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-18-117"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 552368012, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 7, 810481731, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:02:18.925891 systemd[1]: Reloading. Oct 2 19:02:19.215660 /usr/lib/systemd/system-generators/torcx-generator[2670]: time="2023-10-02T19:02:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:02:19.218623 /usr/lib/systemd/system-generators/torcx-generator[2670]: time="2023-10-02T19:02:19Z" level=info msg="torcx already run" Oct 2 19:02:19.557938 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:02:19.558253 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:02:19.609301 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813124 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:02:19.813271 kernel: audit: type=1400 audit(1696273339.810:751): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829486 kernel: audit: type=1400 audit(1696273339.810:752): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.843245 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:02:19.843365 kernel: audit: type=1400 audit(1696273339.810:753): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.843432 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.852971 kernel: audit: type=1400 audit(1696273339.810:754): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.853084 kernel: audit: backlog limit exceeded Oct 2 19:02:19.853125 kernel: audit: type=1400 audit(1696273339.810:755): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.862576 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:02:19.862735 kernel: audit: type=1400 audit(1696273339.810:756): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.812000 audit: BPF prog-id=94 op=LOAD Oct 2 19:02:19.813000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.820000 audit: BPF prog-id=95 op=LOAD Oct 2 19:02:19.820000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.821000 audit: BPF prog-id=96 op=LOAD Oct 2 19:02:19.821000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit: BPF prog-id=97 op=LOAD Oct 2 19:02:19.829000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.829000 audit: BPF prog-id=98 op=LOAD Oct 2 19:02:19.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.852000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:02:19.853000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:02:19.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.874000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.878000 audit: BPF prog-id=101 op=LOAD Oct 2 19:02:19.878000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:02:19.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit: BPF prog-id=102 op=LOAD Oct 2 19:02:19.881000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit: BPF prog-id=103 op=LOAD Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.881000 audit: BPF prog-id=104 op=LOAD Oct 2 19:02:19.881000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:02:19.881000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.883000 audit: BPF prog-id=105 op=LOAD Oct 2 19:02:19.883000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.884000 audit: BPF prog-id=106 op=LOAD Oct 2 19:02:19.884000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit: BPF prog-id=107 op=LOAD Oct 2 19:02:19.888000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit: BPF prog-id=108 op=LOAD Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.888000 audit: BPF prog-id=109 op=LOAD Oct 2 19:02:19.888000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:02:19.888000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit: BPF prog-id=110 op=LOAD Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.889000 audit: BPF prog-id=111 op=LOAD Oct 2 19:02:19.889000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:02:19.889000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.890000 audit: BPF prog-id=112 op=LOAD Oct 2 19:02:19.890000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:02:19.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.894000 audit: BPF prog-id=113 op=LOAD Oct 2 19:02:19.894000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:02:19.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.898000 audit: BPF prog-id=114 op=LOAD Oct 2 19:02:19.898000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:02:19.962926 systemd[1]: Stopping kubelet.service... Oct 2 19:02:19.984162 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:02:19.984637 systemd[1]: Stopped kubelet.service. Oct 2 19:02:19.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:19.984733 systemd[1]: kubelet.service: Consumed 1.592s CPU time. Oct 2 19:02:19.989372 systemd[1]: Started kubelet.service. Oct 2 19:02:19.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:20.151000 audit[2737]: USER_ACCT pid=2737 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:20.152224 sudo[2737]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:02:20.152000 audit[2737]: CRED_REFR pid=2737 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:20.152780 sudo[2737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:02:20.157000 audit[2737]: USER_START pid=2737 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:20.191606 kubelet[2727]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:20.191606 kubelet[2727]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:20.192168 kubelet[2727]: I1002 19:02:20.191812 2727 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:02:20.194812 kubelet[2727]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:20.194812 kubelet[2727]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:20.205022 kubelet[2727]: I1002 19:02:20.204978 2727 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:02:20.205271 kubelet[2727]: I1002 19:02:20.205246 2727 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:02:20.205925 kubelet[2727]: I1002 19:02:20.205892 2727 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:02:20.211530 kubelet[2727]: I1002 19:02:20.211459 2727 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:02:20.215914 kubelet[2727]: I1002 19:02:20.215874 2727 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:02:20.219760 kubelet[2727]: W1002 19:02:20.219724 2727 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:02:20.222045 kubelet[2727]: I1002 19:02:20.221981 2727 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:02:20.223328 kubelet[2727]: I1002 19:02:20.223285 2727 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:02:20.223732 kubelet[2727]: I1002 19:02:20.223699 2727 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:02:20.224101 kubelet[2727]: I1002 19:02:20.224072 2727 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:02:20.224257 kubelet[2727]: I1002 19:02:20.224232 2727 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:02:20.224580 kubelet[2727]: I1002 19:02:20.224546 2727 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:20.238400 kubelet[2727]: I1002 19:02:20.238342 2727 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:02:20.240733 kubelet[2727]: I1002 19:02:20.240675 2727 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:02:20.241599 kubelet[2727]: I1002 19:02:20.241559 2727 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:02:20.245531 kubelet[2727]: I1002 19:02:20.245487 2727 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:02:20.247909 kubelet[2727]: I1002 19:02:20.247869 2727 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:02:20.250124 kubelet[2727]: I1002 19:02:20.250048 2727 server.go:1186] "Started kubelet" Oct 2 19:02:20.265000 audit[2727]: AVC avc: denied { mac_admin } for pid=2727 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:20.265000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:20.265000 audit[2727]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cef230 a1=4000252fd8 a2=4000cef200 a3=25 items=0 ppid=1 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:20.265000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:20.268169 kubelet[2727]: I1002 19:02:20.268131 2727 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:02:20.268000 audit[2727]: AVC avc: denied { mac_admin } for pid=2727 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:20.268000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:20.268000 audit[2727]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e4a120 a1=4000252ff0 a2=4000cef2c0 a3=25 items=0 ppid=1 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:20.268000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:20.271254 kubelet[2727]: I1002 19:02:20.271186 2727 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:02:20.271599 kubelet[2727]: I1002 19:02:20.271552 2727 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:02:20.278906 kubelet[2727]: I1002 19:02:20.278853 2727 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:02:20.281047 kubelet[2727]: I1002 19:02:20.281005 2727 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:02:20.294694 kubelet[2727]: E1002 19:02:20.294640 2727 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:02:20.294998 kubelet[2727]: E1002 19:02:20.294960 2727 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:02:20.306432 kubelet[2727]: I1002 19:02:20.306366 2727 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:02:20.311685 kubelet[2727]: I1002 19:02:20.311621 2727 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:02:20.472468 kubelet[2727]: I1002 19:02:20.470028 2727 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-18-117" Oct 2 19:02:20.514622 kubelet[2727]: I1002 19:02:20.514583 2727 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-18-117" Oct 2 19:02:20.514924 kubelet[2727]: I1002 19:02:20.514903 2727 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-18-117" Oct 2 19:02:20.647885 kubelet[2727]: I1002 19:02:20.647849 2727 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:02:20.648110 kubelet[2727]: I1002 19:02:20.648087 2727 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:02:20.648263 kubelet[2727]: I1002 19:02:20.648242 2727 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:20.648716 kubelet[2727]: I1002 19:02:20.648687 2727 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:02:20.648959 kubelet[2727]: I1002 19:02:20.648937 2727 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:02:20.649112 kubelet[2727]: I1002 19:02:20.649090 2727 policy_none.go:49] "None policy: Start" Oct 2 19:02:20.651084 kubelet[2727]: I1002 19:02:20.651044 2727 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:02:20.651318 kubelet[2727]: I1002 19:02:20.651295 2727 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:02:20.651746 kubelet[2727]: I1002 19:02:20.651717 2727 state_mem.go:75] "Updated machine memory state" Oct 2 19:02:20.665571 kubelet[2727]: I1002 19:02:20.665538 2727 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:02:20.665000 audit[2727]: AVC avc: denied { mac_admin } for pid=2727 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:20.665000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:20.665000 audit[2727]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e78ed0 a1=4001216f90 a2=4000e78ea0 a3=25 items=0 ppid=1 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:20.665000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:20.683502 kubelet[2727]: I1002 19:02:20.683404 2727 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:02:20.696950 kubelet[2727]: I1002 19:02:20.696885 2727 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:02:20.731345 kubelet[2727]: I1002 19:02:20.729017 2727 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:02:20.860046 kubelet[2727]: I1002 19:02:20.860011 2727 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:02:20.860293 kubelet[2727]: I1002 19:02:20.860271 2727 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:02:20.860647 kubelet[2727]: I1002 19:02:20.860621 2727 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:02:20.860865 kubelet[2727]: E1002 19:02:20.860844 2727 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:02:20.962038 kubelet[2727]: I1002 19:02:20.961970 2727 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:20.962484 kubelet[2727]: I1002 19:02:20.962400 2727 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:20.963780 kubelet[2727]: I1002 19:02:20.963748 2727 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:20.981639 kubelet[2727]: E1002 19:02:20.981333 2727 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-18-117\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:21.027921 kubelet[2727]: I1002 19:02:21.027874 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-kubeconfig\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:21.028258 kubelet[2727]: I1002 19:02:21.028225 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/54d6029f1059f7972656bffc67721ec4-ca-certs\") pod \"kube-apiserver-ip-172-31-18-117\" (UID: \"54d6029f1059f7972656bffc67721ec4\") " pod="kube-system/kube-apiserver-ip-172-31-18-117" Oct 2 19:02:21.028515 kubelet[2727]: I1002 19:02:21.028485 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/54d6029f1059f7972656bffc67721ec4-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-18-117\" (UID: \"54d6029f1059f7972656bffc67721ec4\") " pod="kube-system/kube-apiserver-ip-172-31-18-117" Oct 2 19:02:21.028881 kubelet[2727]: I1002 19:02:21.028846 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-ca-certs\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:21.029151 kubelet[2727]: I1002 19:02:21.029100 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-k8s-certs\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:21.029348 kubelet[2727]: I1002 19:02:21.029314 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:21.029675 kubelet[2727]: I1002 19:02:21.029540 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80fab6ec14d96d70d2de524a246d5427-kubeconfig\") pod \"kube-scheduler-ip-172-31-18-117\" (UID: \"80fab6ec14d96d70d2de524a246d5427\") " pod="kube-system/kube-scheduler-ip-172-31-18-117" Oct 2 19:02:21.029931 kubelet[2727]: I1002 19:02:21.029853 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/54d6029f1059f7972656bffc67721ec4-k8s-certs\") pod \"kube-apiserver-ip-172-31-18-117\" (UID: \"54d6029f1059f7972656bffc67721ec4\") " pod="kube-system/kube-apiserver-ip-172-31-18-117" Oct 2 19:02:21.030184 kubelet[2727]: I1002 19:02:21.030157 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b36bcadf8b3ad0a0128c096e91885d3e-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-18-117\" (UID: \"b36bcadf8b3ad0a0128c096e91885d3e\") " pod="kube-system/kube-controller-manager-ip-172-31-18-117" Oct 2 19:02:21.247435 kubelet[2727]: I1002 19:02:21.247235 2727 apiserver.go:52] "Watching apiserver" Oct 2 19:02:21.312898 kubelet[2727]: I1002 19:02:21.312837 2727 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:02:21.332929 kubelet[2727]: I1002 19:02:21.332887 2727 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:02:21.342474 sudo[2737]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:21.342000 audit[2737]: USER_END pid=2737 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:21.342000 audit[2737]: CRED_DISP pid=2737 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:21.668899 kubelet[2727]: I1002 19:02:21.668848 2727 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-18-117" podStartSLOduration=1.668761846 pod.CreationTimestamp="2023-10-02 19:02:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:21.668491741 +0000 UTC m=+1.648234802" watchObservedRunningTime="2023-10-02 19:02:21.668761846 +0000 UTC m=+1.648504883" Oct 2 19:02:22.459961 kubelet[2727]: I1002 19:02:22.459907 2727 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-18-117" podStartSLOduration=5.459833801 pod.CreationTimestamp="2023-10-02 19:02:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:22.458533604 +0000 UTC m=+2.438276629" watchObservedRunningTime="2023-10-02 19:02:22.459833801 +0000 UTC m=+2.439576838" Oct 2 19:02:23.258540 kubelet[2727]: I1002 19:02:23.258461 2727 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-18-117" podStartSLOduration=3.258364889 pod.CreationTimestamp="2023-10-02 19:02:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:23.256105326 +0000 UTC m=+3.235848375" watchObservedRunningTime="2023-10-02 19:02:23.258364889 +0000 UTC m=+3.238107926" Oct 2 19:02:23.734930 sudo[1837]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:23.735000 audit[1837]: USER_END pid=1837 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:23.735000 audit[1837]: CRED_DISP pid=1837 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:23.760130 sshd[1834]: pam_unix(sshd:session): session closed for user core Oct 2 19:02:23.763000 audit[1834]: USER_END pid=1834 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:02:23.763000 audit[1834]: CRED_DISP pid=1834 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:02:23.767339 systemd[1]: sshd@6-172.31.18.117:22-139.178.89.65:39538.service: Deactivated successfully. Oct 2 19:02:23.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.18.117:22-139.178.89.65:39538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:23.769134 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:02:23.769682 systemd[1]: session-7.scope: Consumed 11.488s CPU time. Oct 2 19:02:23.770680 systemd-logind[1553]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:02:23.772664 systemd-logind[1553]: Removed session 7. Oct 2 19:02:30.670553 kernel: kauditd_printk_skb: 278 callbacks suppressed Oct 2 19:02:30.670772 kernel: audit: type=1400 audit(1696273350.657:1000): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.657000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.668000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.682141 kernel: audit: type=1400 audit(1696273350.668:1001): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.668000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012e10c0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:30.695123 kernel: audit: type=1300 audit(1696273350.668:1001): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012e10c0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:30.668000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.668000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.720741 kernel: audit: type=1327 audit(1696273350.668:1001): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.720917 kernel: audit: type=1400 audit(1696273350.668:1002): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.668000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012e1120 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:30.733434 kernel: audit: type=1300 audit(1696273350.668:1002): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012e1120 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:30.733600 kernel: audit: type=1327 audit(1696273350.668:1002): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.668000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.669000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.753344 kernel: audit: type=1400 audit(1696273350.669:1003): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.669000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012e11a0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:30.767080 kernel: audit: type=1300 audit(1696273350.669:1003): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012e11a0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:30.767252 kernel: audit: type=1327 audit(1696273350.669:1003): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.669000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.657000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008ce760 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:30.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:32.203000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:02:32.203000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bbb800 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:02:32.203000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:32.346854 kubelet[2727]: I1002 19:02:32.346798 2727 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:02:32.347787 env[1571]: time="2023-10-02T19:02:32.347674308Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:02:32.348606 kubelet[2727]: I1002 19:02:32.348574 2727 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:02:33.183117 kubelet[2727]: I1002 19:02:33.183032 2727 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:33.205617 systemd[1]: Created slice kubepods-besteffort-pod548fa23b_28d2_4ceb_a64b_3610c8d9182a.slice. Oct 2 19:02:33.220787 kubelet[2727]: I1002 19:02:33.220729 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/548fa23b-28d2-4ceb-a64b-3610c8d9182a-kube-proxy\") pod \"kube-proxy-dd9lv\" (UID: \"548fa23b-28d2-4ceb-a64b-3610c8d9182a\") " pod="kube-system/kube-proxy-dd9lv" Oct 2 19:02:33.221093 kubelet[2727]: I1002 19:02:33.221061 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/548fa23b-28d2-4ceb-a64b-3610c8d9182a-xtables-lock\") pod \"kube-proxy-dd9lv\" (UID: \"548fa23b-28d2-4ceb-a64b-3610c8d9182a\") " pod="kube-system/kube-proxy-dd9lv" Oct 2 19:02:33.221588 kubelet[2727]: I1002 19:02:33.221556 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/548fa23b-28d2-4ceb-a64b-3610c8d9182a-lib-modules\") pod \"kube-proxy-dd9lv\" (UID: \"548fa23b-28d2-4ceb-a64b-3610c8d9182a\") " pod="kube-system/kube-proxy-dd9lv" Oct 2 19:02:33.221837 kubelet[2727]: I1002 19:02:33.221812 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jtjkm\" (UniqueName: \"kubernetes.io/projected/548fa23b-28d2-4ceb-a64b-3610c8d9182a-kube-api-access-jtjkm\") pod \"kube-proxy-dd9lv\" (UID: \"548fa23b-28d2-4ceb-a64b-3610c8d9182a\") " pod="kube-system/kube-proxy-dd9lv" Oct 2 19:02:33.251578 kubelet[2727]: I1002 19:02:33.251531 2727 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:33.263590 systemd[1]: Created slice kubepods-burstable-poddde1ae88_ff19_4d4d_8d8c_26523c0da00a.slice. Oct 2 19:02:33.324739 kubelet[2727]: I1002 19:02:33.324678 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-hostproc\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.324939 kubelet[2727]: I1002 19:02:33.324758 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-xtables-lock\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.324939 kubelet[2727]: I1002 19:02:33.324805 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-hubble-tls\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.324939 kubelet[2727]: I1002 19:02:33.324891 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-etc-cni-netd\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.324939 kubelet[2727]: I1002 19:02:33.324935 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-config-path\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325180 kubelet[2727]: I1002 19:02:33.324978 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-host-proc-sys-net\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325180 kubelet[2727]: I1002 19:02:33.325026 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-cgroup\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325180 kubelet[2727]: I1002 19:02:33.325074 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-bpf-maps\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325180 kubelet[2727]: I1002 19:02:33.325116 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-clustermesh-secrets\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325180 kubelet[2727]: I1002 19:02:33.325159 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-47rgl\" (UniqueName: \"kubernetes.io/projected/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-kube-api-access-47rgl\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325569 kubelet[2727]: I1002 19:02:33.325221 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cni-path\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325569 kubelet[2727]: I1002 19:02:33.325269 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-run\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325569 kubelet[2727]: I1002 19:02:33.325310 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-lib-modules\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.325569 kubelet[2727]: I1002 19:02:33.325429 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-host-proc-sys-kernel\") pod \"cilium-lpkrv\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " pod="kube-system/cilium-lpkrv" Oct 2 19:02:33.420141 kubelet[2727]: I1002 19:02:33.420053 2727 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:33.433227 systemd[1]: Created slice kubepods-besteffort-podbc26b065_d302_4593_8df8_1cefdb318387.slice. Oct 2 19:02:33.525495 env[1571]: time="2023-10-02T19:02:33.524712588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dd9lv,Uid:548fa23b-28d2-4ceb-a64b-3610c8d9182a,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:33.527485 kubelet[2727]: I1002 19:02:33.527447 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc26b065-d302-4593-8df8-1cefdb318387-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-t7rln\" (UID: \"bc26b065-d302-4593-8df8-1cefdb318387\") " pod="kube-system/cilium-operator-f59cbd8c6-t7rln" Oct 2 19:02:33.527837 kubelet[2727]: I1002 19:02:33.527787 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nqz8c\" (UniqueName: \"kubernetes.io/projected/bc26b065-d302-4593-8df8-1cefdb318387-kube-api-access-nqz8c\") pod \"cilium-operator-f59cbd8c6-t7rln\" (UID: \"bc26b065-d302-4593-8df8-1cefdb318387\") " pod="kube-system/cilium-operator-f59cbd8c6-t7rln" Oct 2 19:02:33.575718 env[1571]: time="2023-10-02T19:02:33.575505029Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:33.575950 env[1571]: time="2023-10-02T19:02:33.575846679Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:33.576330 env[1571]: time="2023-10-02T19:02:33.576183697Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:33.577106 env[1571]: time="2023-10-02T19:02:33.576992264Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/91f50c8c9dcc3742f0528c2da0f5f0515b03b0bb3a77caaa9650305b2764f0fb pid=2829 runtime=io.containerd.runc.v2 Oct 2 19:02:33.627378 systemd[1]: Started cri-containerd-91f50c8c9dcc3742f0528c2da0f5f0515b03b0bb3a77caaa9650305b2764f0fb.scope. Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.669000 audit: BPF prog-id=115 op=LOAD Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2829 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663530633863396463633337343266303532386332646130663566 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2829 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663530633863396463633337343266303532386332646130663566 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit: BPF prog-id=116 op=LOAD Oct 2 19:02:33.671000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2829 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663530633863396463633337343266303532386332646130663566 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit: BPF prog-id=117 op=LOAD Oct 2 19:02:33.671000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2829 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663530633863396463633337343266303532386332646130663566 Oct 2 19:02:33.671000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:02:33.671000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { perfmon } for pid=2839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit[2839]: AVC avc: denied { bpf } for pid=2839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.671000 audit: BPF prog-id=118 op=LOAD Oct 2 19:02:33.671000 audit[2839]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2829 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663530633863396463633337343266303532386332646130663566 Oct 2 19:02:33.712927 env[1571]: time="2023-10-02T19:02:33.710488379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dd9lv,Uid:548fa23b-28d2-4ceb-a64b-3610c8d9182a,Namespace:kube-system,Attempt:0,} returns sandbox id \"91f50c8c9dcc3742f0528c2da0f5f0515b03b0bb3a77caaa9650305b2764f0fb\"" Oct 2 19:02:33.721156 env[1571]: time="2023-10-02T19:02:33.721091134Z" level=info msg="CreateContainer within sandbox \"91f50c8c9dcc3742f0528c2da0f5f0515b03b0bb3a77caaa9650305b2764f0fb\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:02:33.749225 env[1571]: time="2023-10-02T19:02:33.749160662Z" level=info msg="CreateContainer within sandbox \"91f50c8c9dcc3742f0528c2da0f5f0515b03b0bb3a77caaa9650305b2764f0fb\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"8ed7286fec5a985072fa153f06360de8545ecd1e2280a50e731ec912fc424085\"" Oct 2 19:02:33.755080 env[1571]: time="2023-10-02T19:02:33.754555735Z" level=info msg="StartContainer for \"8ed7286fec5a985072fa153f06360de8545ecd1e2280a50e731ec912fc424085\"" Oct 2 19:02:33.809260 systemd[1]: Started cri-containerd-8ed7286fec5a985072fa153f06360de8545ecd1e2280a50e731ec912fc424085.scope. Oct 2 19:02:33.869853 env[1571]: time="2023-10-02T19:02:33.869778261Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lpkrv,Uid:dde1ae88-ff19-4d4d-8d8c-26523c0da00a,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:33.868000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.868000 audit[2870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2829 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865643732383666656335613938353037326661313533663036333630 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.869000 audit: BPF prog-id=119 op=LOAD Oct 2 19:02:33.869000 audit[2870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2829 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.869000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865643732383666656335613938353037326661313533663036333630 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.870000 audit: BPF prog-id=120 op=LOAD Oct 2 19:02:33.870000 audit[2870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2829 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865643732383666656335613938353037326661313533663036333630 Oct 2 19:02:33.872000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:02:33.872000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { perfmon } for pid=2870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit[2870]: AVC avc: denied { bpf } for pid=2870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.873000 audit: BPF prog-id=121 op=LOAD Oct 2 19:02:33.873000 audit[2870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2829 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865643732383666656335613938353037326661313533663036333630 Oct 2 19:02:33.919580 env[1571]: time="2023-10-02T19:02:33.919459052Z" level=info msg="StartContainer for \"8ed7286fec5a985072fa153f06360de8545ecd1e2280a50e731ec912fc424085\" returns successfully" Oct 2 19:02:33.936515 env[1571]: time="2023-10-02T19:02:33.936252582Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:33.936515 env[1571]: time="2023-10-02T19:02:33.936335634Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:33.936515 env[1571]: time="2023-10-02T19:02:33.936364350Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:33.936921 env[1571]: time="2023-10-02T19:02:33.936816291Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e pid=2900 runtime=io.containerd.runc.v2 Oct 2 19:02:33.972160 systemd[1]: Started cri-containerd-da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e.scope. Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.036000 audit: BPF prog-id=122 op=LOAD Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461316665363362616363366266373032666165373965393564666339 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461316665363362616363366266373032666165373965393564666339 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit: BPF prog-id=123 op=LOAD Oct 2 19:02:34.037000 audit[2915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461316665363362616363366266373032666165373965393564666339 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit: BPF prog-id=124 op=LOAD Oct 2 19:02:34.037000 audit[2915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461316665363362616363366266373032666165373965393564666339 Oct 2 19:02:34.037000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:02:34.037000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.037000 audit: BPF prog-id=125 op=LOAD Oct 2 19:02:34.037000 audit[2915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461316665363362616363366266373032666165373965393564666339 Oct 2 19:02:34.046959 env[1571]: time="2023-10-02T19:02:34.046308362Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-t7rln,Uid:bc26b065-d302-4593-8df8-1cefdb318387,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:34.091592 env[1571]: time="2023-10-02T19:02:34.091522412Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lpkrv,Uid:dde1ae88-ff19-4d4d-8d8c-26523c0da00a,Namespace:kube-system,Attempt:0,} returns sandbox id \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\"" Oct 2 19:02:34.096260 env[1571]: time="2023-10-02T19:02:34.095623509Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:02:34.129536 env[1571]: time="2023-10-02T19:02:34.129128179Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:34.129536 env[1571]: time="2023-10-02T19:02:34.129282906Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:34.129536 env[1571]: time="2023-10-02T19:02:34.129336702Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:34.131293 env[1571]: time="2023-10-02T19:02:34.131032508Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668 pid=2946 runtime=io.containerd.runc.v2 Oct 2 19:02:34.175004 systemd[1]: Started cri-containerd-34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668.scope. Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.230000 audit: BPF prog-id=126 op=LOAD Oct 2 19:02:34.236000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.236000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2946 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646634633365646631653536306636386463383966346334356131 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2946 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646634633365646631653536306636386463383966346334356131 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.240000 audit: BPF prog-id=127 op=LOAD Oct 2 19:02:34.240000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2946 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646634633365646631653536306636386463383966346334356131 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.243000 audit: BPF prog-id=128 op=LOAD Oct 2 19:02:34.243000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2946 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646634633365646631653536306636386463383966346334356131 Oct 2 19:02:34.245000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:02:34.245000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { perfmon } for pid=2958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit[2958]: AVC avc: denied { bpf } for pid=2958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:34.245000 audit: BPF prog-id=129 op=LOAD Oct 2 19:02:34.245000 audit[2958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2946 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334646634633365646631653536306636386463383966346334356131 Oct 2 19:02:34.298000 audit[3000]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.298000 audit[3000]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdff943e0 a2=0 a3=ffffaa2d06c0 items=0 ppid=2881 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.299000 audit[2999]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2999 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.299000 audit[2999]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdf3b55b0 a2=0 a3=ffff8d8fd6c0 items=0 ppid=2881 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.299000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:02:34.298000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:02:34.312000 audit[3002]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=3002 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.312000 audit[3002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff35f2400 a2=0 a3=ffff943936c0 items=0 ppid=2881 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.312000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:02:34.323000 audit[3003]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=3003 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.323000 audit[3003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1199060 a2=0 a3=ffffa0bcf6c0 items=0 ppid=2881 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.323000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:02:34.323000 audit[3005]: NETFILTER_CFG table=filter:63 family=10 entries=1 op=nft_register_chain pid=3005 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.323000 audit[3005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffc9eef20 a2=0 a3=ffff866246c0 items=0 ppid=2881 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.323000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:02:34.329000 audit[3011]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_chain pid=3011 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.329000 audit[3011]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc70fa530 a2=0 a3=ffff83f706c0 items=0 ppid=2881 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:02:34.335654 env[1571]: time="2023-10-02T19:02:34.335577789Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-t7rln,Uid:bc26b065-d302-4593-8df8-1cefdb318387,Namespace:kube-system,Attempt:0,} returns sandbox id \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\"" Oct 2 19:02:34.386000 audit[3012]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=3012 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.386000 audit[3012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdd7f7eb0 a2=0 a3=ffffaeddd6c0 items=0 ppid=2881 pid=3012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.386000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:02:34.396000 audit[3014]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=3014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.396000 audit[3014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd1396e00 a2=0 a3=ffffb21a06c0 items=0 ppid=2881 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.396000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:02:34.410000 audit[3017]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=3017 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.410000 audit[3017]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe1de8610 a2=0 a3=ffff91ba26c0 items=0 ppid=2881 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.410000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:02:34.414000 audit[3018]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.414000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd36e7a80 a2=0 a3=ffffbf0476c0 items=0 ppid=2881 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.414000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:02:34.424000 audit[3020]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=3020 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.424000 audit[3020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcb8a5b80 a2=0 a3=ffff82b0a6c0 items=0 ppid=2881 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.424000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:02:34.429000 audit[3021]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=3021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.429000 audit[3021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb611b90 a2=0 a3=ffff844d16c0 items=0 ppid=2881 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.429000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:02:34.439000 audit[3023]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=3023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.439000 audit[3023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcd47f690 a2=0 a3=ffffb6e3c6c0 items=0 ppid=2881 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.439000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:02:34.459000 audit[3026]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=3026 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.459000 audit[3026]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc7d8d110 a2=0 a3=ffff814616c0 items=0 ppid=2881 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.459000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:02:34.464000 audit[3027]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=3027 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.464000 audit[3027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5cde440 a2=0 a3=ffffb5a116c0 items=0 ppid=2881 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:02:34.473000 audit[3029]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3029 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.473000 audit[3029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffed8a2e60 a2=0 a3=ffffb1d966c0 items=0 ppid=2881 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.473000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:02:34.477000 audit[3030]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.477000 audit[3030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffc23c480 a2=0 a3=ffffbf2d56c0 items=0 ppid=2881 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.477000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:02:34.488000 audit[3032]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3032 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.488000 audit[3032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffecf9cd80 a2=0 a3=ffff918356c0 items=0 ppid=2881 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.488000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:34.505000 audit[3035]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.505000 audit[3035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffea14a290 a2=0 a3=ffffa848c6c0 items=0 ppid=2881 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.505000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:34.523000 audit[3038]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.523000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd6482f80 a2=0 a3=ffff8def86c0 items=0 ppid=2881 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.523000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:02:34.527000 audit[3039]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3039 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.527000 audit[3039]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffed9cd080 a2=0 a3=ffff994df6c0 items=0 ppid=2881 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.527000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:02:34.537000 audit[3041]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.537000 audit[3041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffffbb0fd30 a2=0 a3=ffffb54b06c0 items=0 ppid=2881 pid=3041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.537000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:34.553000 audit[3044]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.553000 audit[3044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd51c93d0 a2=0 a3=ffffb268b6c0 items=0 ppid=2881 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:34.585000 audit[3048]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:02:34.585000 audit[3048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffdef4d890 a2=0 a3=ffffaef576c0 items=0 ppid=2881 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.585000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:34.597000 audit[3048]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:02:34.597000 audit[3048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffdef4d890 a2=0 a3=ffffaef576c0 items=0 ppid=2881 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.597000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:34.601000 audit[3053]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3053 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.601000 audit[3053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc39bc490 a2=0 a3=ffff88f346c0 items=0 ppid=2881 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.601000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:02:34.610000 audit[3055]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3055 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.610000 audit[3055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffe6e4d20 a2=0 a3=ffff8ed4f6c0 items=0 ppid=2881 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.610000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:02:34.623000 audit[3058]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.623000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd8591b40 a2=0 a3=ffff923856c0 items=0 ppid=2881 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.623000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:02:34.627000 audit[3059]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3059 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.627000 audit[3059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca1ebf90 a2=0 a3=ffffa76d16c0 items=0 ppid=2881 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.627000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:02:34.636000 audit[3061]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3061 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.636000 audit[3061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd30f82f0 a2=0 a3=ffffafe266c0 items=0 ppid=2881 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.636000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:02:34.641000 audit[3062]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3062 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.641000 audit[3062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff264e3c0 a2=0 a3=ffffa200e6c0 items=0 ppid=2881 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.641000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:02:34.650000 audit[3064]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3064 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.650000 audit[3064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe9b629d0 a2=0 a3=ffffbe63c6c0 items=0 ppid=2881 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.650000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:02:34.666000 audit[3067]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3067 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.666000 audit[3067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe7a2e7d0 a2=0 a3=ffffa77946c0 items=0 ppid=2881 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.666000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:02:34.670000 audit[3068]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3068 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.670000 audit[3068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd37d9eb0 a2=0 a3=ffffa61e66c0 items=0 ppid=2881 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.670000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:02:34.678000 audit[3070]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3070 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.678000 audit[3070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdc8526d0 a2=0 a3=ffffa0a9d6c0 items=0 ppid=2881 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.678000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:02:34.682000 audit[3071]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3071 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.682000 audit[3071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffce67a300 a2=0 a3=ffffa92b26c0 items=0 ppid=2881 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.682000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:02:34.692000 audit[3073]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.692000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff574e590 a2=0 a3=ffff989816c0 items=0 ppid=2881 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.692000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:34.706000 audit[3076]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3076 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.706000 audit[3076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdecce880 a2=0 a3=ffffb3bb36c0 items=0 ppid=2881 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.706000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:02:34.721000 audit[3079]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.721000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff7661110 a2=0 a3=ffffab5ad6c0 items=0 ppid=2881 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.721000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:02:34.725000 audit[3080]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3080 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.725000 audit[3080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc503c010 a2=0 a3=ffffa5a7d6c0 items=0 ppid=2881 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.725000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:02:34.734000 audit[3082]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3082 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.734000 audit[3082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffce7c3d30 a2=0 a3=ffff973736c0 items=0 ppid=2881 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.734000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:34.747000 audit[3085]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3085 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.747000 audit[3085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd5e83030 a2=0 a3=ffff8e58f6c0 items=0 ppid=2881 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.747000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:34.776000 audit[3089]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:02:34.776000 audit[3089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffdd05ffe0 a2=0 a3=ffffa0a7a6c0 items=0 ppid=2881 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.776000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:34.777000 audit[3089]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3089 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:02:34.777000 audit[3089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffdd05ffe0 a2=0 a3=ffffa0a7a6c0 items=0 ppid=2881 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.777000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:40.887013 kubelet[2727]: I1002 19:02:40.886953 2727 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-dd9lv" podStartSLOduration=7.886871646 pod.CreationTimestamp="2023-10-02 19:02:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:34.954873808 +0000 UTC m=+14.934616845" watchObservedRunningTime="2023-10-02 19:02:40.886871646 +0000 UTC m=+20.866614695" Oct 2 19:02:41.562800 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3507937285.mount: Deactivated successfully. Oct 2 19:02:45.628314 env[1571]: time="2023-10-02T19:02:45.628233629Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:45.632876 env[1571]: time="2023-10-02T19:02:45.632810945Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:45.636998 env[1571]: time="2023-10-02T19:02:45.636934961Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:45.638458 env[1571]: time="2023-10-02T19:02:45.638378570Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:02:45.642927 env[1571]: time="2023-10-02T19:02:45.642873218Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:02:45.645612 env[1571]: time="2023-10-02T19:02:45.645519342Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:02:45.666914 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2368652355.mount: Deactivated successfully. Oct 2 19:02:45.680002 env[1571]: time="2023-10-02T19:02:45.679914634Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\"" Oct 2 19:02:45.683349 env[1571]: time="2023-10-02T19:02:45.683292181Z" level=info msg="StartContainer for \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\"" Oct 2 19:02:45.742063 systemd[1]: Started cri-containerd-23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b.scope. Oct 2 19:02:45.782401 systemd[1]: cri-containerd-23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b.scope: Deactivated successfully. Oct 2 19:02:46.115573 env[1571]: time="2023-10-02T19:02:46.115475003Z" level=info msg="shim disconnected" id=23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b Oct 2 19:02:46.115892 env[1571]: time="2023-10-02T19:02:46.115574555Z" level=warning msg="cleaning up after shim disconnected" id=23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b namespace=k8s.io Oct 2 19:02:46.115892 env[1571]: time="2023-10-02T19:02:46.115596754Z" level=info msg="cleaning up dead shim" Oct 2 19:02:46.144705 env[1571]: time="2023-10-02T19:02:46.144641062Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:02:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3115 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:02:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:02:46.145467 env[1571]: time="2023-10-02T19:02:46.145296716Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:02:46.149586 env[1571]: time="2023-10-02T19:02:46.149496369Z" level=error msg="Failed to pipe stdout of container \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\"" error="reading from a closed fifo" Oct 2 19:02:46.149705 env[1571]: time="2023-10-02T19:02:46.149612793Z" level=error msg="Failed to pipe stderr of container \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\"" error="reading from a closed fifo" Oct 2 19:02:46.151942 env[1571]: time="2023-10-02T19:02:46.151854843Z" level=error msg="StartContainer for \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:02:46.152884 kubelet[2727]: E1002 19:02:46.152605 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b" Oct 2 19:02:46.152884 kubelet[2727]: E1002 19:02:46.152773 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:02:46.152884 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:02:46.152884 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:02:46.153825 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-47rgl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:02:46.153987 kubelet[2727]: E1002 19:02:46.152837 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:02:46.661884 systemd[1]: run-containerd-runc-k8s.io-23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b-runc.YmZacO.mount: Deactivated successfully. Oct 2 19:02:46.662094 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b-rootfs.mount: Deactivated successfully. Oct 2 19:02:46.995512 env[1571]: time="2023-10-02T19:02:46.995307526Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:02:47.037830 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4028499663.mount: Deactivated successfully. Oct 2 19:02:47.052467 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3213835667.mount: Deactivated successfully. Oct 2 19:02:47.138002 env[1571]: time="2023-10-02T19:02:47.137939105Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\"" Oct 2 19:02:47.142918 env[1571]: time="2023-10-02T19:02:47.142350511Z" level=info msg="StartContainer for \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\"" Oct 2 19:02:47.192098 systemd[1]: Started cri-containerd-61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c.scope. Oct 2 19:02:47.235780 systemd[1]: cri-containerd-61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c.scope: Deactivated successfully. Oct 2 19:02:47.273063 env[1571]: time="2023-10-02T19:02:47.272874671Z" level=info msg="shim disconnected" id=61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c Oct 2 19:02:47.273063 env[1571]: time="2023-10-02T19:02:47.272968451Z" level=warning msg="cleaning up after shim disconnected" id=61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c namespace=k8s.io Oct 2 19:02:47.273063 env[1571]: time="2023-10-02T19:02:47.272992139Z" level=info msg="cleaning up dead shim" Oct 2 19:02:47.312366 env[1571]: time="2023-10-02T19:02:47.312288087Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:02:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3150 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:02:47Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:02:47.312854 env[1571]: time="2023-10-02T19:02:47.312755497Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 19:02:47.313253 env[1571]: time="2023-10-02T19:02:47.313191720Z" level=error msg="Failed to pipe stderr of container \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\"" error="reading from a closed fifo" Oct 2 19:02:47.313608 env[1571]: time="2023-10-02T19:02:47.313562172Z" level=error msg="Failed to pipe stdout of container \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\"" error="reading from a closed fifo" Oct 2 19:02:47.316071 env[1571]: time="2023-10-02T19:02:47.315996798Z" level=error msg="StartContainer for \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:02:47.316776 kubelet[2727]: E1002 19:02:47.316521 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c" Oct 2 19:02:47.316776 kubelet[2727]: E1002 19:02:47.316676 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:02:47.316776 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:02:47.316776 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:02:47.321744 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-47rgl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:02:47.321962 kubelet[2727]: E1002 19:02:47.316734 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:02:47.977313 kubelet[2727]: I1002 19:02:47.977253 2727 scope.go:115] "RemoveContainer" containerID="23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b" Oct 2 19:02:47.977898 kubelet[2727]: I1002 19:02:47.977857 2727 scope.go:115] "RemoveContainer" containerID="23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b" Oct 2 19:02:47.994907 env[1571]: time="2023-10-02T19:02:47.994820056Z" level=info msg="RemoveContainer for \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\"" Oct 2 19:02:48.002877 env[1571]: time="2023-10-02T19:02:48.002822154Z" level=info msg="RemoveContainer for \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\"" Oct 2 19:02:48.003734 env[1571]: time="2023-10-02T19:02:48.003641632Z" level=error msg="RemoveContainer for \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\" failed" error="rpc error: code = NotFound desc = get container info: container \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\" in namespace \"k8s.io\": not found" Oct 2 19:02:48.006166 env[1571]: time="2023-10-02T19:02:48.006076822Z" level=info msg="RemoveContainer for \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\" returns successfully" Oct 2 19:02:48.008914 kubelet[2727]: E1002 19:02:48.008848 2727 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b\" in namespace \"k8s.io\": not found" containerID="23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b" Oct 2 19:02:48.009103 kubelet[2727]: E1002 19:02:48.008949 2727 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b" in namespace "k8s.io": not found; Skipping pod "cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)" Oct 2 19:02:48.009742 kubelet[2727]: E1002 19:02:48.009660 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:02:48.144493 env[1571]: time="2023-10-02T19:02:48.144425933Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:48.147528 env[1571]: time="2023-10-02T19:02:48.147456970Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:48.150933 env[1571]: time="2023-10-02T19:02:48.150881931Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:48.151899 env[1571]: time="2023-10-02T19:02:48.151854697Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:02:48.158967 env[1571]: time="2023-10-02T19:02:48.158910897Z" level=info msg="CreateContainer within sandbox \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:02:48.182870 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1262342786.mount: Deactivated successfully. Oct 2 19:02:48.193054 env[1571]: time="2023-10-02T19:02:48.192971214Z" level=info msg="CreateContainer within sandbox \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\"" Oct 2 19:02:48.194029 env[1571]: time="2023-10-02T19:02:48.193963996Z" level=info msg="StartContainer for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\"" Oct 2 19:02:48.252813 systemd[1]: Started cri-containerd-1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353.scope. Oct 2 19:02:48.306449 kernel: kauditd_printk_skb: 351 callbacks suppressed Oct 2 19:02:48.306599 kernel: audit: type=1400 audit(1696273368.299:1109): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.319668 kernel: audit: type=1400 audit(1696273368.299:1110): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.319820 kernel: audit: type=1400 audit(1696273368.299:1111): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.335021 kernel: audit: type=1400 audit(1696273368.299:1112): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.335169 kernel: audit: type=1400 audit(1696273368.299:1113): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.350473 kernel: audit: type=1400 audit(1696273368.299:1114): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.359721 kernel: audit: type=1400 audit(1696273368.299:1115): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.367786 kernel: audit: type=1400 audit(1696273368.299:1116): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.375958 kernel: audit: type=1400 audit(1696273368.299:1117): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.384013 kernel: audit: type=1400 audit(1696273368.301:1118): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.301000 audit: BPF prog-id=130 op=LOAD Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=2946 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:48.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373263343438363234643535313465323633323065393631623164 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2946 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:48.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373263343438363234643535313465323633323065393631623164 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit: BPF prog-id=131 op=LOAD Oct 2 19:02:48.309000 audit[3171]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=2946 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:48.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373263343438363234643535313465323633323065393631623164 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.309000 audit: BPF prog-id=132 op=LOAD Oct 2 19:02:48.309000 audit[3171]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=2946 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:48.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373263343438363234643535313465323633323065393631623164 Oct 2 19:02:48.310000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:02:48.310000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:48.310000 audit: BPF prog-id=133 op=LOAD Oct 2 19:02:48.310000 audit[3171]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=2946 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:48.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164373263343438363234643535313465323633323065393631623164 Oct 2 19:02:48.404702 env[1571]: time="2023-10-02T19:02:48.404634727Z" level=info msg="StartContainer for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" returns successfully" Oct 2 19:02:48.480000 audit[3180]: AVC avc: denied { map_create } for pid=3180 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c955,c980 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c955,c980 tclass=bpf permissive=0 Oct 2 19:02:48.480000 audit[3180]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400061d768 a2=48 a3=0 items=0 ppid=2946 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c955,c980 key=(null) Oct 2 19:02:48.480000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:02:48.987234 kubelet[2727]: E1002 19:02:48.987189 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:02:49.132296 kubelet[2727]: I1002 19:02:49.132242 2727 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-t7rln" podStartSLOduration=-9.223372020722588e+09 pod.CreationTimestamp="2023-10-02 19:02:33 +0000 UTC" firstStartedPulling="2023-10-02 19:02:34.337943252 +0000 UTC m=+14.317686265" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:49.069561585 +0000 UTC m=+29.049304634" watchObservedRunningTime="2023-10-02 19:02:49.1321875 +0000 UTC m=+29.111930561" Oct 2 19:02:49.222280 kubelet[2727]: W1002 19:02:49.222211 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddde1ae88_ff19_4d4d_8d8c_26523c0da00a.slice/cri-containerd-23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b.scope WatchSource:0}: container "23a0363254b27e6144091db7d4b6c044b4dd8368ae3600068c8ca8fbb2f4c53b" in namespace "k8s.io": not found Oct 2 19:02:52.332671 kubelet[2727]: W1002 19:02:52.332618 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddde1ae88_ff19_4d4d_8d8c_26523c0da00a.slice/cri-containerd-61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c.scope WatchSource:0}: task 61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c not found: not found Oct 2 19:03:03.866131 env[1571]: time="2023-10-02T19:03:03.865391125Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:03:03.892095 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1757009639.mount: Deactivated successfully. Oct 2 19:03:03.905335 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1810941095.mount: Deactivated successfully. Oct 2 19:03:03.909159 env[1571]: time="2023-10-02T19:03:03.909096533Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\"" Oct 2 19:03:03.911123 env[1571]: time="2023-10-02T19:03:03.911072298Z" level=info msg="StartContainer for \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\"" Oct 2 19:03:03.966986 systemd[1]: Started cri-containerd-841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04.scope. Oct 2 19:03:04.010306 systemd[1]: cri-containerd-841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04.scope: Deactivated successfully. Oct 2 19:03:04.241543 env[1571]: time="2023-10-02T19:03:04.241374450Z" level=info msg="shim disconnected" id=841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04 Oct 2 19:03:04.241543 env[1571]: time="2023-10-02T19:03:04.241482194Z" level=warning msg="cleaning up after shim disconnected" id=841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04 namespace=k8s.io Oct 2 19:03:04.241543 env[1571]: time="2023-10-02T19:03:04.241504803Z" level=info msg="cleaning up dead shim" Oct 2 19:03:04.267282 env[1571]: time="2023-10-02T19:03:04.267201954Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:03:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3227 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:03:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:03:04.267775 env[1571]: time="2023-10-02T19:03:04.267694097Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 19:03:04.269385 env[1571]: time="2023-10-02T19:03:04.269328589Z" level=error msg="Failed to pipe stdout of container \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\"" error="reading from a closed fifo" Oct 2 19:03:04.269683 env[1571]: time="2023-10-02T19:03:04.269636351Z" level=error msg="Failed to pipe stderr of container \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\"" error="reading from a closed fifo" Oct 2 19:03:04.271930 env[1571]: time="2023-10-02T19:03:04.271855369Z" level=error msg="StartContainer for \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:03:04.272347 kubelet[2727]: E1002 19:03:04.272301 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04" Oct 2 19:03:04.274704 kubelet[2727]: E1002 19:03:04.274463 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:03:04.274704 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:03:04.274704 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:03:04.274704 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-47rgl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:03:04.275331 kubelet[2727]: E1002 19:03:04.274612 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:03:04.886321 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04-rootfs.mount: Deactivated successfully. Oct 2 19:03:05.029007 kubelet[2727]: I1002 19:03:05.028972 2727 scope.go:115] "RemoveContainer" containerID="61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c" Oct 2 19:03:05.030359 kubelet[2727]: I1002 19:03:05.030281 2727 scope.go:115] "RemoveContainer" containerID="61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c" Oct 2 19:03:05.032374 env[1571]: time="2023-10-02T19:03:05.032312273Z" level=info msg="RemoveContainer for \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\"" Oct 2 19:03:05.034638 env[1571]: time="2023-10-02T19:03:05.034513621Z" level=info msg="RemoveContainer for \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\"" Oct 2 19:03:05.034882 env[1571]: time="2023-10-02T19:03:05.034672728Z" level=error msg="RemoveContainer for \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\" failed" error="failed to set removing state for container \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\": container is already in removing state" Oct 2 19:03:05.035182 kubelet[2727]: E1002 19:03:05.035151 2727 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\": container is already in removing state" containerID="61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c" Oct 2 19:03:05.035361 kubelet[2727]: E1002 19:03:05.035337 2727 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c": container is already in removing state; Skipping pod "cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)" Oct 2 19:03:05.035965 kubelet[2727]: E1002 19:03:05.035937 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:03:05.048175 env[1571]: time="2023-10-02T19:03:05.048076310Z" level=info msg="RemoveContainer for \"61b875ae250b436e58dc59f3e8e65b1c2479e2a9a54236a0d09877f41d93356c\" returns successfully" Oct 2 19:03:07.348716 kubelet[2727]: W1002 19:03:07.348642 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddde1ae88_ff19_4d4d_8d8c_26523c0da00a.slice/cri-containerd-841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04.scope WatchSource:0}: task 841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04 not found: not found Oct 2 19:03:14.293000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:14.305695 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:03:14.305913 kernel: audit: type=1400 audit(1696273394.293:1128): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:14.293000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028b6660 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:14.318496 kernel: audit: type=1300 audit(1696273394.293:1128): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028b6660 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:14.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:14.329277 kernel: audit: type=1327 audit(1696273394.293:1128): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:14.329518 kernel: audit: type=1400 audit(1696273394.310:1129): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:14.310000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:14.310000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002918150 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:14.354263 kernel: audit: type=1300 audit(1696273394.310:1129): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002918150 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:14.310000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:14.366229 kernel: audit: type=1327 audit(1696273394.310:1129): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:15.373000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.373000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=40097dc390 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:03:15.396313 kernel: audit: type=1400 audit(1696273395.373:1130): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.396531 kernel: audit: type=1300 audit(1696273395.373:1130): arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=40097dc390 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:03:15.373000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.407629 kernel: audit: type=1327 audit(1696273395.373:1130): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.373000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.417835 kernel: audit: type=1400 audit(1696273395.373:1131): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.373000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4002893b60 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:03:15.373000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.374000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.374000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=40097dc450 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:03:15.374000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.389000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521243 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.389000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=400976b0e0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:03:15.389000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.393000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.393000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=40097dc5a0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:03:15.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.393000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.393000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4002893ca0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:03:15.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.862488 kubelet[2727]: E1002 19:03:15.862386 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:03:24.167197 systemd[1]: Started sshd@7-172.31.18.117:22-139.178.89.65:51320.service. Oct 2 19:03:24.179526 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:03:24.179691 kernel: audit: type=1130 audit(1696273404.166:1136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.18.117:22-139.178.89.65:51320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:24.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.18.117:22-139.178.89.65:51320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:24.352000 audit[3245]: USER_ACCT pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.354312 sshd[3245]: Accepted publickey for core from 139.178.89.65 port 51320 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:24.365591 kernel: audit: type=1101 audit(1696273404.352:1137): pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.365000 audit[3245]: CRED_ACQ pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.368361 sshd[3245]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:24.383909 kernel: audit: type=1103 audit(1696273404.365:1138): pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.384059 kernel: audit: type=1006 audit(1696273404.365:1139): pid=3245 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:03:24.365000 audit[3245]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4dadeb0 a2=3 a3=1 items=0 ppid=1 pid=3245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:24.395341 kernel: audit: type=1300 audit(1696273404.365:1139): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4dadeb0 a2=3 a3=1 items=0 ppid=1 pid=3245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:24.365000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:24.399716 kernel: audit: type=1327 audit(1696273404.365:1139): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:24.405596 systemd-logind[1553]: New session 8 of user core. Oct 2 19:03:24.407976 systemd[1]: Started session-8.scope. Oct 2 19:03:24.417000 audit[3245]: USER_START pid=3245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.424000 audit[3247]: CRED_ACQ pid=3247 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.441283 kernel: audit: type=1105 audit(1696273404.417:1140): pid=3245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.441446 kernel: audit: type=1103 audit(1696273404.424:1141): pid=3247 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.744949 sshd[3245]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:24.745000 audit[3245]: USER_END pid=3245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.745000 audit[3245]: CRED_DISP pid=3245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.759104 systemd[1]: sshd@7-172.31.18.117:22-139.178.89.65:51320.service: Deactivated successfully. Oct 2 19:03:24.760334 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:03:24.767658 kernel: audit: type=1106 audit(1696273404.745:1142): pid=3245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.767858 kernel: audit: type=1104 audit(1696273404.745:1143): pid=3245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.18.117:22-139.178.89.65:51320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:24.768944 systemd-logind[1553]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:03:24.770576 systemd-logind[1553]: Removed session 8. Oct 2 19:03:30.674342 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:03:30.674626 kernel: audit: type=1400 audit(1696273410.670:1145): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.670000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.670000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c8f0c0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:30.696304 kernel: audit: type=1300 audit(1696273410.670:1145): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c8f0c0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:30.696474 kernel: audit: type=1327 audit(1696273410.670:1145): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.670000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.716751 kernel: audit: type=1400 audit(1696273410.670:1146): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.716913 kernel: audit: type=1300 audit(1696273410.670:1146): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c8f0e0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:30.670000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c8f0e0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:30.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.739880 kernel: audit: type=1327 audit(1696273410.670:1146): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.740055 kernel: audit: type=1400 audit(1696273410.670:1147): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.670000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.749849 kernel: audit: type=1300 audit(1696273410.670:1147): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c8f100 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:30.670000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c8f100 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:30.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.772263 kernel: audit: type=1327 audit(1696273410.670:1147): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.772475 kernel: audit: type=1400 audit(1696273410.673:1148): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.673000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.673000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028b7e20 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:03:30.673000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.868861 env[1571]: time="2023-10-02T19:03:30.868303154Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:03:30.891566 env[1571]: time="2023-10-02T19:03:30.891496742Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\"" Oct 2 19:03:30.892584 env[1571]: time="2023-10-02T19:03:30.892475545Z" level=info msg="StartContainer for \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\"" Oct 2 19:03:30.960362 systemd[1]: Started cri-containerd-2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf.scope. Oct 2 19:03:31.010524 systemd[1]: cri-containerd-2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf.scope: Deactivated successfully. Oct 2 19:03:31.021912 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf-rootfs.mount: Deactivated successfully. Oct 2 19:03:31.044342 env[1571]: time="2023-10-02T19:03:31.044234703Z" level=info msg="shim disconnected" id=2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf Oct 2 19:03:31.044666 env[1571]: time="2023-10-02T19:03:31.044363516Z" level=warning msg="cleaning up after shim disconnected" id=2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf namespace=k8s.io Oct 2 19:03:31.044666 env[1571]: time="2023-10-02T19:03:31.044387145Z" level=info msg="cleaning up dead shim" Oct 2 19:03:31.072811 env[1571]: time="2023-10-02T19:03:31.072741781Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:03:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3281 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:03:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:03:31.073588 env[1571]: time="2023-10-02T19:03:31.073495059Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:03:31.074638 env[1571]: time="2023-10-02T19:03:31.074554480Z" level=error msg="Failed to pipe stderr of container \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\"" error="reading from a closed fifo" Oct 2 19:03:31.077678 env[1571]: time="2023-10-02T19:03:31.077541708Z" level=error msg="Failed to pipe stdout of container \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\"" error="reading from a closed fifo" Oct 2 19:03:31.084280 env[1571]: time="2023-10-02T19:03:31.084197308Z" level=error msg="StartContainer for \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:03:31.084854 kubelet[2727]: E1002 19:03:31.084786 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf" Oct 2 19:03:31.088235 kubelet[2727]: E1002 19:03:31.084953 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:03:31.088235 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:03:31.088235 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:03:31.088235 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-47rgl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:03:31.090998 kubelet[2727]: E1002 19:03:31.085020 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:03:31.096861 kubelet[2727]: I1002 19:03:31.096811 2727 scope.go:115] "RemoveContainer" containerID="841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04" Oct 2 19:03:31.097405 kubelet[2727]: I1002 19:03:31.097367 2727 scope.go:115] "RemoveContainer" containerID="841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04" Oct 2 19:03:31.109221 env[1571]: time="2023-10-02T19:03:31.108317609Z" level=info msg="RemoveContainer for \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\"" Oct 2 19:03:31.111568 env[1571]: time="2023-10-02T19:03:31.111494287Z" level=info msg="RemoveContainer for \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\"" Oct 2 19:03:31.112292 env[1571]: time="2023-10-02T19:03:31.112217457Z" level=error msg="RemoveContainer for \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\" failed" error="failed to set removing state for container \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\": container is already in removing state" Oct 2 19:03:31.113868 kubelet[2727]: E1002 19:03:31.112828 2727 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\": container is already in removing state" containerID="841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04" Oct 2 19:03:31.113868 kubelet[2727]: E1002 19:03:31.112891 2727 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04": container is already in removing state; Skipping pod "cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)" Oct 2 19:03:31.113868 kubelet[2727]: E1002 19:03:31.113333 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:03:31.126371 env[1571]: time="2023-10-02T19:03:31.126282739Z" level=info msg="RemoveContainer for \"841af1783d59ab7ab5d560f37e394cb94969a7a1b4a654bb13c4711f73c5ea04\" returns successfully" Oct 2 19:03:34.150212 kubelet[2727]: W1002 19:03:34.150159 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddde1ae88_ff19_4d4d_8d8c_26523c0da00a.slice/cri-containerd-2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf.scope WatchSource:0}: task 2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf not found: not found Oct 2 19:03:34.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.18.117:22-139.178.89.65:51088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:34.777375 systemd[1]: Started sshd@8-172.31.18.117:22-139.178.89.65:51088.service. Oct 2 19:03:34.963000 audit[3298]: USER_ACCT pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.964127 sshd[3298]: Accepted publickey for core from 139.178.89.65 port 51088 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:34.966000 audit[3298]: CRED_ACQ pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.966000 audit[3298]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc89555d0 a2=3 a3=1 items=0 ppid=1 pid=3298 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:34.966000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:34.967894 sshd[3298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:34.977238 systemd-logind[1553]: New session 9 of user core. Oct 2 19:03:34.978300 systemd[1]: Started session-9.scope. Oct 2 19:03:34.989000 audit[3298]: USER_START pid=3298 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.996000 audit[3300]: CRED_ACQ pid=3300 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:35.277150 sshd[3298]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:35.279000 audit[3298]: USER_END pid=3298 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:35.282000 audit[3298]: CRED_DISP pid=3298 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:35.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.18.117:22-139.178.89.65:51088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:35.286015 systemd-logind[1553]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:03:35.286492 systemd[1]: sshd@8-172.31.18.117:22-139.178.89.65:51088.service: Deactivated successfully. Oct 2 19:03:35.288502 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:03:35.292162 systemd-logind[1553]: Removed session 9. Oct 2 19:03:38.804490 update_engine[1554]: I1002 19:03:38.803941 1554 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:03:38.804490 update_engine[1554]: I1002 19:03:38.803999 1554 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:03:38.804490 update_engine[1554]: I1002 19:03:38.804370 1554 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:03:38.805430 update_engine[1554]: I1002 19:03:38.805366 1554 omaha_request_params.cc:62] Current group set to lts Oct 2 19:03:38.805640 update_engine[1554]: I1002 19:03:38.805603 1554 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:03:38.805640 update_engine[1554]: I1002 19:03:38.805627 1554 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:03:38.805760 update_engine[1554]: I1002 19:03:38.805657 1554 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:03:38.805760 update_engine[1554]: I1002 19:03:38.805707 1554 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:03:38.806570 locksmithd[1643]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:03:38.809040 update_engine[1554]: I1002 19:03:38.808984 1554 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:03:38.809040 update_engine[1554]: I1002 19:03:38.809024 1554 omaha_request_action.cc:269] Request: Oct 2 19:03:38.809040 update_engine[1554]: Oct 2 19:03:38.809040 update_engine[1554]: Oct 2 19:03:38.809040 update_engine[1554]: Oct 2 19:03:38.809040 update_engine[1554]: Oct 2 19:03:38.809040 update_engine[1554]: Oct 2 19:03:38.809040 update_engine[1554]: Oct 2 19:03:38.809040 update_engine[1554]: Oct 2 19:03:38.809040 update_engine[1554]: Oct 2 19:03:38.809040 update_engine[1554]: I1002 19:03:38.809043 1554 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:03:38.812813 update_engine[1554]: I1002 19:03:38.812758 1554 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:03:38.813096 update_engine[1554]: I1002 19:03:38.813060 1554 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:03:40.045273 update_engine[1554]: I1002 19:03:40.045217 1554 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:03:40.046645 update_engine[1554]: I1002 19:03:40.046576 1554 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:03:40.047194 update_engine[1554]: I1002 19:03:40.047127 1554 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:03:40.367898 update_engine[1554]: I1002 19:03:40.367718 1554 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:03:40.370429 update_engine[1554]: I1002 19:03:40.370311 1554 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:03:40.370429 update_engine[1554]: I1002 19:03:40.370375 1554 omaha_request_action.cc:619] Omaha request response: Oct 2 19:03:40.370429 update_engine[1554]: Oct 2 19:03:40.381739 update_engine[1554]: I1002 19:03:40.381649 1554 omaha_request_action.cc:409] No update. Oct 2 19:03:40.381739 update_engine[1554]: I1002 19:03:40.381718 1554 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:03:40.381739 update_engine[1554]: I1002 19:03:40.381747 1554 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:03:40.382031 update_engine[1554]: I1002 19:03:40.381759 1554 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:03:40.382031 update_engine[1554]: I1002 19:03:40.381768 1554 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:03:40.382031 update_engine[1554]: I1002 19:03:40.381778 1554 update_attempter.cc:302] Processing Done. Oct 2 19:03:40.382031 update_engine[1554]: I1002 19:03:40.381800 1554 update_attempter.cc:338] No update. Oct 2 19:03:40.382031 update_engine[1554]: I1002 19:03:40.381820 1554 update_check_scheduler.cc:74] Next update check in 45m53s Oct 2 19:03:40.382459 locksmithd[1643]: LastCheckedTime=1696273420 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:03:44.862401 kubelet[2727]: E1002 19:03:44.862359 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:03:45.320492 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:03:45.320664 kernel: audit: type=1130 audit(1696273425.308:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.18.117:22-139.178.89.65:47814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:45.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.18.117:22-139.178.89.65:47814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:45.309377 systemd[1]: Started sshd@9-172.31.18.117:22-139.178.89.65:47814.service. Oct 2 19:03:45.492000 audit[3310]: USER_ACCT pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.498382 sshd[3310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:45.499705 sshd[3310]: Accepted publickey for core from 139.178.89.65 port 47814 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:45.494000 audit[3310]: CRED_ACQ pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.513122 kernel: audit: type=1101 audit(1696273425.492:1159): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.513202 kernel: audit: type=1103 audit(1696273425.494:1160): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.519197 kernel: audit: type=1006 audit(1696273425.494:1161): pid=3310 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:03:45.494000 audit[3310]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb254250 a2=3 a3=1 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:45.530267 kernel: audit: type=1300 audit(1696273425.494:1161): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb254250 a2=3 a3=1 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:45.530887 kernel: audit: type=1327 audit(1696273425.494:1161): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:45.494000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:45.538783 systemd-logind[1553]: New session 10 of user core. Oct 2 19:03:45.539905 systemd[1]: Started session-10.scope. Oct 2 19:03:45.548000 audit[3310]: USER_START pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.564017 kernel: audit: type=1105 audit(1696273425.548:1162): pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.564139 kernel: audit: type=1103 audit(1696273425.561:1163): pid=3312 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.561000 audit[3312]: CRED_ACQ pid=3312 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.842747 sshd[3310]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:45.843000 audit[3310]: USER_END pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.849747 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:03:45.851130 systemd[1]: sshd@9-172.31.18.117:22-139.178.89.65:47814.service: Deactivated successfully. Oct 2 19:03:45.845000 audit[3310]: CRED_DISP pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.865491 kernel: audit: type=1106 audit(1696273425.843:1164): pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.865625 kernel: audit: type=1104 audit(1696273425.845:1165): pid=3310 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.865603 systemd-logind[1553]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:03:45.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.18.117:22-139.178.89.65:47814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:45.869541 systemd-logind[1553]: Removed session 10. Oct 2 19:03:55.878098 systemd[1]: Started sshd@10-172.31.18.117:22-139.178.89.65:48484.service. Oct 2 19:03:55.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.18.117:22-139.178.89.65:48484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:55.884464 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:03:55.884589 kernel: audit: type=1130 audit(1696273435.877:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.18.117:22-139.178.89.65:48484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:56.063000 audit[3323]: USER_ACCT pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.064966 sshd[3323]: Accepted publickey for core from 139.178.89.65 port 48484 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:56.076546 kernel: audit: type=1101 audit(1696273436.063:1168): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.075000 audit[3323]: CRED_ACQ pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.078380 sshd[3323]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:56.093301 kernel: audit: type=1103 audit(1696273436.075:1169): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.093504 kernel: audit: type=1006 audit(1696273436.075:1170): pid=3323 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:03:56.075000 audit[3323]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff33aa0c0 a2=3 a3=1 items=0 ppid=1 pid=3323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:56.098961 systemd[1]: Started session-11.scope. Oct 2 19:03:56.104082 kernel: audit: type=1300 audit(1696273436.075:1170): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff33aa0c0 a2=3 a3=1 items=0 ppid=1 pid=3323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:56.104251 kernel: audit: type=1327 audit(1696273436.075:1170): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:56.075000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:56.103194 systemd-logind[1553]: New session 11 of user core. Oct 2 19:03:56.113000 audit[3323]: USER_START pid=3323 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.127448 kernel: audit: type=1105 audit(1696273436.113:1171): pid=3323 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.119000 audit[3325]: CRED_ACQ pid=3325 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.137564 kernel: audit: type=1103 audit(1696273436.119:1172): pid=3325 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.402015 sshd[3323]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:56.402000 audit[3323]: USER_END pid=3323 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.407859 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:03:56.409029 systemd[1]: sshd@10-172.31.18.117:22-139.178.89.65:48484.service: Deactivated successfully. Oct 2 19:03:56.404000 audit[3323]: CRED_DISP pid=3323 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.418936 systemd-logind[1553]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:03:56.420682 systemd-logind[1553]: Removed session 11. Oct 2 19:03:56.425254 kernel: audit: type=1106 audit(1696273436.402:1173): pid=3323 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.425394 kernel: audit: type=1104 audit(1696273436.404:1174): pid=3323 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.18.117:22-139.178.89.65:48484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:57.863017 kubelet[2727]: E1002 19:03:57.862964 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:04:06.434573 systemd[1]: Started sshd@11-172.31.18.117:22-139.178.89.65:46018.service. Oct 2 19:04:06.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.18.117:22-139.178.89.65:46018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:06.439578 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:06.439797 kernel: audit: type=1130 audit(1696273446.434:1176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.18.117:22-139.178.89.65:46018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:06.620000 audit[3337]: USER_ACCT pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.624781 sshd[3337]: Accepted publickey for core from 139.178.89.65 port 46018 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:06.626395 sshd[3337]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:06.620000 audit[3337]: CRED_ACQ pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.641803 kernel: audit: type=1101 audit(1696273446.620:1177): pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.641946 kernel: audit: type=1103 audit(1696273446.620:1178): pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.647173 systemd[1]: Started session-12.scope. Oct 2 19:04:06.649242 kernel: audit: type=1006 audit(1696273446.620:1179): pid=3337 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:04:06.649341 kernel: audit: type=1300 audit(1696273446.620:1179): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf02da50 a2=3 a3=1 items=0 ppid=1 pid=3337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:06.620000 audit[3337]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf02da50 a2=3 a3=1 items=0 ppid=1 pid=3337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:06.651533 systemd-logind[1553]: New session 12 of user core. Oct 2 19:04:06.620000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:06.662019 kernel: audit: type=1327 audit(1696273446.620:1179): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:06.662000 audit[3337]: USER_START pid=3337 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.676455 kernel: audit: type=1105 audit(1696273446.662:1180): pid=3337 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.675000 audit[3339]: CRED_ACQ pid=3339 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.687823 kernel: audit: type=1103 audit(1696273446.675:1181): pid=3339 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.949732 sshd[3337]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:06.950000 audit[3337]: USER_END pid=3337 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.955878 systemd-logind[1553]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:04:06.957851 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:04:06.950000 audit[3337]: CRED_DISP pid=3337 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.959691 systemd-logind[1553]: Removed session 12. Oct 2 19:04:06.960779 systemd[1]: sshd@11-172.31.18.117:22-139.178.89.65:46018.service: Deactivated successfully. Oct 2 19:04:06.972287 kernel: audit: type=1106 audit(1696273446.950:1182): pid=3337 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.973270 kernel: audit: type=1104 audit(1696273446.950:1183): pid=3337 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.18.117:22-139.178.89.65:46018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:12.867263 env[1571]: time="2023-10-02T19:04:12.867162204Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:04:12.886445 env[1571]: time="2023-10-02T19:04:12.886353272Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\"" Oct 2 19:04:12.889288 env[1571]: time="2023-10-02T19:04:12.887794530Z" level=info msg="StartContainer for \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\"" Oct 2 19:04:12.944146 systemd[1]: run-containerd-runc-k8s.io-855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365-runc.dZGaxM.mount: Deactivated successfully. Oct 2 19:04:12.950577 systemd[1]: Started cri-containerd-855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365.scope. Oct 2 19:04:12.983055 systemd[1]: cri-containerd-855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365.scope: Deactivated successfully. Oct 2 19:04:12.992274 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365-rootfs.mount: Deactivated successfully. Oct 2 19:04:13.012399 env[1571]: time="2023-10-02T19:04:13.012311709Z" level=info msg="shim disconnected" id=855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365 Oct 2 19:04:13.012399 env[1571]: time="2023-10-02T19:04:13.012387166Z" level=warning msg="cleaning up after shim disconnected" id=855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365 namespace=k8s.io Oct 2 19:04:13.012810 env[1571]: time="2023-10-02T19:04:13.012434087Z" level=info msg="cleaning up dead shim" Oct 2 19:04:13.040341 env[1571]: time="2023-10-02T19:04:13.040259545Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:04:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3373 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:04:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:04:13.040841 env[1571]: time="2023-10-02T19:04:13.040748037Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:04:13.041786 env[1571]: time="2023-10-02T19:04:13.041723280Z" level=error msg="Failed to pipe stdout of container \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\"" error="reading from a closed fifo" Oct 2 19:04:13.042229 env[1571]: time="2023-10-02T19:04:13.042176034Z" level=error msg="Failed to pipe stderr of container \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\"" error="reading from a closed fifo" Oct 2 19:04:13.048150 env[1571]: time="2023-10-02T19:04:13.048061848Z" level=error msg="StartContainer for \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:04:13.048455 kubelet[2727]: E1002 19:04:13.048371 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365" Oct 2 19:04:13.049006 kubelet[2727]: E1002 19:04:13.048563 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:04:13.049006 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:04:13.049006 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:04:13.049006 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-47rgl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:04:13.049510 kubelet[2727]: E1002 19:04:13.048621 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:04:13.200769 kubelet[2727]: I1002 19:04:13.200734 2727 scope.go:115] "RemoveContainer" containerID="2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf" Oct 2 19:04:13.201713 kubelet[2727]: I1002 19:04:13.201688 2727 scope.go:115] "RemoveContainer" containerID="2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf" Oct 2 19:04:13.215825 env[1571]: time="2023-10-02T19:04:13.213016243Z" level=info msg="RemoveContainer for \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\"" Oct 2 19:04:13.222654 env[1571]: time="2023-10-02T19:04:13.222583052Z" level=info msg="RemoveContainer for \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\"" Oct 2 19:04:13.222835 env[1571]: time="2023-10-02T19:04:13.222743278Z" level=error msg="RemoveContainer for \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\" failed" error="failed to set removing state for container \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\": container is already in removing state" Oct 2 19:04:13.223487 kubelet[2727]: E1002 19:04:13.223435 2727 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\": container is already in removing state" containerID="2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf" Oct 2 19:04:13.223722 kubelet[2727]: E1002 19:04:13.223527 2727 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf": container is already in removing state; Skipping pod "cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)" Oct 2 19:04:13.224234 kubelet[2727]: E1002 19:04:13.224186 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:04:13.227694 env[1571]: time="2023-10-02T19:04:13.227579244Z" level=info msg="RemoveContainer for \"2b3d33e737573b89dcfdb9d796698afad62ae36ca7f42102f61bcfc0f6a73baf\" returns successfully" Oct 2 19:04:14.294000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:14.297530 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:14.297646 kernel: audit: type=1400 audit(1696273454.294:1185): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:14.294000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f8cf40 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:04:14.320030 kernel: audit: type=1300 audit(1696273454.294:1185): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f8cf40 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:04:14.294000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:14.330656 kernel: audit: type=1327 audit(1696273454.294:1185): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:14.330776 kernel: audit: type=1400 audit(1696273454.311:1186): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:14.311000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:14.311000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017b1650 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:04:14.352706 kernel: audit: type=1300 audit(1696273454.311:1186): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017b1650 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:04:14.352822 kernel: audit: type=1327 audit(1696273454.311:1186): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:14.311000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:15.373000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.374000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.394942 kernel: audit: type=1400 audit(1696273455.373:1187): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.395172 kernel: audit: type=1400 audit(1696273455.374:1188): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.395282 kernel: audit: type=1300 audit(1696273455.374:1188): arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4010e35d80 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:04:15.374000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4010e35d80 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:04:15.374000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.419343 kernel: audit: type=1327 audit(1696273455.374:1188): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.374000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.374000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4010e3af90 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:04:15.374000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.373000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4010efedb0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:04:15.373000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.390000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521243 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.390000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4010efee10 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:04:15.390000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.395000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.395000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4010e3b110 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:04:15.395000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.394000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.394000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4010e35ea0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:04:15.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:16.119223 kubelet[2727]: W1002 19:04:16.119154 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddde1ae88_ff19_4d4d_8d8c_26523c0da00a.slice/cri-containerd-855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365.scope WatchSource:0}: task 855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365 not found: not found Oct 2 19:04:16.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.18.117:22-139.178.89.65:49486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:16.980604 systemd[1]: Started sshd@12-172.31.18.117:22-139.178.89.65:49486.service. Oct 2 19:04:17.162000 audit[3388]: USER_ACCT pid=3388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.164206 sshd[3388]: Accepted publickey for core from 139.178.89.65 port 49486 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:17.165000 audit[3388]: CRED_ACQ pid=3388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.165000 audit[3388]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6d835e0 a2=3 a3=1 items=0 ppid=1 pid=3388 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:17.165000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:17.167649 sshd[3388]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:17.176476 systemd-logind[1553]: New session 13 of user core. Oct 2 19:04:17.176652 systemd[1]: Started session-13.scope. Oct 2 19:04:17.188000 audit[3388]: USER_START pid=3388 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.194000 audit[3390]: CRED_ACQ pid=3390 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.467896 sshd[3388]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:17.468000 audit[3388]: USER_END pid=3388 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.468000 audit[3388]: CRED_DISP pid=3388 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.474679 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:04:17.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.18.117:22-139.178.89.65:49486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:17.476048 systemd-logind[1553]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:04:17.476402 systemd[1]: sshd@12-172.31.18.117:22-139.178.89.65:49486.service: Deactivated successfully. Oct 2 19:04:17.478725 systemd-logind[1553]: Removed session 13. Oct 2 19:04:20.392995 kubelet[2727]: E1002 19:04:20.392946 2727 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:04:20.730967 kubelet[2727]: E1002 19:04:20.730783 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:24.863381 kubelet[2727]: E1002 19:04:24.863091 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:04:25.732027 kubelet[2727]: E1002 19:04:25.731990 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:27.501166 systemd[1]: Started sshd@13-172.31.18.117:22-139.178.89.65:49760.service. Oct 2 19:04:27.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.18.117:22-139.178.89.65:49760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:27.504452 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:04:27.504610 kernel: audit: type=1130 audit(1696273467.501:1202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.18.117:22-139.178.89.65:49760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:27.684000 audit[3403]: USER_ACCT pid=3403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.684974 sshd[3403]: Accepted publickey for core from 139.178.89.65 port 49760 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:27.696486 kernel: audit: type=1101 audit(1696273467.684:1203): pid=3403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.697000 audit[3403]: CRED_ACQ pid=3403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.699091 sshd[3403]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:27.714274 kernel: audit: type=1103 audit(1696273467.697:1204): pid=3403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.714552 kernel: audit: type=1006 audit(1696273467.697:1205): pid=3403 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:04:27.697000 audit[3403]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffee54f00 a2=3 a3=1 items=0 ppid=1 pid=3403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:27.725032 kernel: audit: type=1300 audit(1696273467.697:1205): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffee54f00 a2=3 a3=1 items=0 ppid=1 pid=3403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:27.697000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:27.728732 kernel: audit: type=1327 audit(1696273467.697:1205): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:27.734657 systemd-logind[1553]: New session 14 of user core. Oct 2 19:04:27.735930 systemd[1]: Started session-14.scope. Oct 2 19:04:27.747000 audit[3403]: USER_START pid=3403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.754000 audit[3405]: CRED_ACQ pid=3405 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.767815 kernel: audit: type=1105 audit(1696273467.747:1206): pid=3403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.767980 kernel: audit: type=1103 audit(1696273467.754:1207): pid=3405 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:28.024946 sshd[3403]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:28.026000 audit[3403]: USER_END pid=3403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:28.030639 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:04:28.032075 systemd[1]: sshd@13-172.31.18.117:22-139.178.89.65:49760.service: Deactivated successfully. Oct 2 19:04:28.027000 audit[3403]: CRED_DISP pid=3403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:28.049829 kernel: audit: type=1106 audit(1696273468.026:1208): pid=3403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:28.049988 kernel: audit: type=1104 audit(1696273468.027:1209): pid=3403 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:28.050247 systemd-logind[1553]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:04:28.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.18.117:22-139.178.89.65:49760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:28.052349 systemd-logind[1553]: Removed session 14. Oct 2 19:04:30.671000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:30.671000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002708940 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:04:30.671000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:30.671000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:30.671000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026ac560 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:04:30.671000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:30.671000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:30.671000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026ac580 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:04:30.671000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:30.673000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:30.673000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026ac7c0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:04:30.673000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:30.733687 kubelet[2727]: E1002 19:04:30.733647 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:35.736286 kubelet[2727]: E1002 19:04:35.736250 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:37.862606 kubelet[2727]: E1002 19:04:37.862284 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:04:38.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.18.117:22-139.178.89.65:58140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:38.054024 systemd[1]: Started sshd@14-172.31.18.117:22-139.178.89.65:58140.service. Oct 2 19:04:38.056325 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:04:38.056394 kernel: audit: type=1130 audit(1696273478.053:1215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.18.117:22-139.178.89.65:58140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:38.237000 audit[3418]: USER_ACCT pid=3418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.238440 sshd[3418]: Accepted publickey for core from 139.178.89.65 port 58140 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:38.242259 sshd[3418]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:38.248895 kernel: audit: type=1101 audit(1696273478.237:1216): pid=3418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.248984 kernel: audit: type=1103 audit(1696273478.241:1217): pid=3418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.241000 audit[3418]: CRED_ACQ pid=3418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.266626 kernel: audit: type=1006 audit(1696273478.241:1218): pid=3418 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:04:38.281819 kernel: audit: type=1300 audit(1696273478.241:1218): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6712850 a2=3 a3=1 items=0 ppid=1 pid=3418 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:38.241000 audit[3418]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6712850 a2=3 a3=1 items=0 ppid=1 pid=3418 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:38.272205 systemd-logind[1553]: New session 15 of user core. Oct 2 19:04:38.281769 systemd[1]: Started session-15.scope. Oct 2 19:04:38.241000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:38.287219 kernel: audit: type=1327 audit(1696273478.241:1218): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:38.298000 audit[3418]: USER_START pid=3418 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.312513 kernel: audit: type=1105 audit(1696273478.298:1219): pid=3418 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.313000 audit[3420]: CRED_ACQ pid=3420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.324530 kernel: audit: type=1103 audit(1696273478.313:1220): pid=3420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.571782 sshd[3418]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:38.576000 audit[3418]: USER_END pid=3418 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.590653 systemd[1]: sshd@14-172.31.18.117:22-139.178.89.65:58140.service: Deactivated successfully. Oct 2 19:04:38.591959 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:04:38.594213 systemd-logind[1553]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:04:38.577000 audit[3418]: CRED_DISP pid=3418 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.604058 kernel: audit: type=1106 audit(1696273478.576:1221): pid=3418 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.604213 kernel: audit: type=1104 audit(1696273478.577:1222): pid=3418 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.18.117:22-139.178.89.65:58140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:38.605095 systemd-logind[1553]: Removed session 15. Oct 2 19:04:40.738244 kubelet[2727]: E1002 19:04:40.738189 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:45.739471 kubelet[2727]: E1002 19:04:45.739397 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:48.608464 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:48.608633 kernel: audit: type=1130 audit(1696273488.603:1224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.117:22-139.178.89.65:60388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:48.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.117:22-139.178.89.65:60388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:48.603995 systemd[1]: Started sshd@15-172.31.18.117:22-139.178.89.65:60388.service. Oct 2 19:04:48.790000 audit[3430]: USER_ACCT pid=3430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.796597 sshd[3430]: Accepted publickey for core from 139.178.89.65 port 60388 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:48.800721 sshd[3430]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:48.801577 kernel: audit: type=1101 audit(1696273488.790:1225): pid=3430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.801668 kernel: audit: type=1103 audit(1696273488.796:1226): pid=3430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.796000 audit[3430]: CRED_ACQ pid=3430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.817215 kernel: audit: type=1006 audit(1696273488.796:1227): pid=3430 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:04:48.796000 audit[3430]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdeac2510 a2=3 a3=1 items=0 ppid=1 pid=3430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:48.822644 systemd[1]: Started session-16.scope. Oct 2 19:04:48.825725 systemd-logind[1553]: New session 16 of user core. Oct 2 19:04:48.828394 kernel: audit: type=1300 audit(1696273488.796:1227): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdeac2510 a2=3 a3=1 items=0 ppid=1 pid=3430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:48.828549 kernel: audit: type=1327 audit(1696273488.796:1227): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:48.796000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:48.838000 audit[3430]: USER_START pid=3430 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.844000 audit[3432]: CRED_ACQ pid=3432 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.858785 kernel: audit: type=1105 audit(1696273488.838:1228): pid=3430 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.858918 kernel: audit: type=1103 audit(1696273488.844:1229): pid=3432 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:49.114034 sshd[3430]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:49.116000 audit[3430]: USER_END pid=3430 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:49.120613 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:04:49.122003 systemd[1]: sshd@15-172.31.18.117:22-139.178.89.65:60388.service: Deactivated successfully. Oct 2 19:04:49.117000 audit[3430]: CRED_DISP pid=3430 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:49.138358 kernel: audit: type=1106 audit(1696273489.116:1230): pid=3430 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:49.138547 kernel: audit: type=1104 audit(1696273489.117:1231): pid=3430 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:49.138499 systemd-logind[1553]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:04:49.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.117:22-139.178.89.65:60388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:49.141084 systemd-logind[1553]: Removed session 16. Oct 2 19:04:50.740940 kubelet[2727]: E1002 19:04:50.740906 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:52.864325 kubelet[2727]: E1002 19:04:52.864284 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:04:55.742692 kubelet[2727]: E1002 19:04:55.742644 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:59.147733 systemd[1]: Started sshd@16-172.31.18.117:22-139.178.89.65:50234.service. Oct 2 19:04:59.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.117:22-139.178.89.65:50234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:59.153577 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:59.153707 kernel: audit: type=1130 audit(1696273499.148:1233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.117:22-139.178.89.65:50234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:59.328000 audit[3443]: USER_ACCT pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.328801 sshd[3443]: Accepted publickey for core from 139.178.89.65 port 50234 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:59.340000 audit[3443]: CRED_ACQ pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.342266 sshd[3443]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:59.350764 kernel: audit: type=1101 audit(1696273499.328:1234): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.350931 kernel: audit: type=1103 audit(1696273499.340:1235): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.356913 kernel: audit: type=1006 audit(1696273499.341:1236): pid=3443 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:04:59.357062 kernel: audit: type=1300 audit(1696273499.341:1236): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7a133b0 a2=3 a3=1 items=0 ppid=1 pid=3443 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:59.341000 audit[3443]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7a133b0 a2=3 a3=1 items=0 ppid=1 pid=3443 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:59.341000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:59.371485 kernel: audit: type=1327 audit(1696273499.341:1236): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:59.375867 systemd-logind[1553]: New session 17 of user core. Oct 2 19:04:59.376797 systemd[1]: Started session-17.scope. Oct 2 19:04:59.386000 audit[3443]: USER_START pid=3443 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.393000 audit[3445]: CRED_ACQ pid=3445 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.407377 kernel: audit: type=1105 audit(1696273499.386:1237): pid=3443 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.407523 kernel: audit: type=1103 audit(1696273499.393:1238): pid=3445 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.651757 sshd[3443]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:59.653000 audit[3443]: USER_END pid=3443 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.653000 audit[3443]: CRED_DISP pid=3443 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.665924 systemd[1]: sshd@16-172.31.18.117:22-139.178.89.65:50234.service: Deactivated successfully. Oct 2 19:04:59.667175 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:04:59.669671 systemd-logind[1553]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:04:59.671885 systemd-logind[1553]: Removed session 17. Oct 2 19:04:59.674780 kernel: audit: type=1106 audit(1696273499.653:1239): pid=3443 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.674936 kernel: audit: type=1104 audit(1696273499.653:1240): pid=3443 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.117:22-139.178.89.65:50234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:59.685745 systemd[1]: Started sshd@17-172.31.18.117:22-139.178.89.65:50242.service. Oct 2 19:04:59.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.18.117:22-139.178.89.65:50242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:59.875000 audit[3456]: USER_ACCT pid=3456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.876251 sshd[3456]: Accepted publickey for core from 139.178.89.65 port 50242 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:59.878000 audit[3456]: CRED_ACQ pid=3456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.878000 audit[3456]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc297fd0 a2=3 a3=1 items=0 ppid=1 pid=3456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:59.878000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:59.880033 sshd[3456]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:59.889263 systemd[1]: Started session-18.scope. Oct 2 19:04:59.891477 systemd-logind[1553]: New session 18 of user core. Oct 2 19:04:59.900000 audit[3456]: USER_START pid=3456 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:59.906000 audit[3458]: CRED_ACQ pid=3458 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:00.744512 kubelet[2727]: E1002 19:05:00.744477 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:01.663499 sshd[3456]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:01.667000 audit[3456]: USER_END pid=3456 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.668000 audit[3456]: CRED_DISP pid=3456 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.18.117:22-139.178.89.65:50242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:01.671758 systemd-logind[1553]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:05:01.672314 systemd[1]: sshd@17-172.31.18.117:22-139.178.89.65:50242.service: Deactivated successfully. Oct 2 19:05:01.675039 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:05:01.677877 systemd-logind[1553]: Removed session 18. Oct 2 19:05:01.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.18.117:22-139.178.89.65:50254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:01.694609 systemd[1]: Started sshd@18-172.31.18.117:22-139.178.89.65:50254.service. Oct 2 19:05:01.879000 audit[3465]: USER_ACCT pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.880299 sshd[3465]: Accepted publickey for core from 139.178.89.65 port 50254 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:01.882000 audit[3465]: CRED_ACQ pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.882000 audit[3465]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9f0ab10 a2=3 a3=1 items=0 ppid=1 pid=3465 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:01.882000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:01.884166 sshd[3465]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:01.893405 systemd[1]: Started session-19.scope. Oct 2 19:05:01.894475 systemd-logind[1553]: New session 19 of user core. Oct 2 19:05:01.904000 audit[3465]: USER_START pid=3465 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.910000 audit[3467]: CRED_ACQ pid=3467 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:02.180373 sshd[3465]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:02.182000 audit[3465]: USER_END pid=3465 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:02.182000 audit[3465]: CRED_DISP pid=3465 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:02.186968 systemd[1]: sshd@18-172.31.18.117:22-139.178.89.65:50254.service: Deactivated successfully. Oct 2 19:05:02.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.18.117:22-139.178.89.65:50254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:02.188334 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:05:02.189109 systemd-logind[1553]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:05:02.190939 systemd-logind[1553]: Removed session 19. Oct 2 19:05:04.862717 kubelet[2727]: E1002 19:05:04.862677 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:05:05.746851 kubelet[2727]: E1002 19:05:05.746817 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:10.748276 kubelet[2727]: E1002 19:05:10.747947 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:12.226187 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:05:12.226331 kernel: audit: type=1130 audit(1696273512.214:1260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.18.117:22-139.178.89.65:49684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:12.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.18.117:22-139.178.89.65:49684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:12.214761 systemd[1]: Started sshd@19-172.31.18.117:22-139.178.89.65:49684.service. Oct 2 19:05:12.404000 audit[3479]: USER_ACCT pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.405710 sshd[3479]: Accepted publickey for core from 139.178.89.65 port 49684 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:12.410445 sshd[3479]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:12.408000 audit[3479]: CRED_ACQ pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.425519 kernel: audit: type=1101 audit(1696273512.404:1261): pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.425738 kernel: audit: type=1103 audit(1696273512.408:1262): pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.432141 kernel: audit: type=1006 audit(1696273512.409:1263): pid=3479 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:05:12.409000 audit[3479]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5e629d0 a2=3 a3=1 items=0 ppid=1 pid=3479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:12.442534 kernel: audit: type=1300 audit(1696273512.409:1263): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5e629d0 a2=3 a3=1 items=0 ppid=1 pid=3479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:12.409000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:12.446372 kernel: audit: type=1327 audit(1696273512.409:1263): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:12.453021 systemd[1]: Started session-20.scope. Oct 2 19:05:12.454527 systemd-logind[1553]: New session 20 of user core. Oct 2 19:05:12.464000 audit[3479]: USER_START pid=3479 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.471000 audit[3481]: CRED_ACQ pid=3481 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.476599 kernel: audit: type=1105 audit(1696273512.464:1264): pid=3479 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.486462 kernel: audit: type=1103 audit(1696273512.471:1265): pid=3481 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.738766 sshd[3479]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:12.740000 audit[3479]: USER_END pid=3479 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.744989 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:05:12.752016 systemd[1]: sshd@19-172.31.18.117:22-139.178.89.65:49684.service: Deactivated successfully. Oct 2 19:05:12.754554 systemd-logind[1553]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:05:12.756453 kernel: audit: type=1106 audit(1696273512.740:1266): pid=3479 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.756856 systemd-logind[1553]: Removed session 20. Oct 2 19:05:12.741000 audit[3479]: CRED_DISP pid=3479 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.18.117:22-139.178.89.65:49684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:12.769474 kernel: audit: type=1104 audit(1696273512.741:1267): pid=3479 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:14.298000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:14.298000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002a7f0e0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:14.298000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:14.315000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:14.315000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40029181e0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:14.315000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:15.376000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.376000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400fea2a20 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:05:15.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.376000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.376000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400fec51c0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:05:15.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.379000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.379000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400fe5f380 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:05:15.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.393000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521243 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.393000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400fe5f410 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:05:15.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.396000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.396000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400fea2a80 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:05:15.396000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.400000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.400000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400fe62ca0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:05:15.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.749712 kubelet[2727]: E1002 19:05:15.749668 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:17.862439 kubelet[2727]: E1002 19:05:17.862364 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:05:20.752022 kubelet[2727]: E1002 19:05:20.751988 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:22.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.18.117:22-139.178.89.65:57728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:22.771278 systemd[1]: Started sshd@20-172.31.18.117:22-139.178.89.65:57728.service. Oct 2 19:05:22.774935 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:05:22.775045 kernel: audit: type=1130 audit(1696273522.770:1277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.18.117:22-139.178.89.65:57728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:22.956000 audit[3493]: USER_ACCT pid=3493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.958267 sshd[3493]: Accepted publickey for core from 139.178.89.65 port 57728 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:22.970449 kernel: audit: type=1101 audit(1696273522.956:1278): pid=3493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.969000 audit[3493]: CRED_ACQ pid=3493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.976050 sshd[3493]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:22.986690 kernel: audit: type=1103 audit(1696273522.969:1279): pid=3493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.986813 kernel: audit: type=1006 audit(1696273522.969:1280): pid=3493 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:05:22.969000 audit[3493]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd05191e0 a2=3 a3=1 items=0 ppid=1 pid=3493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:22.996981 kernel: audit: type=1300 audit(1696273522.969:1280): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd05191e0 a2=3 a3=1 items=0 ppid=1 pid=3493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:22.969000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:23.001709 kernel: audit: type=1327 audit(1696273522.969:1280): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:23.010205 systemd-logind[1553]: New session 21 of user core. Oct 2 19:05:23.010702 systemd[1]: Started session-21.scope. Oct 2 19:05:23.019000 audit[3493]: USER_START pid=3493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:23.033596 kernel: audit: type=1105 audit(1696273523.019:1281): pid=3493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:23.032000 audit[3495]: CRED_ACQ pid=3495 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:23.043461 kernel: audit: type=1103 audit(1696273523.032:1282): pid=3495 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:23.294758 sshd[3493]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:23.296000 audit[3493]: USER_END pid=3493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:23.296000 audit[3493]: CRED_DISP pid=3493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:23.309652 systemd[1]: sshd@20-172.31.18.117:22-139.178.89.65:57728.service: Deactivated successfully. Oct 2 19:05:23.319312 kernel: audit: type=1106 audit(1696273523.296:1283): pid=3493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:23.319469 kernel: audit: type=1104 audit(1696273523.296:1284): pid=3493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:23.310917 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:05:23.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.18.117:22-139.178.89.65:57728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:23.321240 systemd-logind[1553]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:05:23.322845 systemd-logind[1553]: Removed session 21. Oct 2 19:05:25.754823 kubelet[2727]: E1002 19:05:25.754738 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:30.673000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.675540 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:05:30.675672 kernel: audit: type=1400 audit(1696273530.673:1286): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.673000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.695088 kernel: audit: type=1400 audit(1696273530.673:1287): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.695256 kernel: audit: type=1300 audit(1696273530.673:1287): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028b7620 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:30.673000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028b7620 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:30.673000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.718598 kernel: audit: type=1327 audit(1696273530.673:1287): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.718761 kernel: audit: type=1400 audit(1696273530.673:1288): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.673000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.673000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028b7740 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:30.740786 kernel: audit: type=1300 audit(1696273530.673:1288): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028b7740 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:30.740954 kernel: audit: type=1327 audit(1696273530.673:1288): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.673000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.675000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.756308 kubelet[2727]: E1002 19:05:30.756270 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:30.760996 kernel: audit: type=1400 audit(1696273530.675:1289): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.761168 kernel: audit: type=1300 audit(1696273530.675:1289): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028b7960 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:30.675000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028b7960 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:30.675000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.784221 kernel: audit: type=1327 audit(1696273530.675:1289): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.673000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c8e160 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:05:30.673000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:32.862517 kubelet[2727]: E1002 19:05:32.862475 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:05:33.329083 systemd[1]: Started sshd@21-172.31.18.117:22-139.178.89.65:36398.service. Oct 2 19:05:33.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.18.117:22-139.178.89.65:36398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:33.519000 audit[3505]: USER_ACCT pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.519750 sshd[3505]: Accepted publickey for core from 139.178.89.65 port 36398 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:33.522000 audit[3505]: CRED_ACQ pid=3505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.522000 audit[3505]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd42a820 a2=3 a3=1 items=0 ppid=1 pid=3505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:33.522000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:33.524288 sshd[3505]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:33.534751 systemd[1]: Started session-22.scope. Oct 2 19:05:33.536555 systemd-logind[1553]: New session 22 of user core. Oct 2 19:05:33.546000 audit[3505]: USER_START pid=3505 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.553000 audit[3507]: CRED_ACQ pid=3507 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.833993 sshd[3505]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:33.836000 audit[3505]: USER_END pid=3505 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.836000 audit[3505]: CRED_DISP pid=3505 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.841356 systemd[1]: sshd@21-172.31.18.117:22-139.178.89.65:36398.service: Deactivated successfully. Oct 2 19:05:33.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.18.117:22-139.178.89.65:36398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:33.843119 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:05:33.844645 systemd-logind[1553]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:05:33.847811 systemd-logind[1553]: Removed session 22. Oct 2 19:05:35.758655 kubelet[2727]: E1002 19:05:35.758593 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:40.760382 kubelet[2727]: E1002 19:05:40.760334 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:43.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.18.117:22-139.178.89.65:59236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:43.865316 systemd[1]: Started sshd@22-172.31.18.117:22-139.178.89.65:59236.service. Oct 2 19:05:43.867872 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:05:43.867948 kernel: audit: type=1130 audit(1696273543.864:1299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.18.117:22-139.178.89.65:59236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:44.046000 audit[3518]: USER_ACCT pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.049137 sshd[3518]: Accepted publickey for core from 139.178.89.65 port 59236 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:44.059476 kernel: audit: type=1101 audit(1696273544.046:1300): pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.062357 sshd[3518]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:44.060000 audit[3518]: CRED_ACQ pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.079099 kernel: audit: type=1103 audit(1696273544.060:1301): pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.079249 kernel: audit: type=1006 audit(1696273544.060:1302): pid=3518 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:05:44.060000 audit[3518]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9739d10 a2=3 a3=1 items=0 ppid=1 pid=3518 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:44.090282 kernel: audit: type=1300 audit(1696273544.060:1302): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9739d10 a2=3 a3=1 items=0 ppid=1 pid=3518 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:44.094465 kernel: audit: type=1327 audit(1696273544.060:1302): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:44.060000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:44.097376 systemd-logind[1553]: New session 23 of user core. Oct 2 19:05:44.099053 systemd[1]: Started session-23.scope. Oct 2 19:05:44.108000 audit[3518]: USER_START pid=3518 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.122511 kernel: audit: type=1105 audit(1696273544.108:1303): pid=3518 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.121000 audit[3520]: CRED_ACQ pid=3520 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.133562 kernel: audit: type=1103 audit(1696273544.121:1304): pid=3520 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.390806 sshd[3518]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:44.393000 audit[3518]: USER_END pid=3518 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.393000 audit[3518]: CRED_DISP pid=3518 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.407446 systemd[1]: sshd@22-172.31.18.117:22-139.178.89.65:59236.service: Deactivated successfully. Oct 2 19:05:44.408815 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:05:44.411580 systemd-logind[1553]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:05:44.413943 systemd-logind[1553]: Removed session 23. Oct 2 19:05:44.416110 kernel: audit: type=1106 audit(1696273544.393:1305): pid=3518 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.416321 kernel: audit: type=1104 audit(1696273544.393:1306): pid=3518 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:44.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.18.117:22-139.178.89.65:59236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:45.762440 kubelet[2727]: E1002 19:05:45.762373 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:45.868046 env[1571]: time="2023-10-02T19:05:45.866083899Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:05:45.886746 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1904265803.mount: Deactivated successfully. Oct 2 19:05:45.902161 env[1571]: time="2023-10-02T19:05:45.902050881Z" level=info msg="CreateContainer within sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392\"" Oct 2 19:05:45.903233 env[1571]: time="2023-10-02T19:05:45.903178728Z" level=info msg="StartContainer for \"a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392\"" Oct 2 19:05:45.966377 systemd[1]: Started cri-containerd-a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392.scope. Oct 2 19:05:46.014565 systemd[1]: cri-containerd-a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392.scope: Deactivated successfully. Oct 2 19:05:46.050256 env[1571]: time="2023-10-02T19:05:46.050178647Z" level=info msg="shim disconnected" id=a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392 Oct 2 19:05:46.050926 env[1571]: time="2023-10-02T19:05:46.050883158Z" level=warning msg="cleaning up after shim disconnected" id=a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392 namespace=k8s.io Oct 2 19:05:46.051086 env[1571]: time="2023-10-02T19:05:46.051056697Z" level=info msg="cleaning up dead shim" Oct 2 19:05:46.082948 env[1571]: time="2023-10-02T19:05:46.082882797Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:05:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3553 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:05:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:05:46.083741 env[1571]: time="2023-10-02T19:05:46.083650571Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:05:46.086605 env[1571]: time="2023-10-02T19:05:46.086517467Z" level=error msg="Failed to pipe stdout of container \"a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392\"" error="reading from a closed fifo" Oct 2 19:05:46.086767 env[1571]: time="2023-10-02T19:05:46.086666731Z" level=error msg="Failed to pipe stderr of container \"a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392\"" error="reading from a closed fifo" Oct 2 19:05:46.089526 env[1571]: time="2023-10-02T19:05:46.089299551Z" level=error msg="StartContainer for \"a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:05:46.090794 kubelet[2727]: E1002 19:05:46.090111 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392" Oct 2 19:05:46.090794 kubelet[2727]: E1002 19:05:46.090299 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:05:46.090794 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:05:46.090794 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:05:46.091206 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-47rgl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:05:46.091321 kubelet[2727]: E1002 19:05:46.090385 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:05:46.429152 kubelet[2727]: I1002 19:05:46.429108 2727 scope.go:115] "RemoveContainer" containerID="855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365" Oct 2 19:05:46.430397 kubelet[2727]: I1002 19:05:46.430352 2727 scope.go:115] "RemoveContainer" containerID="855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365" Oct 2 19:05:46.437942 env[1571]: time="2023-10-02T19:05:46.437883067Z" level=info msg="RemoveContainer for \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\"" Oct 2 19:05:46.446495 env[1571]: time="2023-10-02T19:05:46.445483286Z" level=info msg="RemoveContainer for \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\"" Oct 2 19:05:46.446495 env[1571]: time="2023-10-02T19:05:46.445805105Z" level=error msg="RemoveContainer for \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\" failed" error="failed to set removing state for container \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\": container is already in removing state" Oct 2 19:05:46.449457 env[1571]: time="2023-10-02T19:05:46.449297099Z" level=info msg="RemoveContainer for \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\" returns successfully" Oct 2 19:05:46.449993 kubelet[2727]: E1002 19:05:46.449930 2727 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365\": container is already in removing state" containerID="855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365" Oct 2 19:05:46.450160 kubelet[2727]: E1002 19:05:46.450001 2727 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "855ea2c4867d6ef96e13f5f0b761153a33e2c7232f009d1a999826a66cdc7365": container is already in removing state; Skipping pod "cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)" Oct 2 19:05:46.450577 kubelet[2727]: E1002 19:05:46.450527 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:05:46.880199 systemd[1]: run-containerd-runc-k8s.io-a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392-runc.LEsTsm.mount: Deactivated successfully. Oct 2 19:05:46.880448 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392-rootfs.mount: Deactivated successfully. Oct 2 19:05:49.155810 kubelet[2727]: W1002 19:05:49.155756 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddde1ae88_ff19_4d4d_8d8c_26523c0da00a.slice/cri-containerd-a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392.scope WatchSource:0}: task a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392 not found: not found Oct 2 19:05:50.763829 kubelet[2727]: E1002 19:05:50.763753 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:54.422194 systemd[1]: Started sshd@23-172.31.18.117:22-139.178.89.65:60550.service. Oct 2 19:05:54.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.18.117:22-139.178.89.65:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:54.424614 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:05:54.424771 kernel: audit: type=1130 audit(1696273554.421:1308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.18.117:22-139.178.89.65:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:54.601000 audit[3567]: USER_ACCT pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.603617 sshd[3567]: Accepted publickey for core from 139.178.89.65 port 60550 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:54.614497 kernel: audit: type=1101 audit(1696273554.601:1309): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.614000 audit[3567]: CRED_ACQ pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.617076 sshd[3567]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:54.632341 kernel: audit: type=1103 audit(1696273554.614:1310): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.632459 kernel: audit: type=1006 audit(1696273554.614:1311): pid=3567 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:05:54.614000 audit[3567]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcb2d9f0 a2=3 a3=1 items=0 ppid=1 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:54.643605 kernel: audit: type=1300 audit(1696273554.614:1311): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcb2d9f0 a2=3 a3=1 items=0 ppid=1 pid=3567 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:54.614000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:54.647627 kernel: audit: type=1327 audit(1696273554.614:1311): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:54.650509 systemd-logind[1553]: New session 24 of user core. Oct 2 19:05:54.652704 systemd[1]: Started session-24.scope. Oct 2 19:05:54.661000 audit[3567]: USER_START pid=3567 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.677293 kernel: audit: type=1105 audit(1696273554.661:1312): pid=3567 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.677454 kernel: audit: type=1103 audit(1696273554.674:1313): pid=3569 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.674000 audit[3569]: CRED_ACQ pid=3569 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.931927 sshd[3567]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:54.932000 audit[3567]: USER_END pid=3567 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.932000 audit[3567]: CRED_DISP pid=3567 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.946465 kernel: audit: type=1106 audit(1696273554.932:1314): pid=3567 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.946505 systemd[1]: sshd@23-172.31.18.117:22-139.178.89.65:60550.service: Deactivated successfully. Oct 2 19:05:54.947788 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:05:54.957441 systemd-logind[1553]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:05:54.959766 systemd-logind[1553]: Removed session 24. Oct 2 19:05:54.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.18.117:22-139.178.89.65:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:54.961482 kernel: audit: type=1104 audit(1696273554.932:1315): pid=3567 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:55.765642 kubelet[2727]: E1002 19:05:55.765598 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:59.863003 kubelet[2727]: E1002 19:05:59.862682 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:06:00.766839 kubelet[2727]: E1002 19:06:00.766770 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:04.974842 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:06:04.975077 kernel: audit: type=1130 audit(1696273564.963:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.18.117:22-139.178.89.65:55496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.18.117:22-139.178.89.65:55496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.963701 systemd[1]: Started sshd@24-172.31.18.117:22-139.178.89.65:55496.service. Oct 2 19:06:05.148000 audit[3581]: USER_ACCT pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.149074 sshd[3581]: Accepted publickey for core from 139.178.89.65 port 55496 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:05.159449 kernel: audit: type=1101 audit(1696273565.148:1318): pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.162223 sshd[3581]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:05.161000 audit[3581]: CRED_ACQ pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.178984 kernel: audit: type=1103 audit(1696273565.161:1319): pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.179111 kernel: audit: type=1006 audit(1696273565.161:1320): pid=3581 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:06:05.161000 audit[3581]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc23b190 a2=3 a3=1 items=0 ppid=1 pid=3581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:05.190826 kernel: audit: type=1300 audit(1696273565.161:1320): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc23b190 a2=3 a3=1 items=0 ppid=1 pid=3581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:05.161000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:05.194757 kernel: audit: type=1327 audit(1696273565.161:1320): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:05.197761 systemd[1]: Started session-25.scope. Oct 2 19:06:05.199742 systemd-logind[1553]: New session 25 of user core. Oct 2 19:06:05.209000 audit[3581]: USER_START pid=3581 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.221615 kernel: audit: type=1105 audit(1696273565.209:1321): pid=3581 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.222000 audit[3583]: CRED_ACQ pid=3583 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.232458 kernel: audit: type=1103 audit(1696273565.222:1322): pid=3583 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.489959 sshd[3581]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:05.492000 audit[3581]: USER_END pid=3581 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.494000 audit[3581]: CRED_DISP pid=3581 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.505116 systemd[1]: sshd@24-172.31.18.117:22-139.178.89.65:55496.service: Deactivated successfully. Oct 2 19:06:05.506839 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:06:05.513440 kernel: audit: type=1106 audit(1696273565.492:1323): pid=3581 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.513590 kernel: audit: type=1104 audit(1696273565.494:1324): pid=3581 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.18.117:22-139.178.89.65:55496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:05.514792 systemd-logind[1553]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:06:05.516653 systemd-logind[1553]: Removed session 25. Oct 2 19:06:05.769026 kubelet[2727]: E1002 19:06:05.768873 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:10.770399 kubelet[2727]: E1002 19:06:10.770356 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:14.298000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:14.302487 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:06:14.302607 kernel: audit: type=1400 audit(1696273574.298:1326): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:14.298000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e17ee0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:06:14.324657 kernel: audit: type=1300 audit(1696273574.298:1326): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e17ee0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:06:14.324796 kernel: audit: type=1327 audit(1696273574.298:1326): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:14.298000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:14.310000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:14.345617 kernel: audit: type=1400 audit(1696273574.310:1327): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:14.345770 kernel: audit: type=1300 audit(1696273574.310:1327): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000ce1fb0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:06:14.310000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000ce1fb0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:06:14.310000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:14.369042 kernel: audit: type=1327 audit(1696273574.310:1327): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:14.863016 kubelet[2727]: E1002 19:06:14.862959 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:06:15.377000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.377000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.397931 kernel: audit: type=1400 audit(1696273575.377:1328): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.398127 kernel: audit: type=1400 audit(1696273575.377:1329): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.398191 kernel: audit: type=1300 audit(1696273575.377:1329): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40017ed7c0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:06:15.377000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40017ed7c0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:06:15.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.420983 kernel: audit: type=1327 audit(1696273575.377:1329): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.377000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4003e6de90 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:06:15.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.378000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.378000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003e6def0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:06:15.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.392000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521243 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.392000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400cccc0f0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:06:15.392000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.397000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.397000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400cccc3c0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:06:15.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.400000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.400000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002541c60 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:06:15.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.18.117:22-139.178.89.65:42052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.521531 systemd[1]: Started sshd@25-172.31.18.117:22-139.178.89.65:42052.service. Oct 2 19:06:15.704000 audit[3592]: USER_ACCT pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.706259 sshd[3592]: Accepted publickey for core from 139.178.89.65 port 42052 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:15.707000 audit[3592]: CRED_ACQ pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.708000 audit[3592]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda1a96d0 a2=3 a3=1 items=0 ppid=1 pid=3592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:15.708000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:15.711009 sshd[3592]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.722299 systemd[1]: Started session-26.scope. Oct 2 19:06:15.723609 systemd-logind[1553]: New session 26 of user core. Oct 2 19:06:15.733000 audit[3592]: USER_START pid=3592 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.740000 audit[3594]: CRED_ACQ pid=3594 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.772349 kubelet[2727]: E1002 19:06:15.772133 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:16.029964 sshd[3592]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:16.031000 audit[3592]: USER_END pid=3592 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:16.031000 audit[3592]: CRED_DISP pid=3592 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:16.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.18.117:22-139.178.89.65:42052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:16.038033 systemd-logind[1553]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:06:16.038697 systemd[1]: sshd@25-172.31.18.117:22-139.178.89.65:42052.service: Deactivated successfully. Oct 2 19:06:16.040308 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:06:16.045431 systemd-logind[1553]: Removed session 26. Oct 2 19:06:20.773909 kubelet[2727]: E1002 19:06:20.773873 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:25.776154 kubelet[2727]: E1002 19:06:25.776109 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:26.071879 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:06:26.072051 kernel: audit: type=1130 audit(1696273586.059:1343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.18.117:22-139.178.89.65:51342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:26.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.18.117:22-139.178.89.65:51342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:26.060781 systemd[1]: Started sshd@26-172.31.18.117:22-139.178.89.65:51342.service. Oct 2 19:06:26.246000 audit[3606]: USER_ACCT pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.257888 sshd[3606]: Accepted publickey for core from 139.178.89.65 port 51342 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:26.258445 kernel: audit: type=1101 audit(1696273586.246:1344): pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.261303 sshd[3606]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:26.259000 audit[3606]: CRED_ACQ pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.278016 kernel: audit: type=1103 audit(1696273586.259:1345): pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.278157 kernel: audit: type=1006 audit(1696273586.259:1346): pid=3606 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:06:26.299440 kernel: audit: type=1300 audit(1696273586.259:1346): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc82ea340 a2=3 a3=1 items=0 ppid=1 pid=3606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:26.259000 audit[3606]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc82ea340 a2=3 a3=1 items=0 ppid=1 pid=3606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:26.302284 systemd[1]: Started session-27.scope. Oct 2 19:06:26.303318 systemd-logind[1553]: New session 27 of user core. Oct 2 19:06:26.313387 kernel: audit: type=1327 audit(1696273586.259:1346): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:26.259000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:26.321000 audit[3606]: USER_START pid=3606 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.328000 audit[3611]: CRED_ACQ pid=3611 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.343867 kernel: audit: type=1105 audit(1696273586.321:1347): pid=3606 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.343979 kernel: audit: type=1103 audit(1696273586.328:1348): pid=3611 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.600682 sshd[3606]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:26.601000 audit[3606]: USER_END pid=3606 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.615152 systemd[1]: sshd@26-172.31.18.117:22-139.178.89.65:51342.service: Deactivated successfully. Oct 2 19:06:26.615446 kernel: audit: type=1106 audit(1696273586.601:1349): pid=3606 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.601000 audit[3606]: CRED_DISP pid=3606 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.616510 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:06:26.626609 systemd-logind[1553]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:06:26.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.18.117:22-139.178.89.65:51342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:26.628475 kernel: audit: type=1104 audit(1696273586.601:1350): pid=3606 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.629116 systemd-logind[1553]: Removed session 27. Oct 2 19:06:27.862189 kubelet[2727]: E1002 19:06:27.862134 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lpkrv_kube-system(dde1ae88-ff19-4d4d-8d8c-26523c0da00a)\"" pod="kube-system/cilium-lpkrv" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a Oct 2 19:06:28.195300 amazon-ssm-agent[1572]: 2023-10-02 19:06:28 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:06:28.296548 amazon-ssm-agent[1572]: 2023-10-02 19:06:28 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-045ae72582bbaf141 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-045ae72582bbaf141 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:06:28.296548 amazon-ssm-agent[1572]: status code: 400, request id: e87cd5c2-c864-4e36-b78b-a253cebb298e Oct 2 19:06:30.674000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:30.674000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:30.674000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001a7faa0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:06:30.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:30.674000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f7daa0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:06:30.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:30.676000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:30.676000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f7dac0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:06:30.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:30.677000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:30.677000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001a7fce0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:06:30.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:30.777791 kubelet[2727]: E1002 19:06:30.777737 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:35.779135 kubelet[2727]: E1002 19:06:35.779096 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:36.634128 systemd[1]: Started sshd@27-172.31.18.117:22-139.178.89.65:33692.service. Oct 2 19:06:36.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.18.117:22-139.178.89.65:33692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:36.641470 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:06:36.641617 kernel: audit: type=1130 audit(1696273596.633:1356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.18.117:22-139.178.89.65:33692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:36.815000 audit[3624]: USER_ACCT pid=3624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:36.817292 sshd[3624]: Accepted publickey for core from 139.178.89.65 port 33692 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:36.829461 kernel: audit: type=1101 audit(1696273596.815:1357): pid=3624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:36.828000 audit[3624]: CRED_ACQ pid=3624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:36.835209 sshd[3624]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:36.845384 kernel: audit: type=1103 audit(1696273596.828:1358): pid=3624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:36.845542 kernel: audit: type=1006 audit(1696273596.833:1359): pid=3624 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:06:36.845609 kernel: audit: type=1300 audit(1696273596.833:1359): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffaaa3740 a2=3 a3=1 items=0 ppid=1 pid=3624 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:36.833000 audit[3624]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffaaa3740 a2=3 a3=1 items=0 ppid=1 pid=3624 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:36.833000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:36.861304 kernel: audit: type=1327 audit(1696273596.833:1359): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:36.868994 systemd[1]: Started session-28.scope. Oct 2 19:06:36.869855 systemd-logind[1553]: New session 28 of user core. Oct 2 19:06:36.880000 audit[3624]: USER_START pid=3624 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:36.895792 kernel: audit: type=1105 audit(1696273596.880:1360): pid=3624 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:36.895938 kernel: audit: type=1103 audit(1696273596.893:1361): pid=3626 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:36.893000 audit[3626]: CRED_ACQ pid=3626 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:37.148215 sshd[3624]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:37.148000 audit[3624]: USER_END pid=3624 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:37.163063 systemd[1]: sshd@27-172.31.18.117:22-139.178.89.65:33692.service: Deactivated successfully. Oct 2 19:06:37.164391 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:06:37.154000 audit[3624]: CRED_DISP pid=3624 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:37.174495 kernel: audit: type=1106 audit(1696273597.148:1362): pid=3624 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:37.174671 kernel: audit: type=1104 audit(1696273597.154:1363): pid=3624 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:37.174948 systemd-logind[1553]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:06:37.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.18.117:22-139.178.89.65:33692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:37.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.18.117:22-139.178.89.65:33696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:37.186397 systemd[1]: Started sshd@28-172.31.18.117:22-139.178.89.65:33696.service. Oct 2 19:06:37.188255 systemd-logind[1553]: Removed session 28. Oct 2 19:06:37.375000 audit[3636]: USER_ACCT pid=3636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:37.377236 sshd[3636]: Accepted publickey for core from 139.178.89.65 port 33696 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:37.378000 audit[3636]: CRED_ACQ pid=3636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:37.379000 audit[3636]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd93b0320 a2=3 a3=1 items=0 ppid=1 pid=3636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:37.379000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:37.381084 sshd[3636]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:37.390308 systemd[1]: Started session-29.scope. Oct 2 19:06:37.391554 systemd-logind[1553]: New session 29 of user core. Oct 2 19:06:37.400000 audit[3636]: USER_START pid=3636 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:37.407000 audit[3638]: CRED_ACQ pid=3638 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:39.986403 env[1571]: time="2023-10-02T19:06:39.986327895Z" level=info msg="StopPodSandbox for \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\"" Oct 2 19:06:39.987052 env[1571]: time="2023-10-02T19:06:39.986472722Z" level=info msg="Container to stop \"a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:06:39.992626 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e-shm.mount: Deactivated successfully. Oct 2 19:06:40.016571 env[1571]: time="2023-10-02T19:06:40.016492364Z" level=info msg="StopContainer for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" with timeout 30 (s)" Oct 2 19:06:40.017351 env[1571]: time="2023-10-02T19:06:40.017135173Z" level=info msg="Stop container \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" with signal terminated" Oct 2 19:06:40.028190 systemd[1]: cri-containerd-da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e.scope: Deactivated successfully. Oct 2 19:06:40.027000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:06:40.030000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:06:40.069166 systemd[1]: cri-containerd-1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353.scope: Deactivated successfully. Oct 2 19:06:40.068000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:06:40.077000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:06:40.126474 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e-rootfs.mount: Deactivated successfully. Oct 2 19:06:40.149478 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353-rootfs.mount: Deactivated successfully. Oct 2 19:06:40.166678 env[1571]: time="2023-10-02T19:06:40.166612191Z" level=info msg="shim disconnected" id=da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e Oct 2 19:06:40.167529 env[1571]: time="2023-10-02T19:06:40.167473673Z" level=warning msg="cleaning up after shim disconnected" id=da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e namespace=k8s.io Oct 2 19:06:40.167529 env[1571]: time="2023-10-02T19:06:40.167518624Z" level=info msg="cleaning up dead shim" Oct 2 19:06:40.167894 env[1571]: time="2023-10-02T19:06:40.167189516Z" level=info msg="shim disconnected" id=1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353 Oct 2 19:06:40.167979 env[1571]: time="2023-10-02T19:06:40.167897940Z" level=warning msg="cleaning up after shim disconnected" id=1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353 namespace=k8s.io Oct 2 19:06:40.167979 env[1571]: time="2023-10-02T19:06:40.167920068Z" level=info msg="cleaning up dead shim" Oct 2 19:06:40.200470 env[1571]: time="2023-10-02T19:06:40.200372589Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3684 runtime=io.containerd.runc.v2\n" Oct 2 19:06:40.201034 env[1571]: time="2023-10-02T19:06:40.200985494Z" level=info msg="TearDown network for sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" successfully" Oct 2 19:06:40.201159 env[1571]: time="2023-10-02T19:06:40.201033013Z" level=info msg="StopPodSandbox for \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" returns successfully" Oct 2 19:06:40.215061 env[1571]: time="2023-10-02T19:06:40.214993952Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3685 runtime=io.containerd.runc.v2\n" Oct 2 19:06:40.218402 env[1571]: time="2023-10-02T19:06:40.218346437Z" level=info msg="StopContainer for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" returns successfully" Oct 2 19:06:40.219634 env[1571]: time="2023-10-02T19:06:40.219577503Z" level=info msg="StopPodSandbox for \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\"" Oct 2 19:06:40.219788 env[1571]: time="2023-10-02T19:06:40.219673214Z" level=info msg="Container to stop \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:06:40.225002 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668-shm.mount: Deactivated successfully. Oct 2 19:06:40.249000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:06:40.250029 systemd[1]: cri-containerd-34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668.scope: Deactivated successfully. Oct 2 19:06:40.253000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:06:40.322876 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668-rootfs.mount: Deactivated successfully. Oct 2 19:06:40.337767 env[1571]: time="2023-10-02T19:06:40.337691611Z" level=info msg="shim disconnected" id=34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668 Oct 2 19:06:40.338083 env[1571]: time="2023-10-02T19:06:40.337765315Z" level=warning msg="cleaning up after shim disconnected" id=34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668 namespace=k8s.io Oct 2 19:06:40.338083 env[1571]: time="2023-10-02T19:06:40.337789518Z" level=info msg="cleaning up dead shim" Oct 2 19:06:40.364709 env[1571]: time="2023-10-02T19:06:40.364586865Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3730 runtime=io.containerd.runc.v2\n" Oct 2 19:06:40.365268 env[1571]: time="2023-10-02T19:06:40.365219474Z" level=info msg="TearDown network for sandbox \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" successfully" Oct 2 19:06:40.365405 env[1571]: time="2023-10-02T19:06:40.365267581Z" level=info msg="StopPodSandbox for \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" returns successfully" Oct 2 19:06:40.379918 kubelet[2727]: I1002 19:06:40.379873 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-cgroup\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.379918 kubelet[2727]: I1002 19:06:40.379938 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-hostproc\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.380609 kubelet[2727]: I1002 19:06:40.379988 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-hubble-tls\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.380609 kubelet[2727]: I1002 19:06:40.380031 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-clustermesh-secrets\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.380609 kubelet[2727]: I1002 19:06:40.380073 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-run\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.380609 kubelet[2727]: I1002 19:06:40.380112 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-host-proc-sys-kernel\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.380609 kubelet[2727]: I1002 19:06:40.380149 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-xtables-lock\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.380609 kubelet[2727]: I1002 19:06:40.380200 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-config-path\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.381052 kubelet[2727]: I1002 19:06:40.380240 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cni-path\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.381052 kubelet[2727]: I1002 19:06:40.380283 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc26b065-d302-4593-8df8-1cefdb318387-cilium-config-path\") pod \"bc26b065-d302-4593-8df8-1cefdb318387\" (UID: \"bc26b065-d302-4593-8df8-1cefdb318387\") " Oct 2 19:06:40.381052 kubelet[2727]: I1002 19:06:40.380327 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-nqz8c\" (UniqueName: \"kubernetes.io/projected/bc26b065-d302-4593-8df8-1cefdb318387-kube-api-access-nqz8c\") pod \"bc26b065-d302-4593-8df8-1cefdb318387\" (UID: \"bc26b065-d302-4593-8df8-1cefdb318387\") " Oct 2 19:06:40.381052 kubelet[2727]: I1002 19:06:40.380368 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-lib-modules\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.381052 kubelet[2727]: I1002 19:06:40.380405 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-etc-cni-netd\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.381052 kubelet[2727]: I1002 19:06:40.380468 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-host-proc-sys-net\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.381434 kubelet[2727]: I1002 19:06:40.380514 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-47rgl\" (UniqueName: \"kubernetes.io/projected/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-kube-api-access-47rgl\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.381434 kubelet[2727]: I1002 19:06:40.380554 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-bpf-maps\") pod \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\" (UID: \"dde1ae88-ff19-4d4d-8d8c-26523c0da00a\") " Oct 2 19:06:40.381434 kubelet[2727]: I1002 19:06:40.380627 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.381434 kubelet[2727]: I1002 19:06:40.380688 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.381434 kubelet[2727]: I1002 19:06:40.380727 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-hostproc" (OuterVolumeSpecName: "hostproc") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.391735 kubelet[2727]: I1002 19:06:40.381758 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cni-path" (OuterVolumeSpecName: "cni-path") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.391735 kubelet[2727]: W1002 19:06:40.382623 2727 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/bc26b065-d302-4593-8df8-1cefdb318387/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:06:40.391735 kubelet[2727]: I1002 19:06:40.385895 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.391735 kubelet[2727]: I1002 19:06:40.385991 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.391735 kubelet[2727]: I1002 19:06:40.386059 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.392382 kubelet[2727]: W1002 19:06:40.386536 2727 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/dde1ae88-ff19-4d4d-8d8c-26523c0da00a/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:06:40.392382 kubelet[2727]: I1002 19:06:40.390235 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.392382 kubelet[2727]: I1002 19:06:40.390318 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.392382 kubelet[2727]: I1002 19:06:40.390360 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:40.394637 kubelet[2727]: I1002 19:06:40.394539 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bc26b065-d302-4593-8df8-1cefdb318387-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bc26b065-d302-4593-8df8-1cefdb318387" (UID: "bc26b065-d302-4593-8df8-1cefdb318387"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:06:40.396961 kubelet[2727]: I1002 19:06:40.396902 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:40.402986 kubelet[2727]: I1002 19:06:40.402933 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bc26b065-d302-4593-8df8-1cefdb318387-kube-api-access-nqz8c" (OuterVolumeSpecName: "kube-api-access-nqz8c") pod "bc26b065-d302-4593-8df8-1cefdb318387" (UID: "bc26b065-d302-4593-8df8-1cefdb318387"). InnerVolumeSpecName "kube-api-access-nqz8c". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:40.407821 kubelet[2727]: I1002 19:06:40.407741 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-kube-api-access-47rgl" (OuterVolumeSpecName: "kube-api-access-47rgl") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "kube-api-access-47rgl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:40.409475 kubelet[2727]: I1002 19:06:40.409351 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:06:40.413076 kubelet[2727]: I1002 19:06:40.413009 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "dde1ae88-ff19-4d4d-8d8c-26523c0da00a" (UID: "dde1ae88-ff19-4d4d-8d8c-26523c0da00a"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:06:40.481275 kubelet[2727]: I1002 19:06:40.481217 2727 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-etc-cni-netd\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481275 kubelet[2727]: I1002 19:06:40.481272 2727 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-host-proc-sys-net\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481550 kubelet[2727]: I1002 19:06:40.481300 2727 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-47rgl\" (UniqueName: \"kubernetes.io/projected/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-kube-api-access-47rgl\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481550 kubelet[2727]: I1002 19:06:40.481326 2727 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-bpf-maps\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481550 kubelet[2727]: I1002 19:06:40.481351 2727 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-cgroup\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481550 kubelet[2727]: I1002 19:06:40.481377 2727 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-hostproc\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481550 kubelet[2727]: I1002 19:06:40.481401 2727 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-hubble-tls\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481550 kubelet[2727]: I1002 19:06:40.481459 2727 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-clustermesh-secrets\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481550 kubelet[2727]: I1002 19:06:40.481487 2727 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-run\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.481550 kubelet[2727]: I1002 19:06:40.481511 2727 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-host-proc-sys-kernel\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.482008 kubelet[2727]: I1002 19:06:40.481534 2727 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-xtables-lock\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.482008 kubelet[2727]: I1002 19:06:40.481558 2727 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cilium-config-path\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.482008 kubelet[2727]: I1002 19:06:40.481580 2727 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-cni-path\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.482008 kubelet[2727]: I1002 19:06:40.481603 2727 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc26b065-d302-4593-8df8-1cefdb318387-cilium-config-path\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.482008 kubelet[2727]: I1002 19:06:40.481629 2727 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-nqz8c\" (UniqueName: \"kubernetes.io/projected/bc26b065-d302-4593-8df8-1cefdb318387-kube-api-access-nqz8c\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.482008 kubelet[2727]: I1002 19:06:40.481653 2727 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dde1ae88-ff19-4d4d-8d8c-26523c0da00a-lib-modules\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:06:40.570606 kubelet[2727]: I1002 19:06:40.570483 2727 scope.go:115] "RemoveContainer" containerID="1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353" Oct 2 19:06:40.581802 systemd[1]: Removed slice kubepods-besteffort-podbc26b065_d302_4593_8df8_1cefdb318387.slice. Oct 2 19:06:40.586968 env[1571]: time="2023-10-02T19:06:40.586866119Z" level=info msg="RemoveContainer for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\"" Oct 2 19:06:40.595017 env[1571]: time="2023-10-02T19:06:40.594947737Z" level=info msg="RemoveContainer for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" returns successfully" Oct 2 19:06:40.600404 kubelet[2727]: I1002 19:06:40.600356 2727 scope.go:115] "RemoveContainer" containerID="1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353" Oct 2 19:06:40.601230 env[1571]: time="2023-10-02T19:06:40.601074039Z" level=error msg="ContainerStatus for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\": not found" Oct 2 19:06:40.602574 kubelet[2727]: E1002 19:06:40.602539 2727 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\": not found" containerID="1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353" Oct 2 19:06:40.602951 kubelet[2727]: I1002 19:06:40.602923 2727 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353} err="failed to get container status \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\": rpc error: code = NotFound desc = an error occurred when try to find container \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\": not found" Oct 2 19:06:40.605429 kubelet[2727]: I1002 19:06:40.605239 2727 scope.go:115] "RemoveContainer" containerID="a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392" Oct 2 19:06:40.609775 systemd[1]: Removed slice kubepods-burstable-poddde1ae88_ff19_4d4d_8d8c_26523c0da00a.slice. Oct 2 19:06:40.618228 env[1571]: time="2023-10-02T19:06:40.617748782Z" level=info msg="RemoveContainer for \"a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392\"" Oct 2 19:06:40.623449 env[1571]: time="2023-10-02T19:06:40.623039749Z" level=info msg="RemoveContainer for \"a658ad43112b778ef9822b2e37392a1aba024bb918e0ee9d9e36542c30a11392\" returns successfully" Oct 2 19:06:40.782029 kubelet[2727]: E1002 19:06:40.781996 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:40.865516 env[1571]: time="2023-10-02T19:06:40.864679111Z" level=info msg="StopPodSandbox for \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\"" Oct 2 19:06:40.865516 env[1571]: time="2023-10-02T19:06:40.865171381Z" level=info msg="StopContainer for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" with timeout 1 (s)" Oct 2 19:06:40.865516 env[1571]: time="2023-10-02T19:06:40.865184509Z" level=info msg="TearDown network for sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" successfully" Oct 2 19:06:40.865516 env[1571]: time="2023-10-02T19:06:40.865245972Z" level=info msg="StopPodSandbox for \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" returns successfully" Oct 2 19:06:40.865516 env[1571]: time="2023-10-02T19:06:40.865219753Z" level=error msg="StopContainer for \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\": not found" Oct 2 19:06:40.866272 kubelet[2727]: E1002 19:06:40.866240 2727 remote_runtime.go:349] "StopContainer from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353\": not found" containerID="1d72c448624d5514e26320e961b1daaaadcfe2cb66908f1666a10e3bed6ed353" Oct 2 19:06:40.868962 env[1571]: time="2023-10-02T19:06:40.868359876Z" level=info msg="StopPodSandbox for \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\"" Oct 2 19:06:40.868962 env[1571]: time="2023-10-02T19:06:40.868645725Z" level=info msg="TearDown network for sandbox \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" successfully" Oct 2 19:06:40.868962 env[1571]: time="2023-10-02T19:06:40.868776056Z" level=info msg="StopPodSandbox for \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" returns successfully" Oct 2 19:06:40.871377 kubelet[2727]: I1002 19:06:40.871340 2727 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=bc26b065-d302-4593-8df8-1cefdb318387 path="/var/lib/kubelet/pods/bc26b065-d302-4593-8df8-1cefdb318387/volumes" Oct 2 19:06:40.872646 kubelet[2727]: I1002 19:06:40.872621 2727 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=dde1ae88-ff19-4d4d-8d8c-26523c0da00a path="/var/lib/kubelet/pods/dde1ae88-ff19-4d4d-8d8c-26523c0da00a/volumes" Oct 2 19:06:40.989754 systemd[1]: var-lib-kubelet-pods-bc26b065\x2dd302\x2d4593\x2d8df8\x2d1cefdb318387-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dnqz8c.mount: Deactivated successfully. Oct 2 19:06:40.989942 systemd[1]: var-lib-kubelet-pods-dde1ae88\x2dff19\x2d4d4d\x2d8d8c\x2d26523c0da00a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d47rgl.mount: Deactivated successfully. Oct 2 19:06:40.990097 systemd[1]: var-lib-kubelet-pods-dde1ae88\x2dff19\x2d4d4d\x2d8d8c\x2d26523c0da00a-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:06:40.990261 systemd[1]: var-lib-kubelet-pods-dde1ae88\x2dff19\x2d4d4d\x2d8d8c\x2d26523c0da00a-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:06:41.935780 sshd[3636]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:41.936000 audit[3636]: USER_END pid=3636 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:41.940205 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:06:41.940360 kernel: audit: type=1106 audit(1696273601.936:1377): pid=3636 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:41.936000 audit[3636]: CRED_DISP pid=3636 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:41.952091 systemd[1]: sshd@28-172.31.18.117:22-139.178.89.65:33696.service: Deactivated successfully. Oct 2 19:06:41.953304 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:06:41.953637 systemd[1]: session-29.scope: Consumed 1.824s CPU time. Oct 2 19:06:41.956621 systemd-logind[1553]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:06:41.958872 systemd-logind[1553]: Removed session 29. Oct 2 19:06:41.960921 kernel: audit: type=1104 audit(1696273601.936:1378): pid=3636 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:41.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.18.117:22-139.178.89.65:33696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:41.970753 kernel: audit: type=1131 audit(1696273601.951:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.18.117:22-139.178.89.65:33696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:41.972711 systemd[1]: Started sshd@29-172.31.18.117:22-139.178.89.65:33700.service. Oct 2 19:06:41.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.18.117:22-139.178.89.65:33700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:41.985453 kernel: audit: type=1130 audit(1696273601.971:1380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.18.117:22-139.178.89.65:33700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:42.160000 audit[3750]: USER_ACCT pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:42.164689 sshd[3750]: Accepted publickey for core from 139.178.89.65 port 33700 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:42.173510 kernel: audit: type=1101 audit(1696273602.160:1381): pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:42.173000 audit[3750]: CRED_ACQ pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:42.176075 sshd[3750]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:42.185455 kernel: audit: type=1103 audit(1696273602.173:1382): pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:42.185588 kernel: audit: type=1006 audit(1696273602.173:1383): pid=3750 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:06:42.173000 audit[3750]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3a6c7a0 a2=3 a3=1 items=0 ppid=1 pid=3750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:42.204820 kernel: audit: type=1300 audit(1696273602.173:1383): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3a6c7a0 a2=3 a3=1 items=0 ppid=1 pid=3750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:42.173000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:42.208953 kernel: audit: type=1327 audit(1696273602.173:1383): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:42.210714 systemd-logind[1553]: New session 30 of user core. Oct 2 19:06:42.212254 systemd[1]: Started session-30.scope. Oct 2 19:06:42.221000 audit[3750]: USER_START pid=3750 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:42.234586 kernel: audit: type=1105 audit(1696273602.221:1384): pid=3750 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:42.233000 audit[3752]: CRED_ACQ pid=3752 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:44.281810 kubelet[2727]: I1002 19:06:44.281762 2727 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:06:44.282532 kubelet[2727]: E1002 19:06:44.282506 2727 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.282661 kubelet[2727]: E1002 19:06:44.282639 2727 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.282829 kubelet[2727]: E1002 19:06:44.282805 2727 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.282946 kubelet[2727]: E1002 19:06:44.282926 2727 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.283073 kubelet[2727]: E1002 19:06:44.283053 2727 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bc26b065-d302-4593-8df8-1cefdb318387" containerName="cilium-operator" Oct 2 19:06:44.283205 kubelet[2727]: E1002 19:06:44.283185 2727 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.283348 kubelet[2727]: I1002 19:06:44.283327 2727 memory_manager.go:346] "RemoveStaleState removing state" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.283476 kubelet[2727]: I1002 19:06:44.283456 2727 memory_manager.go:346] "RemoveStaleState removing state" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.283585 kubelet[2727]: I1002 19:06:44.283565 2727 memory_manager.go:346] "RemoveStaleState removing state" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.283695 kubelet[2727]: I1002 19:06:44.283675 2727 memory_manager.go:346] "RemoveStaleState removing state" podUID="bc26b065-d302-4593-8df8-1cefdb318387" containerName="cilium-operator" Oct 2 19:06:44.283820 kubelet[2727]: I1002 19:06:44.283800 2727 memory_manager.go:346] "RemoveStaleState removing state" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.283934 kubelet[2727]: I1002 19:06:44.283914 2727 memory_manager.go:346] "RemoveStaleState removing state" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.284159 kubelet[2727]: E1002 19:06:44.284137 2727 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.284295 kubelet[2727]: I1002 19:06:44.284274 2727 memory_manager.go:346] "RemoveStaleState removing state" podUID="dde1ae88-ff19-4d4d-8d8c-26523c0da00a" containerName="mount-cgroup" Oct 2 19:06:44.295276 systemd[1]: Created slice kubepods-burstable-pod85a73d52_71cb_4d9c_9206_c7d1ba6ac1a1.slice. Oct 2 19:06:44.300122 kubelet[2727]: I1002 19:06:44.300086 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-run\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.300396 kubelet[2727]: I1002 19:06:44.300374 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-hostproc\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.300618 kubelet[2727]: I1002 19:06:44.300596 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-bpf-maps\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.300775 kubelet[2727]: I1002 19:06:44.300753 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-clustermesh-secrets\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.300915 kubelet[2727]: I1002 19:06:44.300894 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-hubble-tls\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.301066 kubelet[2727]: I1002 19:06:44.301045 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-host-proc-sys-kernel\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.301214 kubelet[2727]: I1002 19:06:44.301193 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t2lsb\" (UniqueName: \"kubernetes.io/projected/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-kube-api-access-t2lsb\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.301360 kubelet[2727]: I1002 19:06:44.301339 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-lib-modules\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.301528 kubelet[2727]: I1002 19:06:44.301507 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-xtables-lock\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.301666 kubelet[2727]: I1002 19:06:44.301645 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-config-path\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.301818 kubelet[2727]: I1002 19:06:44.301797 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-host-proc-sys-net\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.301971 kubelet[2727]: I1002 19:06:44.301950 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-etc-cni-netd\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.302118 kubelet[2727]: I1002 19:06:44.302097 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-cgroup\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.302269 kubelet[2727]: I1002 19:06:44.302248 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cni-path\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.302439 kubelet[2727]: I1002 19:06:44.302391 2727 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-ipsec-secrets\") pod \"cilium-xcs66\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " pod="kube-system/cilium-xcs66" Oct 2 19:06:44.607477 env[1571]: time="2023-10-02T19:06:44.606591841Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-xcs66,Uid:85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1,Namespace:kube-system,Attempt:0,}" Oct 2 19:06:44.647734 env[1571]: time="2023-10-02T19:06:44.647582428Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:06:44.647734 env[1571]: time="2023-10-02T19:06:44.647664651Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:06:44.648104 env[1571]: time="2023-10-02T19:06:44.648014844Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:06:44.648671 env[1571]: time="2023-10-02T19:06:44.648529926Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9 pid=3770 runtime=io.containerd.runc.v2 Oct 2 19:06:44.685456 systemd[1]: Started cri-containerd-e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9.scope. Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.727000 audit: BPF prog-id=134 op=LOAD Oct 2 19:06:44.728000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.728000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3770 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:44.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534656330613231393764376531373763323438333165386134663233 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3770 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:44.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534656330613231393764376531373763323438333165386134663233 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.729000 audit: BPF prog-id=135 op=LOAD Oct 2 19:06:44.729000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3770 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:44.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534656330613231393764376531373763323438333165386134663233 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.730000 audit: BPF prog-id=136 op=LOAD Oct 2 19:06:44.730000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3770 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:44.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534656330613231393764376531373763323438333165386134663233 Oct 2 19:06:44.731000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:06:44.732000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { perfmon } for pid=3780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit[3780]: AVC avc: denied { bpf } for pid=3780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:44.732000 audit: BPF prog-id=137 op=LOAD Oct 2 19:06:44.732000 audit[3780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3770 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:44.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534656330613231393764376531373763323438333165386134663233 Oct 2 19:06:44.767765 env[1571]: time="2023-10-02T19:06:44.767695809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-xcs66,Uid:85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1,Namespace:kube-system,Attempt:0,} returns sandbox id \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\"" Oct 2 19:06:44.775344 env[1571]: time="2023-10-02T19:06:44.775290096Z" level=info msg="CreateContainer within sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:06:44.797767 env[1571]: time="2023-10-02T19:06:44.797680871Z" level=info msg="CreateContainer within sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\"" Oct 2 19:06:44.800383 env[1571]: time="2023-10-02T19:06:44.800317447Z" level=info msg="StartContainer for \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\"" Oct 2 19:06:44.844031 systemd[1]: Started cri-containerd-e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c.scope. Oct 2 19:06:44.883886 systemd[1]: cri-containerd-e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c.scope: Deactivated successfully. Oct 2 19:06:44.940000 env[1571]: time="2023-10-02T19:06:44.939923178Z" level=info msg="shim disconnected" id=e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c Oct 2 19:06:44.940292 env[1571]: time="2023-10-02T19:06:44.940004333Z" level=warning msg="cleaning up after shim disconnected" id=e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c namespace=k8s.io Oct 2 19:06:44.940292 env[1571]: time="2023-10-02T19:06:44.940027265Z" level=info msg="cleaning up dead shim" Oct 2 19:06:44.967120 env[1571]: time="2023-10-02T19:06:44.967024419Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3832 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:06:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:06:44.967613 env[1571]: time="2023-10-02T19:06:44.967523853Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:06:44.968617 env[1571]: time="2023-10-02T19:06:44.968552950Z" level=error msg="Failed to pipe stderr of container \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\"" error="reading from a closed fifo" Oct 2 19:06:44.971657 env[1571]: time="2023-10-02T19:06:44.971555570Z" level=error msg="Failed to pipe stdout of container \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\"" error="reading from a closed fifo" Oct 2 19:06:44.974216 env[1571]: time="2023-10-02T19:06:44.974130826Z" level=error msg="StartContainer for \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:06:44.974549 kubelet[2727]: E1002 19:06:44.974471 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c" Oct 2 19:06:44.974763 kubelet[2727]: E1002 19:06:44.974622 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:06:44.974763 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:06:44.974763 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:06:44.974763 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-t2lsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:06:44.979272 kubelet[2727]: E1002 19:06:44.974682 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:06:45.615056 env[1571]: time="2023-10-02T19:06:45.614967879Z" level=info msg="CreateContainer within sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:06:45.635641 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3433311193.mount: Deactivated successfully. Oct 2 19:06:45.654325 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount389208354.mount: Deactivated successfully. Oct 2 19:06:45.675491 env[1571]: time="2023-10-02T19:06:45.675370178Z" level=info msg="CreateContainer within sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\"" Oct 2 19:06:45.677469 env[1571]: time="2023-10-02T19:06:45.676776575Z" level=info msg="StartContainer for \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\"" Oct 2 19:06:45.724461 systemd[1]: Started cri-containerd-55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e.scope. Oct 2 19:06:45.769384 systemd[1]: cri-containerd-55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e.scope: Deactivated successfully. Oct 2 19:06:45.784243 kubelet[2727]: E1002 19:06:45.784189 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:45.794608 env[1571]: time="2023-10-02T19:06:45.794493124Z" level=info msg="shim disconnected" id=55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e Oct 2 19:06:45.794608 env[1571]: time="2023-10-02T19:06:45.794603583Z" level=warning msg="cleaning up after shim disconnected" id=55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e namespace=k8s.io Oct 2 19:06:45.794965 env[1571]: time="2023-10-02T19:06:45.794629215Z" level=info msg="cleaning up dead shim" Oct 2 19:06:45.821654 env[1571]: time="2023-10-02T19:06:45.821564754Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3871 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:06:45Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:06:45.822193 env[1571]: time="2023-10-02T19:06:45.822013922Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:06:45.822672 env[1571]: time="2023-10-02T19:06:45.822613423Z" level=error msg="Failed to pipe stdout of container \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\"" error="reading from a closed fifo" Oct 2 19:06:45.823622 env[1571]: time="2023-10-02T19:06:45.823548345Z" level=error msg="Failed to pipe stderr of container \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\"" error="reading from a closed fifo" Oct 2 19:06:45.830100 env[1571]: time="2023-10-02T19:06:45.830009233Z" level=error msg="StartContainer for \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:06:45.830707 kubelet[2727]: E1002 19:06:45.830439 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e" Oct 2 19:06:45.830707 kubelet[2727]: E1002 19:06:45.830601 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:06:45.830707 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:06:45.830707 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:06:45.831202 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-t2lsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:06:45.831327 kubelet[2727]: E1002 19:06:45.830662 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:06:46.611780 kubelet[2727]: I1002 19:06:46.611746 2727 scope.go:115] "RemoveContainer" containerID="e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c" Oct 2 19:06:46.612722 kubelet[2727]: I1002 19:06:46.612676 2727 scope.go:115] "RemoveContainer" containerID="e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c" Oct 2 19:06:46.615613 env[1571]: time="2023-10-02T19:06:46.615542547Z" level=info msg="RemoveContainer for \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\"" Oct 2 19:06:46.620489 env[1571]: time="2023-10-02T19:06:46.620388265Z" level=info msg="RemoveContainer for \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\" returns successfully" Oct 2 19:06:46.621052 env[1571]: time="2023-10-02T19:06:46.620959231Z" level=error msg="ContainerStatus for \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\": not found" Oct 2 19:06:46.621271 kubelet[2727]: E1002 19:06:46.621232 2727 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c\": not found" containerID="e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c" Oct 2 19:06:46.621398 kubelet[2727]: E1002 19:06:46.621299 2727 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": failed to get container status "e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c": rpc error: code = NotFound desc = an error occurred when try to find container "e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c": not found; Skipping pod "cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)" Oct 2 19:06:46.621817 kubelet[2727]: E1002 19:06:46.621779 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:06:47.617710 kubelet[2727]: E1002 19:06:47.617657 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:06:48.074001 kubelet[2727]: W1002 19:06:48.073916 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod85a73d52_71cb_4d9c_9206_c7d1ba6ac1a1.slice/cri-containerd-e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c.scope WatchSource:0}: container "e4625c852a27a381006167038d36497f8b89dc60d2a9df7093c5ffbafb45126c" in namespace "k8s.io": not found Oct 2 19:06:50.785458 kubelet[2727]: E1002 19:06:50.785353 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:51.184440 kubelet[2727]: W1002 19:06:51.184355 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod85a73d52_71cb_4d9c_9206_c7d1ba6ac1a1.slice/cri-containerd-55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e.scope WatchSource:0}: task 55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e not found: not found Oct 2 19:06:55.787940 kubelet[2727]: E1002 19:06:55.787896 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:59.865841 env[1571]: time="2023-10-02T19:06:59.865734461Z" level=info msg="CreateContainer within sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:06:59.886849 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1444345519.mount: Deactivated successfully. Oct 2 19:06:59.893469 env[1571]: time="2023-10-02T19:06:59.893345347Z" level=info msg="CreateContainer within sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\"" Oct 2 19:06:59.894311 env[1571]: time="2023-10-02T19:06:59.894244944Z" level=info msg="StartContainer for \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\"" Oct 2 19:06:59.950752 systemd[1]: Started cri-containerd-ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3.scope. Oct 2 19:06:59.991665 systemd[1]: cri-containerd-ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3.scope: Deactivated successfully. Oct 2 19:07:00.013365 env[1571]: time="2023-10-02T19:07:00.013292949Z" level=info msg="shim disconnected" id=ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3 Oct 2 19:07:00.013698 env[1571]: time="2023-10-02T19:07:00.013368596Z" level=warning msg="cleaning up after shim disconnected" id=ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3 namespace=k8s.io Oct 2 19:07:00.013698 env[1571]: time="2023-10-02T19:07:00.013391300Z" level=info msg="cleaning up dead shim" Oct 2 19:07:00.042655 env[1571]: time="2023-10-02T19:07:00.042569906Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3909 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:07:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:07:00.043197 env[1571]: time="2023-10-02T19:07:00.043101490Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:07:00.043636 env[1571]: time="2023-10-02T19:07:00.043580442Z" level=error msg="Failed to pipe stdout of container \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\"" error="reading from a closed fifo" Oct 2 19:07:00.043854 env[1571]: time="2023-10-02T19:07:00.043620822Z" level=error msg="Failed to pipe stderr of container \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\"" error="reading from a closed fifo" Oct 2 19:07:00.045961 env[1571]: time="2023-10-02T19:07:00.045888912Z" level=error msg="StartContainer for \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:07:00.046249 kubelet[2727]: E1002 19:07:00.046202 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3" Oct 2 19:07:00.046888 kubelet[2727]: E1002 19:07:00.046358 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:07:00.046888 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:07:00.046888 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:07:00.046888 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-t2lsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:07:00.047190 kubelet[2727]: E1002 19:07:00.046523 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:07:00.648859 kubelet[2727]: I1002 19:07:00.648825 2727 scope.go:115] "RemoveContainer" containerID="55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e" Oct 2 19:07:00.649578 kubelet[2727]: I1002 19:07:00.649551 2727 scope.go:115] "RemoveContainer" containerID="55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e" Oct 2 19:07:00.654918 env[1571]: time="2023-10-02T19:07:00.654866460Z" level=info msg="RemoveContainer for \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\"" Oct 2 19:07:00.657029 env[1571]: time="2023-10-02T19:07:00.656945887Z" level=info msg="RemoveContainer for \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\"" Oct 2 19:07:00.657728 env[1571]: time="2023-10-02T19:07:00.657610454Z" level=error msg="RemoveContainer for \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\" failed" error="failed to set removing state for container \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\": container is already in removing state" Oct 2 19:07:00.658742 kubelet[2727]: E1002 19:07:00.658708 2727 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\": container is already in removing state" containerID="55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e" Oct 2 19:07:00.658987 kubelet[2727]: E1002 19:07:00.658962 2727 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e": container is already in removing state; Skipping pod "cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)" Oct 2 19:07:00.659769 kubelet[2727]: E1002 19:07:00.659731 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:07:00.668489 env[1571]: time="2023-10-02T19:07:00.668396663Z" level=info msg="RemoveContainer for \"55fea8ab4604c424948e39442f9eeae8bc2901144dcf7d3babecab45ca6eb03e\" returns successfully" Oct 2 19:07:00.790541 kubelet[2727]: E1002 19:07:00.790493 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:00.879745 systemd[1]: run-containerd-runc-k8s.io-ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3-runc.A8ycMI.mount: Deactivated successfully. Oct 2 19:07:00.879937 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3-rootfs.mount: Deactivated successfully. Oct 2 19:07:03.119902 kubelet[2727]: W1002 19:07:03.119852 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod85a73d52_71cb_4d9c_9206_c7d1ba6ac1a1.slice/cri-containerd-ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3.scope WatchSource:0}: task ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3 not found: not found Oct 2 19:07:05.791951 kubelet[2727]: E1002 19:07:05.791891 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:10.794111 kubelet[2727]: E1002 19:07:10.794019 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:11.863464 kubelet[2727]: E1002 19:07:11.863427 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:07:14.301000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:14.303957 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:07:14.304090 kernel: audit: type=1400 audit(1696273634.301:1404): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:14.301000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c3db40 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:14.325670 kernel: audit: type=1300 audit(1696273634.301:1404): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c3db40 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:14.325790 kernel: audit: type=1327 audit(1696273634.301:1404): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:14.301000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:14.316000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:14.345716 kernel: audit: type=1400 audit(1696273634.316:1405): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:14.345796 kernel: audit: type=1300 audit(1696273634.316:1405): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400128fa40 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:14.316000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400128fa40 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:14.316000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:14.368281 kernel: audit: type=1327 audit(1696273634.316:1405): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:15.378000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.378000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40018fc180 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:07:15.400792 kernel: audit: type=1400 audit(1696273635.378:1406): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.400956 kernel: audit: type=1300 audit(1696273635.378:1406): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40018fc180 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:07:15.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.411319 kernel: audit: type=1327 audit(1696273635.378:1406): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.380000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.421334 kernel: audit: type=1400 audit(1696273635.380:1407): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.380000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400a0ad560 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:07:15.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.380000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.380000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400a0ad5c0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:07:15.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.395000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521243 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.395000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400a0ad740 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:07:15.395000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.399000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.399000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400a0ad830 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:07:15.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.402000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.402000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40017b3320 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:07:15.402000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.795667 kubelet[2727]: E1002 19:07:15.795634 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:20.392011 env[1571]: time="2023-10-02T19:07:20.391700473Z" level=info msg="StopPodSandbox for \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\"" Oct 2 19:07:20.392011 env[1571]: time="2023-10-02T19:07:20.391842552Z" level=info msg="TearDown network for sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" successfully" Oct 2 19:07:20.392011 env[1571]: time="2023-10-02T19:07:20.391897236Z" level=info msg="StopPodSandbox for \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" returns successfully" Oct 2 19:07:20.395235 env[1571]: time="2023-10-02T19:07:20.393458067Z" level=info msg="RemovePodSandbox for \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\"" Oct 2 19:07:20.395235 env[1571]: time="2023-10-02T19:07:20.393513663Z" level=info msg="Forcibly stopping sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\"" Oct 2 19:07:20.395235 env[1571]: time="2023-10-02T19:07:20.393642890Z" level=info msg="TearDown network for sandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" successfully" Oct 2 19:07:20.397880 env[1571]: time="2023-10-02T19:07:20.397828851Z" level=info msg="RemovePodSandbox \"da1fe63bacc6bf702fae79e95dfc9addd421cc0cc003b2ce2ecfd512bbc07e9e\" returns successfully" Oct 2 19:07:20.398799 env[1571]: time="2023-10-02T19:07:20.398721683Z" level=info msg="StopPodSandbox for \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\"" Oct 2 19:07:20.399001 env[1571]: time="2023-10-02T19:07:20.398932509Z" level=info msg="TearDown network for sandbox \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" successfully" Oct 2 19:07:20.399095 env[1571]: time="2023-10-02T19:07:20.399021861Z" level=info msg="StopPodSandbox for \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" returns successfully" Oct 2 19:07:20.399615 env[1571]: time="2023-10-02T19:07:20.399576726Z" level=info msg="RemovePodSandbox for \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\"" Oct 2 19:07:20.399848 env[1571]: time="2023-10-02T19:07:20.399756005Z" level=info msg="Forcibly stopping sandbox \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\"" Oct 2 19:07:20.400017 env[1571]: time="2023-10-02T19:07:20.399935368Z" level=info msg="TearDown network for sandbox \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" successfully" Oct 2 19:07:20.405589 env[1571]: time="2023-10-02T19:07:20.405520294Z" level=info msg="RemovePodSandbox \"34df4c3edf1e560f68dc89f4c45a1a3add562c11486d9d92fc673eeb64140668\" returns successfully" Oct 2 19:07:20.650100 kubelet[2727]: W1002 19:07:20.649305 2727 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:07:20.798089 kubelet[2727]: E1002 19:07:20.798037 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:24.866858 env[1571]: time="2023-10-02T19:07:24.866379614Z" level=info msg="CreateContainer within sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:07:24.893743 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2363232590.mount: Deactivated successfully. Oct 2 19:07:24.901072 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2947467649.mount: Deactivated successfully. Oct 2 19:07:24.913092 env[1571]: time="2023-10-02T19:07:24.913008788Z" level=info msg="CreateContainer within sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521\"" Oct 2 19:07:24.915500 env[1571]: time="2023-10-02T19:07:24.913987443Z" level=info msg="StartContainer for \"4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521\"" Oct 2 19:07:24.963283 systemd[1]: Started cri-containerd-4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521.scope. Oct 2 19:07:25.006359 systemd[1]: cri-containerd-4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521.scope: Deactivated successfully. Oct 2 19:07:25.038982 env[1571]: time="2023-10-02T19:07:25.038889252Z" level=info msg="shim disconnected" id=4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521 Oct 2 19:07:25.038982 env[1571]: time="2023-10-02T19:07:25.038963723Z" level=warning msg="cleaning up after shim disconnected" id=4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521 namespace=k8s.io Oct 2 19:07:25.039344 env[1571]: time="2023-10-02T19:07:25.038987711Z" level=info msg="cleaning up dead shim" Oct 2 19:07:25.069536 env[1571]: time="2023-10-02T19:07:25.069420834Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3952 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:07:25Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:07:25.070010 env[1571]: time="2023-10-02T19:07:25.069915387Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:07:25.070402 env[1571]: time="2023-10-02T19:07:25.070344205Z" level=error msg="Failed to pipe stdout of container \"4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521\"" error="reading from a closed fifo" Oct 2 19:07:25.071632 env[1571]: time="2023-10-02T19:07:25.071580631Z" level=error msg="Failed to pipe stderr of container \"4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521\"" error="reading from a closed fifo" Oct 2 19:07:25.074058 env[1571]: time="2023-10-02T19:07:25.073976155Z" level=error msg="StartContainer for \"4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:07:25.075044 kubelet[2727]: E1002 19:07:25.074368 2727 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521" Oct 2 19:07:25.075044 kubelet[2727]: E1002 19:07:25.074533 2727 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:07:25.075044 kubelet[2727]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:07:25.075044 kubelet[2727]: rm /hostbin/cilium-mount Oct 2 19:07:25.075908 kubelet[2727]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-t2lsb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:07:25.076031 kubelet[2727]: E1002 19:07:25.074592 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:07:25.719821 kubelet[2727]: I1002 19:07:25.719765 2727 scope.go:115] "RemoveContainer" containerID="ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3" Oct 2 19:07:25.720437 kubelet[2727]: I1002 19:07:25.720388 2727 scope.go:115] "RemoveContainer" containerID="ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3" Oct 2 19:07:25.723901 env[1571]: time="2023-10-02T19:07:25.723834002Z" level=info msg="RemoveContainer for \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\"" Oct 2 19:07:25.725307 env[1571]: time="2023-10-02T19:07:25.725243527Z" level=info msg="RemoveContainer for \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\"" Oct 2 19:07:25.725627 env[1571]: time="2023-10-02T19:07:25.725553473Z" level=error msg="RemoveContainer for \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\" failed" error="failed to set removing state for container \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\": container is already in removing state" Oct 2 19:07:25.725956 kubelet[2727]: E1002 19:07:25.725924 2727 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\": container is already in removing state" containerID="ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3" Oct 2 19:07:25.726192 kubelet[2727]: E1002 19:07:25.726151 2727 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3": container is already in removing state; Skipping pod "cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)" Oct 2 19:07:25.726833 kubelet[2727]: E1002 19:07:25.726798 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:07:25.728946 env[1571]: time="2023-10-02T19:07:25.728874109Z" level=info msg="RemoveContainer for \"ea7f5fadcb1d51238c96b9a0067af2ebad012801b6d4cf072ac9a13a50362cf3\" returns successfully" Oct 2 19:07:25.799729 kubelet[2727]: E1002 19:07:25.799651 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:25.884915 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521-rootfs.mount: Deactivated successfully. Oct 2 19:07:28.144981 kubelet[2727]: W1002 19:07:28.144897 2727 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod85a73d52_71cb_4d9c_9206_c7d1ba6ac1a1.slice/cri-containerd-4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521.scope WatchSource:0}: task 4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521 not found: not found Oct 2 19:07:30.680112 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:07:30.680294 kernel: audit: type=1400 audit(1696273650.675:1412): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.675000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.675000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d2c420 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:30.701392 kernel: audit: type=1300 audit(1696273650.675:1412): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d2c420 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:30.701491 kernel: audit: type=1327 audit(1696273650.675:1412): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.675000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.676000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.721344 kernel: audit: type=1400 audit(1696273650.676:1413): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.721471 kernel: audit: type=1300 audit(1696273650.676:1413): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d90dc0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:30.676000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d90dc0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:30.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.743825 kernel: audit: type=1327 audit(1696273650.676:1413): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.743944 kernel: audit: type=1400 audit(1696273650.677:1414): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.677000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.677000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d90ee0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:30.765114 kernel: audit: type=1300 audit(1696273650.677:1414): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d90ee0 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:30.765203 kernel: audit: type=1327 audit(1696273650.677:1414): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.677000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.784447 kernel: audit: type=1400 audit(1696273650.677:1415): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.677000 audit[2497]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d2c540 a2=fc6 a3=0 items=0 ppid=2333 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:07:30.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.801700 kubelet[2727]: E1002 19:07:30.801648 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:35.803504 kubelet[2727]: E1002 19:07:35.803458 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:38.862479 kubelet[2727]: E1002 19:07:38.862391 2727 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-xcs66_kube-system(85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1)\"" pod="kube-system/cilium-xcs66" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 Oct 2 19:07:40.804518 kubelet[2727]: E1002 19:07:40.804469 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:45.806473 kubelet[2727]: E1002 19:07:45.806436 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:46.009345 env[1571]: time="2023-10-02T19:07:46.009286607Z" level=info msg="StopPodSandbox for \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\"" Oct 2 19:07:46.010212 env[1571]: time="2023-10-02T19:07:46.010161800Z" level=info msg="Container to stop \"4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:07:46.016293 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9-shm.mount: Deactivated successfully. Oct 2 19:07:46.041448 systemd[1]: cri-containerd-e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9.scope: Deactivated successfully. Oct 2 19:07:46.040000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:07:46.044823 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:07:46.044961 kernel: audit: type=1334 audit(1696273666.040:1416): prog-id=134 op=UNLOAD Oct 2 19:07:46.048000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:07:46.053465 kernel: audit: type=1334 audit(1696273666.048:1417): prog-id=137 op=UNLOAD Oct 2 19:07:46.113000 audit[3750]: USER_END pid=3750 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:46.113719 sshd[3750]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:46.128197 systemd[1]: sshd@29-172.31.18.117:22-139.178.89.65:33700.service: Deactivated successfully. Oct 2 19:07:46.114000 audit[3750]: CRED_DISP pid=3750 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:46.129599 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:07:46.129924 systemd[1]: session-30.scope: Consumed 2.523s CPU time. Oct 2 19:07:46.131539 systemd-logind[1553]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:07:46.133460 systemd-logind[1553]: Removed session 30. Oct 2 19:07:46.138990 kernel: audit: type=1106 audit(1696273666.113:1418): pid=3750 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:46.139096 kernel: audit: type=1104 audit(1696273666.114:1419): pid=3750 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:46.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.18.117:22-139.178.89.65:33700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:46.149932 kernel: audit: type=1131 audit(1696273666.127:1420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.18.117:22-139.178.89.65:33700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:46.155669 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9-rootfs.mount: Deactivated successfully. Oct 2 19:07:46.182238 env[1571]: time="2023-10-02T19:07:46.182160841Z" level=info msg="shim disconnected" id=e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9 Oct 2 19:07:46.182609 env[1571]: time="2023-10-02T19:07:46.182235913Z" level=warning msg="cleaning up after shim disconnected" id=e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9 namespace=k8s.io Oct 2 19:07:46.182609 env[1571]: time="2023-10-02T19:07:46.182259781Z" level=info msg="cleaning up dead shim" Oct 2 19:07:46.210936 env[1571]: time="2023-10-02T19:07:46.210862772Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3986 runtime=io.containerd.runc.v2\n" Oct 2 19:07:46.211488 env[1571]: time="2023-10-02T19:07:46.211438386Z" level=info msg="TearDown network for sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" successfully" Oct 2 19:07:46.211624 env[1571]: time="2023-10-02T19:07:46.211491990Z" level=info msg="StopPodSandbox for \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" returns successfully" Oct 2 19:07:46.327084 kubelet[2727]: I1002 19:07:46.327029 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-config-path\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327323 kubelet[2727]: I1002 19:07:46.327107 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-clustermesh-secrets\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327323 kubelet[2727]: I1002 19:07:46.327153 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-t2lsb\" (UniqueName: \"kubernetes.io/projected/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-kube-api-access-t2lsb\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327323 kubelet[2727]: I1002 19:07:46.327191 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-lib-modules\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327323 kubelet[2727]: I1002 19:07:46.327233 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-run\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327323 kubelet[2727]: I1002 19:07:46.327270 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-bpf-maps\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327323 kubelet[2727]: I1002 19:07:46.327310 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-xtables-lock\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327741 kubelet[2727]: I1002 19:07:46.327351 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-host-proc-sys-net\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327741 kubelet[2727]: I1002 19:07:46.327389 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-cgroup\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327741 kubelet[2727]: I1002 19:07:46.327460 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-ipsec-secrets\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327741 kubelet[2727]: I1002 19:07:46.327506 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-hubble-tls\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327741 kubelet[2727]: I1002 19:07:46.327550 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-host-proc-sys-kernel\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.327741 kubelet[2727]: I1002 19:07:46.327587 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cni-path\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.328131 kubelet[2727]: I1002 19:07:46.327626 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-hostproc\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.328131 kubelet[2727]: I1002 19:07:46.327667 2727 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-etc-cni-netd\") pod \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\" (UID: \"85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1\") " Oct 2 19:07:46.328131 kubelet[2727]: I1002 19:07:46.327743 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.329491 kubelet[2727]: W1002 19:07:46.328600 2727 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:07:46.330800 kubelet[2727]: I1002 19:07:46.330744 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.331115 kubelet[2727]: I1002 19:07:46.331074 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.331305 kubelet[2727]: I1002 19:07:46.331253 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.331534 kubelet[2727]: I1002 19:07:46.331484 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.331715 kubelet[2727]: I1002 19:07:46.331689 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.331875 kubelet[2727]: I1002 19:07:46.331850 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.334588 kubelet[2727]: I1002 19:07:46.334525 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:07:46.334990 kubelet[2727]: I1002 19:07:46.334944 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.335616 kubelet[2727]: I1002 19:07:46.335570 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cni-path" (OuterVolumeSpecName: "cni-path") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.335873 kubelet[2727]: I1002 19:07:46.335830 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-hostproc" (OuterVolumeSpecName: "hostproc") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:46.342253 systemd[1]: var-lib-kubelet-pods-85a73d52\x2d71cb\x2d4d9c\x2d9206\x2dc7d1ba6ac1a1-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:07:46.344170 kubelet[2727]: I1002 19:07:46.344127 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:07:46.356255 systemd[1]: var-lib-kubelet-pods-85a73d52\x2d71cb\x2d4d9c\x2d9206\x2dc7d1ba6ac1a1-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:07:46.360348 kubelet[2727]: I1002 19:07:46.359843 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-kube-api-access-t2lsb" (OuterVolumeSpecName: "kube-api-access-t2lsb") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "kube-api-access-t2lsb". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:07:46.359304 systemd[1]: var-lib-kubelet-pods-85a73d52\x2d71cb\x2d4d9c\x2d9206\x2dc7d1ba6ac1a1-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dt2lsb.mount: Deactivated successfully. Oct 2 19:07:46.361538 kubelet[2727]: I1002 19:07:46.361495 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:07:46.363354 kubelet[2727]: I1002 19:07:46.363310 2727 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1" (UID: "85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:07:46.428525 kubelet[2727]: I1002 19:07:46.428487 2727 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-config-path\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.428781 kubelet[2727]: I1002 19:07:46.428760 2727 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-clustermesh-secrets\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.428934 kubelet[2727]: I1002 19:07:46.428910 2727 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-t2lsb\" (UniqueName: \"kubernetes.io/projected/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-kube-api-access-t2lsb\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.429087 kubelet[2727]: I1002 19:07:46.429066 2727 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-lib-modules\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.429242 kubelet[2727]: I1002 19:07:46.429223 2727 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-run\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.429386 kubelet[2727]: I1002 19:07:46.429367 2727 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-bpf-maps\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.429582 kubelet[2727]: I1002 19:07:46.429562 2727 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-xtables-lock\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.429729 kubelet[2727]: I1002 19:07:46.429709 2727 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-host-proc-sys-net\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.429865 kubelet[2727]: I1002 19:07:46.429846 2727 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-cgroup\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.430014 kubelet[2727]: I1002 19:07:46.429995 2727 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cilium-ipsec-secrets\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.430162 kubelet[2727]: I1002 19:07:46.430143 2727 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-hubble-tls\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.430306 kubelet[2727]: I1002 19:07:46.430285 2727 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-host-proc-sys-kernel\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.430473 kubelet[2727]: I1002 19:07:46.430452 2727 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-cni-path\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.430618 kubelet[2727]: I1002 19:07:46.430598 2727 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-hostproc\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.430768 kubelet[2727]: I1002 19:07:46.430748 2727 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1-etc-cni-netd\") on node \"ip-172-31-18-117\" DevicePath \"\"" Oct 2 19:07:46.770487 kubelet[2727]: I1002 19:07:46.770304 2727 scope.go:115] "RemoveContainer" containerID="4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521" Oct 2 19:07:46.773587 env[1571]: time="2023-10-02T19:07:46.773537493Z" level=info msg="RemoveContainer for \"4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521\"" Oct 2 19:07:46.782945 env[1571]: time="2023-10-02T19:07:46.781753124Z" level=info msg="RemoveContainer for \"4195af7b09b76cfd5d6755331cd6fe386edbf88562bd5ca718b14d8d970fb521\" returns successfully" Oct 2 19:07:46.782451 systemd[1]: Removed slice kubepods-burstable-pod85a73d52_71cb_4d9c_9206_c7d1ba6ac1a1.slice. Oct 2 19:07:46.864683 env[1571]: time="2023-10-02T19:07:46.864615074Z" level=info msg="StopPodSandbox for \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\"" Oct 2 19:07:46.864862 env[1571]: time="2023-10-02T19:07:46.864760574Z" level=info msg="TearDown network for sandbox \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" successfully" Oct 2 19:07:46.864862 env[1571]: time="2023-10-02T19:07:46.864819410Z" level=info msg="StopPodSandbox for \"e4ec0a2197d7e177c24831e8a4f233ed69a908487be6c9cb7d84a7587542fbf9\" returns successfully" Oct 2 19:07:46.866687 kubelet[2727]: I1002 19:07:46.866654 2727 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1 path="/var/lib/kubelet/pods/85a73d52-71cb-4d9c-9206-c7d1ba6ac1a1/volumes" Oct 2 19:07:47.012919 systemd[1]: var-lib-kubelet-pods-85a73d52\x2d71cb\x2d4d9c\x2d9206\x2dc7d1ba6ac1a1-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:07:50.808354 kubelet[2727]: E1002 19:07:50.808312 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:55.809399 kubelet[2727]: E1002 19:07:55.809347 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:08:00.462319 systemd[1]: cri-containerd-4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f.scope: Deactivated successfully. Oct 2 19:08:00.462848 systemd[1]: cri-containerd-4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f.scope: Consumed 7.637s CPU time. Oct 2 19:08:00.465000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:08:00.465000 audit: BPF prog-id=100 op=UNLOAD Oct 2 19:08:00.472990 kernel: audit: type=1334 audit(1696273680.465:1421): prog-id=89 op=UNLOAD Oct 2 19:08:00.473163 kernel: audit: type=1334 audit(1696273680.465:1422): prog-id=100 op=UNLOAD Oct 2 19:08:00.515142 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f-rootfs.mount: Deactivated successfully. Oct 2 19:08:00.541807 env[1571]: time="2023-10-02T19:08:00.541744707Z" level=info msg="shim disconnected" id=4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f Oct 2 19:08:00.542700 env[1571]: time="2023-10-02T19:08:00.542658769Z" level=warning msg="cleaning up after shim disconnected" id=4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f namespace=k8s.io Oct 2 19:08:00.542835 env[1571]: time="2023-10-02T19:08:00.542807940Z" level=info msg="cleaning up dead shim" Oct 2 19:08:00.567684 env[1571]: time="2023-10-02T19:08:00.567628266Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:08:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4016 runtime=io.containerd.runc.v2\n" Oct 2 19:08:00.803680 kubelet[2727]: I1002 19:08:00.802930 2727 scope.go:115] "RemoveContainer" containerID="4f8ebf1a47d88c51d3e19aed28da6797965c913d07b60d0189e0022ea2e1ec8f" Oct 2 19:08:00.808571 env[1571]: time="2023-10-02T19:08:00.808517572Z" level=info msg="CreateContainer within sandbox \"92aa2d2cbbf6de3cdda7a5f618d63cd5eb49bca9d0cbc1fbda6aadab3eff7e64\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:08:00.811633 kubelet[2727]: E1002 19:08:00.811593 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:08:00.824937 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1748373455.mount: Deactivated successfully. Oct 2 19:08:00.836157 env[1571]: time="2023-10-02T19:08:00.836082364Z" level=info msg="CreateContainer within sandbox \"92aa2d2cbbf6de3cdda7a5f618d63cd5eb49bca9d0cbc1fbda6aadab3eff7e64\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"6e4c7ace0036e69c7da3f8a747b40b0913f5b931315dc420a20a61dfa88492dc\"" Oct 2 19:08:00.836845 env[1571]: time="2023-10-02T19:08:00.836802374Z" level=info msg="StartContainer for \"6e4c7ace0036e69c7da3f8a747b40b0913f5b931315dc420a20a61dfa88492dc\"" Oct 2 19:08:00.905601 systemd[1]: Started cri-containerd-6e4c7ace0036e69c7da3f8a747b40b0913f5b931315dc420a20a61dfa88492dc.scope. Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955992 kernel: audit: type=1400 audit(1696273680.939:1423): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.956093 kernel: audit: type=1400 audit(1696273680.939:1424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.956187 kernel: audit: type=1400 audit(1696273680.939:1425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.963615 kernel: audit: type=1400 audit(1696273680.939:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.978524 kernel: audit: type=1400 audit(1696273680.939:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.995087 kernel: audit: type=1400 audit(1696273680.939:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.995233 kernel: audit: type=1400 audit(1696273680.939:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.947000 audit: BPF prog-id=138 op=LOAD Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2333 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:01.003617 kernel: audit: type=1400 audit(1696273680.939:1430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665346337616365303033366536396337646133663861373437623430 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2333 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665346337616365303033366536396337646133663861373437623430 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.955000 audit: BPF prog-id=139 op=LOAD Oct 2 19:08:00.955000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2333 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665346337616365303033366536396337646133663861373437623430 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.962000 audit: BPF prog-id=140 op=LOAD Oct 2 19:08:00.962000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2333 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665346337616365303033366536396337646133663861373437623430 Oct 2 19:08:00.970000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:08:00.970000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.970000 audit: BPF prog-id=141 op=LOAD Oct 2 19:08:00.970000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2333 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665346337616365303033366536396337646133663861373437623430 Oct 2 19:08:01.043343 env[1571]: time="2023-10-02T19:08:01.043280115Z" level=info msg="StartContainer for \"6e4c7ace0036e69c7da3f8a747b40b0913f5b931315dc420a20a61dfa88492dc\" returns successfully" Oct 2 19:08:03.682000 audit[4046]: AVC avc: denied { watch } for pid=4046 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:03.682000 audit[4046]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000138180 a2=fc6 a3=0 items=0 ppid=2333 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:08:03.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:03.682000 audit[4046]: AVC avc: denied { watch } for pid=4046 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:03.682000 audit[4046]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40002500a0 a2=fc6 a3=0 items=0 ppid=2333 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c601,c979 key=(null) Oct 2 19:08:03.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:05.813236 kubelet[2727]: E1002 19:08:05.813182 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:08:06.526500 systemd[1]: cri-containerd-654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1.scope: Deactivated successfully. Oct 2 19:08:06.527038 systemd[1]: cri-containerd-654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1.scope: Consumed 2.919s CPU time. Oct 2 19:08:06.533498 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 19:08:06.533643 kernel: audit: type=1334 audit(1696273686.529:1443): prog-id=93 op=UNLOAD Oct 2 19:08:06.529000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:08:06.529000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:08:06.538584 kernel: audit: type=1334 audit(1696273686.529:1444): prog-id=112 op=UNLOAD Oct 2 19:08:06.573023 kubelet[2727]: E1002 19:08:06.572968 2727 controller.go:189] failed to update lease, error: the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io ip-172-31-18-117) Oct 2 19:08:06.582128 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1-rootfs.mount: Deactivated successfully. Oct 2 19:08:06.614438 env[1571]: time="2023-10-02T19:08:06.614360963Z" level=info msg="shim disconnected" id=654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1 Oct 2 19:08:06.615128 env[1571]: time="2023-10-02T19:08:06.615036514Z" level=warning msg="cleaning up after shim disconnected" id=654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1 namespace=k8s.io Oct 2 19:08:06.615128 env[1571]: time="2023-10-02T19:08:06.615087490Z" level=info msg="cleaning up dead shim" Oct 2 19:08:06.640711 env[1571]: time="2023-10-02T19:08:06.640648702Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:08:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4076 runtime=io.containerd.runc.v2\n" Oct 2 19:08:06.820892 kubelet[2727]: I1002 19:08:06.820764 2727 scope.go:115] "RemoveContainer" containerID="654d1888ccca62f3bb01c2c375a4a78f89271e2d75228c74cfed4788fec889e1" Oct 2 19:08:06.825002 env[1571]: time="2023-10-02T19:08:06.824948475Z" level=info msg="CreateContainer within sandbox \"3aacdb430a6b9dae8aba1c1d043683a37e8f46dea70932cdcdde409218df9d2e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:08:06.842137 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2683324693.mount: Deactivated successfully. Oct 2 19:08:06.854626 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1688123103.mount: Deactivated successfully. Oct 2 19:08:06.858393 env[1571]: time="2023-10-02T19:08:06.858315577Z" level=info msg="CreateContainer within sandbox \"3aacdb430a6b9dae8aba1c1d043683a37e8f46dea70932cdcdde409218df9d2e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"74fd0dd1d2b265102e504bbf09fb796e1f2484f16dd4b69a8cd99002bff789f8\"" Oct 2 19:08:06.859171 env[1571]: time="2023-10-02T19:08:06.859088039Z" level=info msg="StartContainer for \"74fd0dd1d2b265102e504bbf09fb796e1f2484f16dd4b69a8cd99002bff789f8\"" Oct 2 19:08:06.904052 systemd[1]: Started cri-containerd-74fd0dd1d2b265102e504bbf09fb796e1f2484f16dd4b69a8cd99002bff789f8.scope. Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965511 kernel: audit: type=1400 audit(1696273686.949:1445): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965667 kernel: audit: type=1400 audit(1696273686.949:1446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.974822 kernel: audit: type=1400 audit(1696273686.949:1447): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.974917 kernel: audit: type=1400 audit(1696273686.949:1448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.989684 kernel: audit: type=1400 audit(1696273686.949:1449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.989763 kernel: audit: type=1400 audit(1696273686.949:1450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.005652 kernel: audit: type=1400 audit(1696273686.949:1451): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.005778 kernel: audit: type=1400 audit(1696273686.949:1452): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.958000 audit: BPF prog-id=142 op=LOAD Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2321 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:06.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734666430646431643262323635313032653530346262663039666237 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2321 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:06.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734666430646431643262323635313032653530346262663039666237 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit: BPF prog-id=143 op=LOAD Oct 2 19:08:06.964000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2321 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:06.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734666430646431643262323635313032653530346262663039666237 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.964000 audit: BPF prog-id=144 op=LOAD Oct 2 19:08:06.964000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2321 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:06.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734666430646431643262323635313032653530346262663039666237 Oct 2 19:08:06.964000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:08:06.965000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { perfmon } for pid=4097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit[4097]: AVC avc: denied { bpf } for pid=4097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:06.965000 audit: BPF prog-id=145 op=LOAD Oct 2 19:08:06.965000 audit[4097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2321 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:06.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734666430646431643262323635313032653530346262663039666237 Oct 2 19:08:07.053692 env[1571]: time="2023-10-02T19:08:07.053632964Z" level=info msg="StartContainer for \"74fd0dd1d2b265102e504bbf09fb796e1f2484f16dd4b69a8cd99002bff789f8\" returns successfully" Oct 2 19:08:07.162377 kubelet[2727]: E1002 19:08:07.162057 2727 kubelet_node_status.go:540] "Error updating node status, will retry" err="failed to patch status \"{\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"type\\\":\\\"DiskPressure\\\"},{\\\"type\\\":\\\"PIDPressure\\\"},{\\\"type\\\":\\\"Ready\\\"}],\\\"conditions\\\":[{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:07:57Z\\\",\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:07:57Z\\\",\\\"type\\\":\\\"DiskPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:07:57Z\\\",\\\"type\\\":\\\"PIDPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:07:57Z\\\",\\\"type\\\":\\\"Ready\\\"}]}}\" for node \"ip-172-31-18-117\": Patch \"https://172.31.18.117:6443/api/v1/nodes/ip-172-31-18-117/status?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:08:10.815222 kubelet[2727]: E1002 19:08:10.815157 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:08:15.379000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.382173 kernel: kauditd_printk_skb: 49 callbacks suppressed Oct 2 19:08:15.382280 kernel: audit: type=1400 audit(1696273695.379:1463): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.379000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=24 a1=40024ef540 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.403680 kernel: audit: type=1300 audit(1696273695.379:1463): arch=c00000b7 syscall=27 success=no exit=-13 a0=24 a1=40024ef540 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.403811 kernel: audit: type=1327 audit(1696273695.379:1463): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.380000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.423961 kernel: audit: type=1400 audit(1696273695.380:1464): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.424042 kernel: audit: type=1300 audit(1696273695.380:1464): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c1065d0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.380000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c1065d0 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.435761 kernel: audit: type=1327 audit(1696273695.380:1464): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.380000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.455228 kernel: audit: type=1400 audit(1696273695.380:1465): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521237 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.455303 kernel: audit: type=1300 audit(1696273695.380:1465): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c106630 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.380000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c106630 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.467022 kernel: audit: type=1327 audit(1696273695.380:1465): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.395000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521243 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.487199 kernel: audit: type=1400 audit(1696273695.395:1466): avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521243 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.395000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=24 a1=400c106840 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.395000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.399000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.399000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=24 a1=400bba8b70 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.402000 audit[2474]: AVC avc: denied { watch } for pid=2474 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521235 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:15.402000 audit[2474]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=24 a1=40024ef560 a2=fc6 a3=0 items=0 ppid=2358 pid=2474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c886 key=(null) Oct 2 19:08:15.402000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31382E313137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:15.816473 kubelet[2727]: E1002 19:08:15.816402 2727 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:08:16.574431 kubelet[2727]: E1002 19:08:16.574349 2727 controller.go:189] failed to update lease, error: Put "https://172.31.18.117:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-18-117?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 19:08:17.162831 kubelet[2727]: E1002 19:08:17.162543 2727 kubelet_node_status.go:540] "Error updating node status, will retry" err="error getting node \"ip-172-31-18-117\": Get \"https://172.31.18.117:6443/api/v1/nodes/ip-172-31-18-117?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"