Oct 2 19:01:03.177600 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:01:03.177638 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:01:03.177661 kernel: efi: EFI v2.70 by EDK II Oct 2 19:01:03.177677 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:01:03.177691 kernel: ACPI: Early table checksum verification disabled Oct 2 19:01:03.177705 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:01:03.177722 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:01:03.177737 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:01:03.177751 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:01:03.177765 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:01:03.177784 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:01:03.177798 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:01:03.177812 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:01:03.177827 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:01:03.177844 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:01:03.177863 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:01:03.177878 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:01:03.177893 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:01:03.177908 kernel: printk: bootconsole [uart0] enabled Oct 2 19:01:03.177923 kernel: NUMA: Failed to initialise from firmware Oct 2 19:01:03.177938 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:01:03.177954 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:01:03.177969 kernel: Zone ranges: Oct 2 19:01:03.177984 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:01:03.178000 kernel: DMA32 empty Oct 2 19:01:03.178015 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:01:03.178033 kernel: Movable zone start for each node Oct 2 19:01:03.178049 kernel: Early memory node ranges Oct 2 19:01:03.178064 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:01:03.178079 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:01:03.178094 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:01:03.178109 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:01:03.178124 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:01:03.178139 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:01:03.178154 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:01:03.178169 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:01:03.178184 kernel: psci: probing for conduit method from ACPI. Oct 2 19:01:03.178219 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:01:03.178242 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:01:03.178258 kernel: psci: Trusted OS migration not required Oct 2 19:01:03.178281 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:01:03.178321 kernel: ACPI: SRAT not present Oct 2 19:01:03.178339 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:01:03.178361 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:01:03.178377 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:01:03.178392 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:01:03.178410 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:01:03.178425 kernel: CPU features: detected: Spectre-v2 Oct 2 19:01:03.178441 kernel: CPU features: detected: Spectre-v3a Oct 2 19:01:03.178457 kernel: CPU features: detected: Spectre-BHB Oct 2 19:01:03.178472 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:01:03.178488 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:01:03.178503 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:01:03.178519 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:01:03.178538 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:01:03.178554 kernel: Policy zone: Normal Oct 2 19:01:03.178572 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:01:03.178589 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:01:03.178604 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:01:03.178620 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:01:03.178636 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:01:03.178651 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:01:03.178668 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:01:03.178684 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:01:03.178703 kernel: trace event string verifier disabled Oct 2 19:01:03.178719 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:01:03.178735 kernel: rcu: RCU event tracing is enabled. Oct 2 19:01:03.178751 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:01:03.178767 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:01:03.178783 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:01:03.178799 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:01:03.178814 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:01:03.178830 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:01:03.178845 kernel: GICv3: 96 SPIs implemented Oct 2 19:01:03.178861 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:01:03.178876 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:01:03.178895 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:01:03.178911 kernel: GICv3: 16 PPIs implemented Oct 2 19:01:03.178926 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:01:03.178941 kernel: ACPI: SRAT not present Oct 2 19:01:03.178956 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:01:03.178972 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:01:03.178988 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:01:03.179004 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:01:03.179019 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:01:03.179035 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:01:03.179051 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:01:03.179070 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:01:03.179086 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:01:03.179102 kernel: Console: colour dummy device 80x25 Oct 2 19:01:03.179118 kernel: printk: console [tty1] enabled Oct 2 19:01:03.179134 kernel: ACPI: Core revision 20210730 Oct 2 19:01:03.179151 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:01:03.179167 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:01:03.179183 kernel: LSM: Security Framework initializing Oct 2 19:01:03.194417 kernel: SELinux: Initializing. Oct 2 19:01:03.194449 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:01:03.194475 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:01:03.194492 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:01:03.194508 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:01:03.194525 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:01:03.194541 kernel: Remapping and enabling EFI services. Oct 2 19:01:03.194557 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:01:03.194573 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:01:03.194590 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:01:03.194606 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:01:03.194627 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:01:03.194643 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:01:03.194659 kernel: SMP: Total of 2 processors activated. Oct 2 19:01:03.194675 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:01:03.194691 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:01:03.194708 kernel: CPU features: detected: CRC32 instructions Oct 2 19:01:03.194724 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:01:03.194739 kernel: alternatives: patching kernel code Oct 2 19:01:03.194755 kernel: devtmpfs: initialized Oct 2 19:01:03.194775 kernel: KASLR disabled due to lack of seed Oct 2 19:01:03.194792 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:01:03.194809 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:01:03.194836 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:01:03.194856 kernel: SMBIOS 3.0.0 present. Oct 2 19:01:03.194873 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:01:03.194889 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:01:03.194906 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:01:03.194923 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:01:03.194940 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:01:03.194957 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:01:03.194974 kernel: audit: type=2000 audit(0.247:1): state=initialized audit_enabled=0 res=1 Oct 2 19:01:03.194995 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:01:03.195012 kernel: cpuidle: using governor menu Oct 2 19:01:03.195029 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:01:03.195045 kernel: ASID allocator initialised with 32768 entries Oct 2 19:01:03.195062 kernel: ACPI: bus type PCI registered Oct 2 19:01:03.195083 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:01:03.195099 kernel: Serial: AMBA PL011 UART driver Oct 2 19:01:03.195116 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:01:03.195133 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:01:03.195150 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:01:03.195167 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:01:03.195183 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:01:03.195222 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:01:03.195242 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:01:03.195264 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:01:03.195281 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:01:03.195298 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:01:03.195314 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:01:03.195331 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:01:03.195348 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:01:03.195364 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:01:03.195381 kernel: ACPI: Interpreter enabled Oct 2 19:01:03.195397 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:01:03.195420 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:01:03.195438 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:01:03.195867 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:01:03.196076 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:01:03.196334 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:01:03.196534 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:01:03.196729 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:01:03.196758 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:01:03.196776 kernel: acpiphp: Slot [1] registered Oct 2 19:01:03.196793 kernel: acpiphp: Slot [2] registered Oct 2 19:01:03.196810 kernel: acpiphp: Slot [3] registered Oct 2 19:01:03.196827 kernel: acpiphp: Slot [4] registered Oct 2 19:01:03.196844 kernel: acpiphp: Slot [5] registered Oct 2 19:01:03.196860 kernel: acpiphp: Slot [6] registered Oct 2 19:01:03.196877 kernel: acpiphp: Slot [7] registered Oct 2 19:01:03.196893 kernel: acpiphp: Slot [8] registered Oct 2 19:01:03.196914 kernel: acpiphp: Slot [9] registered Oct 2 19:01:03.196930 kernel: acpiphp: Slot [10] registered Oct 2 19:01:03.196947 kernel: acpiphp: Slot [11] registered Oct 2 19:01:03.196963 kernel: acpiphp: Slot [12] registered Oct 2 19:01:03.196980 kernel: acpiphp: Slot [13] registered Oct 2 19:01:03.196996 kernel: acpiphp: Slot [14] registered Oct 2 19:01:03.197013 kernel: acpiphp: Slot [15] registered Oct 2 19:01:03.197029 kernel: acpiphp: Slot [16] registered Oct 2 19:01:03.197046 kernel: acpiphp: Slot [17] registered Oct 2 19:01:03.197062 kernel: acpiphp: Slot [18] registered Oct 2 19:01:03.197083 kernel: acpiphp: Slot [19] registered Oct 2 19:01:03.197099 kernel: acpiphp: Slot [20] registered Oct 2 19:01:03.197116 kernel: acpiphp: Slot [21] registered Oct 2 19:01:03.197132 kernel: acpiphp: Slot [22] registered Oct 2 19:01:03.197149 kernel: acpiphp: Slot [23] registered Oct 2 19:01:03.197165 kernel: acpiphp: Slot [24] registered Oct 2 19:01:03.197182 kernel: acpiphp: Slot [25] registered Oct 2 19:01:03.197217 kernel: acpiphp: Slot [26] registered Oct 2 19:01:03.197236 kernel: acpiphp: Slot [27] registered Oct 2 19:01:03.197258 kernel: acpiphp: Slot [28] registered Oct 2 19:01:03.197274 kernel: acpiphp: Slot [29] registered Oct 2 19:01:03.197291 kernel: acpiphp: Slot [30] registered Oct 2 19:01:03.197308 kernel: acpiphp: Slot [31] registered Oct 2 19:01:03.197324 kernel: PCI host bridge to bus 0000:00 Oct 2 19:01:03.197524 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:01:03.197704 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:01:03.197881 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:01:03.198062 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:01:03.198305 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:01:03.198524 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:01:03.198724 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:01:03.198952 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:01:03.199156 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:01:03.200866 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:01:03.201108 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:01:03.201350 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:01:03.201559 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:01:03.201762 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:01:03.201965 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:01:03.202166 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:01:03.202507 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:01:03.202709 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:01:03.202907 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:01:03.203115 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:01:03.203337 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:01:03.203518 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:01:03.203694 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:01:03.203724 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:01:03.203743 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:01:03.203760 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:01:03.203777 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:01:03.203794 kernel: iommu: Default domain type: Translated Oct 2 19:01:03.203810 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:01:03.203827 kernel: vgaarb: loaded Oct 2 19:01:03.203844 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:01:03.203861 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:01:03.203881 kernel: PTP clock support registered Oct 2 19:01:03.203898 kernel: Registered efivars operations Oct 2 19:01:03.203915 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:01:03.203932 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:01:03.203949 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:01:03.203965 kernel: pnp: PnP ACPI init Oct 2 19:01:03.204184 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:01:03.204228 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:01:03.204246 kernel: NET: Registered PF_INET protocol family Oct 2 19:01:03.204269 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:01:03.204286 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:01:03.204303 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:01:03.204320 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:01:03.204337 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:01:03.204353 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:01:03.204371 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:01:03.204388 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:01:03.204405 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:01:03.204426 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:01:03.204443 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:01:03.204459 kernel: kvm [1]: HYP mode not available Oct 2 19:01:03.204476 kernel: Initialise system trusted keyrings Oct 2 19:01:03.204493 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:01:03.204510 kernel: Key type asymmetric registered Oct 2 19:01:03.204526 kernel: Asymmetric key parser 'x509' registered Oct 2 19:01:03.204543 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:01:03.204560 kernel: io scheduler mq-deadline registered Oct 2 19:01:03.204580 kernel: io scheduler kyber registered Oct 2 19:01:03.204597 kernel: io scheduler bfq registered Oct 2 19:01:03.204802 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:01:03.204829 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:01:03.204846 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:01:03.204863 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:01:03.204880 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:01:03.205076 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:01:03.205104 kernel: printk: console [ttyS0] disabled Oct 2 19:01:03.205122 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:01:03.205139 kernel: printk: console [ttyS0] enabled Oct 2 19:01:03.205156 kernel: printk: bootconsole [uart0] disabled Oct 2 19:01:03.205172 kernel: thunder_xcv, ver 1.0 Oct 2 19:01:03.205189 kernel: thunder_bgx, ver 1.0 Oct 2 19:01:03.205226 kernel: nicpf, ver 1.0 Oct 2 19:01:03.205243 kernel: nicvf, ver 1.0 Oct 2 19:01:03.205452 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:01:03.205645 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:01:02 UTC (1696273262) Oct 2 19:01:03.205669 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:01:03.205686 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:01:03.205702 kernel: Segment Routing with IPv6 Oct 2 19:01:03.205719 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:01:03.205736 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:01:03.205752 kernel: Key type dns_resolver registered Oct 2 19:01:03.205769 kernel: registered taskstats version 1 Oct 2 19:01:03.205790 kernel: Loading compiled-in X.509 certificates Oct 2 19:01:03.205807 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:01:03.205824 kernel: Key type .fscrypt registered Oct 2 19:01:03.205840 kernel: Key type fscrypt-provisioning registered Oct 2 19:01:03.205857 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:01:03.205874 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:01:03.205891 kernel: ima: No architecture policies found Oct 2 19:01:03.205907 kernel: Freeing unused kernel memory: 34560K Oct 2 19:01:03.205924 kernel: Run /init as init process Oct 2 19:01:03.205944 kernel: with arguments: Oct 2 19:01:03.205961 kernel: /init Oct 2 19:01:03.205978 kernel: with environment: Oct 2 19:01:03.205994 kernel: HOME=/ Oct 2 19:01:03.206011 kernel: TERM=linux Oct 2 19:01:03.206027 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:01:03.206048 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:01:03.206071 systemd[1]: Detected virtualization amazon. Oct 2 19:01:03.206094 systemd[1]: Detected architecture arm64. Oct 2 19:01:03.206112 systemd[1]: Running in initrd. Oct 2 19:01:03.206130 systemd[1]: No hostname configured, using default hostname. Oct 2 19:01:03.206148 systemd[1]: Hostname set to . Oct 2 19:01:03.206168 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:01:03.206186 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:01:03.206226 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:01:03.206246 systemd[1]: Reached target cryptsetup.target. Oct 2 19:01:03.206269 systemd[1]: Reached target paths.target. Oct 2 19:01:03.206287 systemd[1]: Reached target slices.target. Oct 2 19:01:03.206305 systemd[1]: Reached target swap.target. Oct 2 19:01:03.206323 systemd[1]: Reached target timers.target. Oct 2 19:01:03.206342 systemd[1]: Listening on iscsid.socket. Oct 2 19:01:03.206361 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:01:03.206379 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:01:03.206398 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:01:03.206420 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:01:03.206439 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:01:03.206458 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:01:03.206476 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:01:03.206494 systemd[1]: Reached target sockets.target. Oct 2 19:01:03.206512 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:01:03.206531 systemd[1]: Finished network-cleanup.service. Oct 2 19:01:03.206549 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:01:03.206567 systemd[1]: Starting systemd-journald.service... Oct 2 19:01:03.206590 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:01:03.206608 systemd[1]: Starting systemd-resolved.service... Oct 2 19:01:03.206626 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:01:03.206645 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:01:03.206663 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:01:03.206681 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:01:03.206700 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:01:03.206719 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:01:03.206738 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:01:03.206761 kernel: audit: type=1130 audit(1696273263.180:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.206783 systemd-journald[309]: Journal started Oct 2 19:01:03.206867 systemd-journald[309]: Runtime Journal (/run/log/journal/ec2f62ff16b9fc362cb1fc7dfa2c671f) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:01:03.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.170489 systemd-modules-load[310]: Inserted module 'overlay' Oct 2 19:01:03.227719 systemd-resolved[311]: Positive Trust Anchors: Oct 2 19:01:03.227746 systemd-resolved[311]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:01:03.227800 systemd-resolved[311]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:01:03.234290 systemd[1]: Started systemd-journald.service. Oct 2 19:01:03.234332 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:01:03.254992 kernel: Bridge firewalling registered Oct 2 19:01:03.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.262528 systemd-modules-load[310]: Inserted module 'br_netfilter' Oct 2 19:01:03.263351 kernel: audit: type=1130 audit(1696273263.253:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.280179 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:01:03.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.295101 kernel: audit: type=1130 audit(1696273263.281:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.295164 kernel: SCSI subsystem initialized Oct 2 19:01:03.304446 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:01:03.317227 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:01:03.322333 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:01:03.322382 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:01:03.331558 systemd-modules-load[310]: Inserted module 'dm_multipath' Oct 2 19:01:03.335632 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:01:03.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.353576 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:01:03.364221 kernel: audit: type=1130 audit(1696273263.351:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.375964 dracut-cmdline[327]: dracut-dracut-053 Oct 2 19:01:03.390426 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:01:03.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.402242 kernel: audit: type=1130 audit(1696273263.392:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.402473 dracut-cmdline[327]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:01:03.636222 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:01:03.647236 kernel: iscsi: registered transport (tcp) Oct 2 19:01:03.673761 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:01:03.673830 kernel: QLogic iSCSI HBA Driver Oct 2 19:01:03.810231 kernel: random: crng init done Oct 2 19:01:03.810231 systemd-resolved[311]: Defaulting to hostname 'linux'. Oct 2 19:01:03.813867 systemd[1]: Started systemd-resolved.service. Oct 2 19:01:03.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.815834 systemd[1]: Reached target nss-lookup.target. Oct 2 19:01:03.843529 kernel: audit: type=1130 audit(1696273263.814:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.875839 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:01:03.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.880580 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:01:03.890734 kernel: audit: type=1130 audit(1696273263.877:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:03.974239 kernel: raid6: neonx8 gen() 6401 MB/s Oct 2 19:01:03.992227 kernel: raid6: neonx8 xor() 4705 MB/s Oct 2 19:01:04.010226 kernel: raid6: neonx4 gen() 6492 MB/s Oct 2 19:01:04.028225 kernel: raid6: neonx4 xor() 4838 MB/s Oct 2 19:01:04.046226 kernel: raid6: neonx2 gen() 5699 MB/s Oct 2 19:01:04.064225 kernel: raid6: neonx2 xor() 4480 MB/s Oct 2 19:01:04.082227 kernel: raid6: neonx1 gen() 4450 MB/s Oct 2 19:01:04.100225 kernel: raid6: neonx1 xor() 3648 MB/s Oct 2 19:01:04.118226 kernel: raid6: int64x8 gen() 3402 MB/s Oct 2 19:01:04.136225 kernel: raid6: int64x8 xor() 2084 MB/s Oct 2 19:01:04.154226 kernel: raid6: int64x4 gen() 3744 MB/s Oct 2 19:01:04.172226 kernel: raid6: int64x4 xor() 2189 MB/s Oct 2 19:01:04.190226 kernel: raid6: int64x2 gen() 3556 MB/s Oct 2 19:01:04.208225 kernel: raid6: int64x2 xor() 1946 MB/s Oct 2 19:01:04.226226 kernel: raid6: int64x1 gen() 2765 MB/s Oct 2 19:01:04.245834 kernel: raid6: int64x1 xor() 1448 MB/s Oct 2 19:01:04.245866 kernel: raid6: using algorithm neonx4 gen() 6492 MB/s Oct 2 19:01:04.245896 kernel: raid6: .... xor() 4838 MB/s, rmw enabled Oct 2 19:01:04.247707 kernel: raid6: using neon recovery algorithm Oct 2 19:01:04.266234 kernel: xor: measuring software checksum speed Oct 2 19:01:04.269226 kernel: 8regs : 9332 MB/sec Oct 2 19:01:04.271227 kernel: 32regs : 11107 MB/sec Oct 2 19:01:04.275619 kernel: arm64_neon : 9566 MB/sec Oct 2 19:01:04.275651 kernel: xor: using function: 32regs (11107 MB/sec) Oct 2 19:01:04.364241 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:01:04.402054 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:01:04.415399 kernel: audit: type=1130 audit(1696273264.402:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.415437 kernel: audit: type=1334 audit(1696273264.410:10): prog-id=7 op=LOAD Oct 2 19:01:04.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.410000 audit: BPF prog-id=7 op=LOAD Oct 2 19:01:04.414000 audit: BPF prog-id=8 op=LOAD Oct 2 19:01:04.416104 systemd[1]: Starting systemd-udevd.service... Oct 2 19:01:04.452353 systemd-udevd[508]: Using default interface naming scheme 'v252'. Oct 2 19:01:04.463290 systemd[1]: Started systemd-udevd.service. Oct 2 19:01:04.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.466507 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:01:04.529936 dracut-pre-trigger[509]: rd.md=0: removing MD RAID activation Oct 2 19:01:04.636793 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:01:04.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.639985 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:01:04.751102 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:01:04.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:04.894983 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:01:04.895051 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:01:04.904215 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:01:04.904547 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:01:04.913228 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:5a:82:26:84:ad Oct 2 19:01:04.916124 (udev-worker)[573]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:01:04.923230 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:01:04.926246 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:01:04.934230 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:01:04.940561 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:01:04.940628 kernel: GPT:9289727 != 16777215 Oct 2 19:01:04.942931 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:01:04.945490 kernel: GPT:9289727 != 16777215 Oct 2 19:01:04.947481 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:01:04.949081 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:01:05.034234 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (562) Oct 2 19:01:05.107590 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:01:05.234757 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:01:05.249717 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:01:05.254518 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:01:05.286931 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:01:05.291511 systemd[1]: Starting disk-uuid.service... Oct 2 19:01:05.313644 disk-uuid[672]: Primary Header is updated. Oct 2 19:01:05.313644 disk-uuid[672]: Secondary Entries is updated. Oct 2 19:01:05.313644 disk-uuid[672]: Secondary Header is updated. Oct 2 19:01:05.325242 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:01:05.330227 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:01:06.340174 disk-uuid[673]: The operation has completed successfully. Oct 2 19:01:06.343401 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:01:06.621620 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:01:06.622181 systemd[1]: Finished disk-uuid.service. Oct 2 19:01:06.628337 systemd[1]: Starting verity-setup.service... Oct 2 19:01:06.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:06.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:06.694249 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:01:06.787325 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:01:06.792492 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:01:06.802588 systemd[1]: Finished verity-setup.service. Oct 2 19:01:06.808887 kernel: kauditd_printk_skb: 6 callbacks suppressed Oct 2 19:01:06.808947 kernel: audit: type=1130 audit(1696273266.804:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:06.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:06.887246 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:01:06.889273 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:01:06.892256 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:01:06.896180 systemd[1]: Starting ignition-setup.service... Oct 2 19:01:06.907013 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:01:06.936644 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:01:06.936709 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:01:06.938901 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:01:06.957233 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:01:06.991953 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:01:07.080056 systemd[1]: Finished ignition-setup.service. Oct 2 19:01:07.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.083387 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:01:07.095596 kernel: audit: type=1130 audit(1696273267.080:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.264827 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:01:07.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.274000 audit: BPF prog-id=9 op=LOAD Oct 2 19:01:07.278434 kernel: audit: type=1130 audit(1696273267.267:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.278494 kernel: audit: type=1334 audit(1696273267.274:20): prog-id=9 op=LOAD Oct 2 19:01:07.276657 systemd[1]: Starting systemd-networkd.service... Oct 2 19:01:07.334281 systemd-networkd[1185]: lo: Link UP Oct 2 19:01:07.334305 systemd-networkd[1185]: lo: Gained carrier Oct 2 19:01:07.336586 systemd-networkd[1185]: Enumeration completed Oct 2 19:01:07.337770 systemd[1]: Started systemd-networkd.service. Oct 2 19:01:07.340153 systemd-networkd[1185]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:01:07.350034 systemd[1]: Reached target network.target. Oct 2 19:01:07.361448 kernel: audit: type=1130 audit(1696273267.348:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.362347 systemd[1]: Starting iscsiuio.service... Oct 2 19:01:07.370539 systemd-networkd[1185]: eth0: Link UP Oct 2 19:01:07.370547 systemd-networkd[1185]: eth0: Gained carrier Oct 2 19:01:07.382677 systemd[1]: Started iscsiuio.service. Oct 2 19:01:07.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.386635 systemd[1]: Starting iscsid.service... Oct 2 19:01:07.396499 kernel: audit: type=1130 audit(1696273267.383:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.396717 systemd-networkd[1185]: eth0: DHCPv4 address 172.31.29.187/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:01:07.413228 iscsid[1190]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:01:07.416360 iscsid[1190]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:01:07.416360 iscsid[1190]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:01:07.416360 iscsid[1190]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:01:07.416360 iscsid[1190]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:01:07.416360 iscsid[1190]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:01:07.451264 kernel: audit: type=1130 audit(1696273267.434:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.429149 systemd[1]: Started iscsid.service. Oct 2 19:01:07.448647 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:01:07.491907 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:01:07.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.493393 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:01:07.512574 kernel: audit: type=1130 audit(1696273267.490:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.493512 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:01:07.493843 systemd[1]: Reached target remote-fs.target. Oct 2 19:01:07.503315 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:01:07.538767 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:01:07.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.550264 kernel: audit: type=1130 audit(1696273267.541:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.820107 ignition[1121]: Ignition 2.14.0 Oct 2 19:01:07.821867 ignition[1121]: Stage: fetch-offline Oct 2 19:01:07.823682 ignition[1121]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:07.826128 ignition[1121]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:07.843881 ignition[1121]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:07.845562 ignition[1121]: Ignition finished successfully Oct 2 19:01:07.849330 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:01:07.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.853567 systemd[1]: Starting ignition-fetch.service... Oct 2 19:01:07.862760 kernel: audit: type=1130 audit(1696273267.850:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.884238 ignition[1209]: Ignition 2.14.0 Oct 2 19:01:07.884268 ignition[1209]: Stage: fetch Oct 2 19:01:07.884630 ignition[1209]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:07.884689 ignition[1209]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:07.902132 ignition[1209]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:07.904471 ignition[1209]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:07.914655 ignition[1209]: INFO : PUT result: OK Oct 2 19:01:07.917689 ignition[1209]: DEBUG : parsed url from cmdline: "" Oct 2 19:01:07.917689 ignition[1209]: INFO : no config URL provided Oct 2 19:01:07.917689 ignition[1209]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:01:07.923795 ignition[1209]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:01:07.923795 ignition[1209]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:07.928475 ignition[1209]: INFO : PUT result: OK Oct 2 19:01:07.928475 ignition[1209]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:01:07.932356 ignition[1209]: INFO : GET result: OK Oct 2 19:01:07.932356 ignition[1209]: DEBUG : parsing config with SHA512: 4ee9b577acf3a24521fe52dca017f8fe3a514a4afed8bbd28cb3d4e748d0bf7635e665a27741866617454d1de02601e65280f11bd866bcefb75ca5285a3da5e7 Oct 2 19:01:07.976189 unknown[1209]: fetched base config from "system" Oct 2 19:01:07.976256 unknown[1209]: fetched base config from "system" Oct 2 19:01:07.976278 unknown[1209]: fetched user config from "aws" Oct 2 19:01:07.982543 ignition[1209]: fetch: fetch complete Oct 2 19:01:07.982871 ignition[1209]: fetch: fetch passed Oct 2 19:01:07.984015 ignition[1209]: Ignition finished successfully Oct 2 19:01:07.987913 systemd[1]: Finished ignition-fetch.service. Oct 2 19:01:07.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:07.993492 systemd[1]: Starting ignition-kargs.service... Oct 2 19:01:08.026646 ignition[1216]: Ignition 2.14.0 Oct 2 19:01:08.026675 ignition[1216]: Stage: kargs Oct 2 19:01:08.027028 ignition[1216]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:08.027087 ignition[1216]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:08.043162 ignition[1216]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:08.045559 ignition[1216]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:08.049225 ignition[1216]: INFO : PUT result: OK Oct 2 19:01:08.054263 ignition[1216]: kargs: kargs passed Oct 2 19:01:08.054371 ignition[1216]: Ignition finished successfully Oct 2 19:01:08.059009 systemd[1]: Finished ignition-kargs.service. Oct 2 19:01:08.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.063645 systemd[1]: Starting ignition-disks.service... Oct 2 19:01:08.093376 ignition[1222]: Ignition 2.14.0 Oct 2 19:01:08.093405 ignition[1222]: Stage: disks Oct 2 19:01:08.093761 ignition[1222]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:08.093819 ignition[1222]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:08.109771 ignition[1222]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:08.112162 ignition[1222]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:08.115979 ignition[1222]: INFO : PUT result: OK Oct 2 19:01:08.120644 ignition[1222]: disks: disks passed Oct 2 19:01:08.120922 ignition[1222]: Ignition finished successfully Oct 2 19:01:08.125736 systemd[1]: Finished ignition-disks.service. Oct 2 19:01:08.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.128996 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:01:08.131701 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:01:08.135721 systemd[1]: Reached target local-fs.target. Oct 2 19:01:08.138540 systemd[1]: Reached target sysinit.target. Oct 2 19:01:08.139976 systemd[1]: Reached target basic.target. Oct 2 19:01:08.144417 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:01:08.204492 systemd-fsck[1230]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:01:08.212932 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:01:08.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.217430 systemd[1]: Mounting sysroot.mount... Oct 2 19:01:08.248042 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:01:08.247919 systemd[1]: Mounted sysroot.mount. Oct 2 19:01:08.251375 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:01:08.268878 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:01:08.271113 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:01:08.271226 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:01:08.271290 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:01:08.298390 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:01:08.311863 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:01:08.316731 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:01:08.346037 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1247) Oct 2 19:01:08.346104 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:01:08.346130 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:01:08.348393 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:01:08.352904 initrd-setup-root[1252]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:01:08.359248 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:01:08.367227 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:01:08.396738 initrd-setup-root[1278]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:01:08.416274 initrd-setup-root[1286]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:01:08.435643 initrd-setup-root[1294]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:01:08.623779 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:01:08.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.628438 systemd[1]: Starting ignition-mount.service... Oct 2 19:01:08.635561 systemd[1]: Starting sysroot-boot.service... Oct 2 19:01:08.664049 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:01:08.664260 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:01:08.683335 systemd-networkd[1185]: eth0: Gained IPv6LL Oct 2 19:01:08.698467 systemd[1]: Finished sysroot-boot.service. Oct 2 19:01:08.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.717718 ignition[1315]: INFO : Ignition 2.14.0 Oct 2 19:01:08.717718 ignition[1315]: INFO : Stage: mount Oct 2 19:01:08.721754 ignition[1315]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:08.721754 ignition[1315]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:08.740501 ignition[1315]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:08.740501 ignition[1315]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:08.746209 ignition[1315]: INFO : PUT result: OK Oct 2 19:01:08.751157 ignition[1315]: INFO : mount: mount passed Oct 2 19:01:08.752861 ignition[1315]: INFO : Ignition finished successfully Oct 2 19:01:08.756242 systemd[1]: Finished ignition-mount.service. Oct 2 19:01:08.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:08.761045 systemd[1]: Starting ignition-files.service... Oct 2 19:01:08.784488 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:01:08.808236 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1322) Oct 2 19:01:08.814146 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:01:08.814185 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:01:08.814235 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:01:08.823229 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:01:08.828238 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:01:08.862884 ignition[1341]: INFO : Ignition 2.14.0 Oct 2 19:01:08.862884 ignition[1341]: INFO : Stage: files Oct 2 19:01:08.866406 ignition[1341]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:08.866406 ignition[1341]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:08.883158 ignition[1341]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:08.885765 ignition[1341]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:08.888267 ignition[1341]: INFO : PUT result: OK Oct 2 19:01:08.893185 ignition[1341]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:01:08.896898 ignition[1341]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:01:08.899756 ignition[1341]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:01:08.932766 ignition[1341]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:01:08.936035 ignition[1341]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:01:08.940161 unknown[1341]: wrote ssh authorized keys file for user: core Oct 2 19:01:08.942470 ignition[1341]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:01:08.946078 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:01:08.950125 ignition[1341]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:01:09.259249 ignition[1341]: INFO : GET result: OK Oct 2 19:01:09.775416 ignition[1341]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:01:09.780569 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:01:09.780569 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:01:09.780569 ignition[1341]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:01:10.044760 ignition[1341]: INFO : GET result: OK Oct 2 19:01:10.295272 ignition[1341]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:01:10.302973 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:01:10.302973 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:01:10.302973 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:01:10.302973 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:01:10.302973 ignition[1341]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:01:10.345046 ignition[1341]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1480814100" Oct 2 19:01:10.352048 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1343) Oct 2 19:01:10.352085 ignition[1341]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1480814100": device or resource busy Oct 2 19:01:10.352085 ignition[1341]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1480814100", trying btrfs: device or resource busy Oct 2 19:01:10.352085 ignition[1341]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1480814100" Oct 2 19:01:10.362214 ignition[1341]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1480814100" Oct 2 19:01:10.371529 ignition[1341]: INFO : op(3): [started] unmounting "/mnt/oem1480814100" Oct 2 19:01:10.371529 ignition[1341]: INFO : op(3): [finished] unmounting "/mnt/oem1480814100" Oct 2 19:01:10.371529 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:01:10.380184 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:01:10.380184 ignition[1341]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:01:10.379405 systemd[1]: mnt-oem1480814100.mount: Deactivated successfully. Oct 2 19:01:10.465174 ignition[1341]: INFO : GET result: OK Oct 2 19:01:11.797350 ignition[1341]: DEBUG : file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Oct 2 19:01:11.802639 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:01:11.806059 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:01:11.806059 ignition[1341]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:01:11.860878 ignition[1341]: INFO : GET result: OK Oct 2 19:01:13.315106 ignition[1341]: DEBUG : file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Oct 2 19:01:13.320578 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:01:13.320578 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:01:13.320578 ignition[1341]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:01:13.363590 ignition[1341]: INFO : GET result: OK Oct 2 19:01:14.002418 ignition[1341]: DEBUG : file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Oct 2 19:01:14.007243 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:01:14.010748 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:01:14.014330 ignition[1341]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:01:14.234428 ignition[1341]: INFO : GET result: OK Oct 2 19:01:14.546267 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:01:14.553165 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:01:14.553165 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:01:14.553165 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:01:14.553165 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:01:14.553165 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:01:14.553165 ignition[1341]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:01:14.577583 ignition[1341]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem539046783" Oct 2 19:01:14.577583 ignition[1341]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem539046783": device or resource busy Oct 2 19:01:14.577583 ignition[1341]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem539046783", trying btrfs: device or resource busy Oct 2 19:01:14.577583 ignition[1341]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem539046783" Oct 2 19:01:14.605004 ignition[1341]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem539046783" Oct 2 19:01:14.609379 ignition[1341]: INFO : op(6): [started] unmounting "/mnt/oem539046783" Oct 2 19:01:14.612112 ignition[1341]: INFO : op(6): [finished] unmounting "/mnt/oem539046783" Oct 2 19:01:14.616345 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:01:14.616345 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:01:14.616345 ignition[1341]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:01:14.628506 systemd[1]: mnt-oem539046783.mount: Deactivated successfully. Oct 2 19:01:14.642988 ignition[1341]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2870153629" Oct 2 19:01:14.646772 ignition[1341]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2870153629": device or resource busy Oct 2 19:01:14.646772 ignition[1341]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2870153629", trying btrfs: device or resource busy Oct 2 19:01:14.646772 ignition[1341]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2870153629" Oct 2 19:01:14.660216 ignition[1341]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2870153629" Oct 2 19:01:14.660216 ignition[1341]: INFO : op(9): [started] unmounting "/mnt/oem2870153629" Oct 2 19:01:14.660216 ignition[1341]: INFO : op(9): [finished] unmounting "/mnt/oem2870153629" Oct 2 19:01:14.660216 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:01:14.660216 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:01:14.660216 ignition[1341]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:01:14.689681 ignition[1341]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1684043955" Oct 2 19:01:14.689681 ignition[1341]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1684043955": device or resource busy Oct 2 19:01:14.689681 ignition[1341]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1684043955", trying btrfs: device or resource busy Oct 2 19:01:14.689681 ignition[1341]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1684043955" Oct 2 19:01:14.689681 ignition[1341]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1684043955" Oct 2 19:01:14.689681 ignition[1341]: INFO : op(c): [started] unmounting "/mnt/oem1684043955" Oct 2 19:01:14.689681 ignition[1341]: INFO : op(c): [finished] unmounting "/mnt/oem1684043955" Oct 2 19:01:14.689681 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:01:14.689681 ignition[1341]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:01:14.689681 ignition[1341]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:01:14.689681 ignition[1341]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:01:14.724225 ignition[1341]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:01:14.822779 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:01:14.822827 kernel: audit: type=1130 audit(1696273274.790:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.788294 systemd[1]: Finished ignition-files.service. Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:01:14.824621 ignition[1341]: INFO : files: files passed Oct 2 19:01:14.824621 ignition[1341]: INFO : Ignition finished successfully Oct 2 19:01:14.887396 kernel: audit: type=1130 audit(1696273274.856:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.803641 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:01:14.822832 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:01:14.899482 initrd-setup-root-after-ignition[1365]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:01:14.828892 systemd[1]: Starting ignition-quench.service... Oct 2 19:01:14.855243 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:01:14.866984 systemd[1]: Reached target ignition-complete.target. Oct 2 19:01:14.899976 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:01:14.917652 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:01:14.919974 systemd[1]: Finished ignition-quench.service. Oct 2 19:01:14.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.922000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.938177 kernel: audit: type=1130 audit(1696273274.922:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.938261 kernel: audit: type=1131 audit(1696273274.922:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.967632 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:01:14.969924 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:01:14.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.978454 systemd[1]: Reached target initrd-fs.target. Oct 2 19:01:14.991086 kernel: audit: type=1130 audit(1696273274.972:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.991125 kernel: audit: type=1131 audit(1696273274.977:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:14.991134 systemd[1]: Reached target initrd.target. Oct 2 19:01:14.992784 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:01:14.994209 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:01:15.037389 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:01:15.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.041249 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:01:15.051282 kernel: audit: type=1130 audit(1696273275.036:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.069928 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:01:15.073490 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:01:15.077340 systemd[1]: Stopped target timers.target. Oct 2 19:01:15.080559 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:01:15.082754 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:01:15.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.091437 systemd[1]: Stopped target initrd.target. Oct 2 19:01:15.098327 kernel: audit: type=1131 audit(1696273275.084:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.095122 systemd[1]: Stopped target basic.target. Oct 2 19:01:15.096874 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:01:15.100331 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:01:15.103681 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:01:15.107391 systemd[1]: Stopped target remote-fs.target. Oct 2 19:01:15.110889 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:01:15.134260 kernel: audit: type=1131 audit(1696273275.123:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.114502 systemd[1]: Stopped target sysinit.target. Oct 2 19:01:15.116311 systemd[1]: Stopped target local-fs.target. Oct 2 19:01:15.119560 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:01:15.121433 systemd[1]: Stopped target swap.target. Oct 2 19:01:15.123006 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:01:15.123229 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:01:15.125261 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:01:15.138907 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:01:15.145398 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:01:15.152483 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:01:15.162139 kernel: audit: type=1131 audit(1696273275.151:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.162174 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:01:15.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.166304 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:01:15.168423 systemd[1]: Stopped ignition-files.service. Oct 2 19:01:15.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.173097 systemd[1]: Stopping ignition-mount.service... Oct 2 19:01:15.175984 systemd[1]: Stopping iscsiuio.service... Oct 2 19:01:15.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.184000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.177416 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:01:15.177649 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:01:15.181933 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:01:15.183623 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:01:15.183965 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:01:15.187683 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:01:15.187921 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:01:15.210880 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:01:15.212838 systemd[1]: Stopped iscsiuio.service. Oct 2 19:01:15.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.228843 ignition[1379]: INFO : Ignition 2.14.0 Oct 2 19:01:15.234077 ignition[1379]: INFO : Stage: umount Oct 2 19:01:15.235449 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:01:15.235661 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:01:15.239274 ignition[1379]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:01:15.239274 ignition[1379]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:01:15.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.259677 ignition[1379]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:01:15.262288 ignition[1379]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:01:15.265594 ignition[1379]: INFO : PUT result: OK Oct 2 19:01:15.271309 ignition[1379]: INFO : umount: umount passed Oct 2 19:01:15.273150 ignition[1379]: INFO : Ignition finished successfully Oct 2 19:01:15.276039 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:01:15.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.276268 systemd[1]: Stopped ignition-mount.service. Oct 2 19:01:15.279690 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:01:15.279778 systemd[1]: Stopped ignition-disks.service. Oct 2 19:01:15.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.286948 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:01:15.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.287043 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:01:15.288917 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:01:15.288995 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:01:15.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.297377 systemd[1]: Stopped target network.target. Oct 2 19:01:15.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.299045 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:01:15.299133 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:01:15.301044 systemd[1]: Stopped target paths.target. Oct 2 19:01:15.302554 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:01:15.306547 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:01:15.312570 systemd[1]: Stopped target slices.target. Oct 2 19:01:15.314179 systemd[1]: Stopped target sockets.target. Oct 2 19:01:15.318621 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:01:15.320719 systemd[1]: Closed iscsid.socket. Oct 2 19:01:15.331548 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:01:15.331646 systemd[1]: Closed iscsiuio.socket. Oct 2 19:01:15.339790 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:01:15.339900 systemd[1]: Stopped ignition-setup.service. Oct 2 19:01:15.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.345163 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:01:15.345493 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:01:15.355255 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:01:15.358865 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:01:15.359084 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:01:15.373000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:01:15.372255 systemd-networkd[1185]: eth0: DHCPv6 lease lost Oct 2 19:01:15.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.381489 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:01:15.382176 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:01:15.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.385961 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:01:15.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.386152 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:01:15.391000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:01:15.392681 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:01:15.392779 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:01:15.396343 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:01:15.399842 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:01:15.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.404347 systemd[1]: Stopping network-cleanup.service... Oct 2 19:01:15.411528 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:01:15.411645 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:01:15.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.417894 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:01:15.417986 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:01:15.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.419859 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:01:15.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.419944 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:01:15.423805 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:01:15.437816 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:01:15.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.438038 systemd[1]: Stopped network-cleanup.service. Oct 2 19:01:15.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.442034 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:01:15.442394 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:01:15.446111 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:01:15.446191 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:01:15.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:15.449084 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:01:15.449154 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:01:15.450891 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:01:15.450974 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:01:15.452704 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:01:15.452780 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:01:15.454498 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:01:15.454575 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:01:15.458954 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:01:15.460665 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:01:15.460771 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:01:15.486108 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:01:15.486314 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:01:15.490591 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:01:15.495418 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:01:15.522387 systemd[1]: Switching root. Oct 2 19:01:15.573929 iscsid[1190]: iscsid shutting down. Oct 2 19:01:15.575562 systemd-journald[309]: Received SIGTERM from PID 1 (n/a). Oct 2 19:01:15.575649 systemd-journald[309]: Journal stopped Oct 2 19:01:21.779490 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:01:21.780070 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:01:21.780109 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:01:21.780142 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:01:21.780173 kernel: SELinux: policy capability open_perms=1 Oct 2 19:01:21.780282 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:01:21.780315 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:01:21.780351 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:01:21.780383 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:01:21.780413 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:01:21.780514 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:01:21.780550 systemd[1]: Successfully loaded SELinux policy in 92.904ms. Oct 2 19:01:21.780778 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.645ms. Oct 2 19:01:21.780818 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:01:21.780856 systemd[1]: Detected virtualization amazon. Oct 2 19:01:21.780891 systemd[1]: Detected architecture arm64. Oct 2 19:01:21.780924 systemd[1]: Detected first boot. Oct 2 19:01:21.780958 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:01:21.780989 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:01:21.781019 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:01:21.781057 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:01:21.781161 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:01:21.781272 kernel: kauditd_printk_skb: 38 callbacks suppressed Oct 2 19:01:21.781310 kernel: audit: type=1334 audit(1696273281.229:82): prog-id=12 op=LOAD Oct 2 19:01:21.781341 kernel: audit: type=1334 audit(1696273281.232:83): prog-id=3 op=UNLOAD Oct 2 19:01:21.781370 kernel: audit: type=1334 audit(1696273281.234:84): prog-id=13 op=LOAD Oct 2 19:01:21.781401 kernel: audit: type=1334 audit(1696273281.237:85): prog-id=14 op=LOAD Oct 2 19:01:21.781430 kernel: audit: type=1334 audit(1696273281.237:86): prog-id=4 op=UNLOAD Oct 2 19:01:21.781462 kernel: audit: type=1334 audit(1696273281.237:87): prog-id=5 op=UNLOAD Oct 2 19:01:21.781494 kernel: audit: type=1334 audit(1696273281.239:88): prog-id=15 op=LOAD Oct 2 19:01:21.781522 kernel: audit: type=1334 audit(1696273281.239:89): prog-id=12 op=UNLOAD Oct 2 19:01:21.781556 kernel: audit: type=1334 audit(1696273281.242:90): prog-id=16 op=LOAD Oct 2 19:01:21.781590 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:01:21.781620 kernel: audit: type=1334 audit(1696273281.245:91): prog-id=17 op=LOAD Oct 2 19:01:21.781648 systemd[1]: Stopped iscsid.service. Oct 2 19:01:21.781681 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:01:21.781710 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:01:21.781743 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:01:21.781773 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:01:21.781805 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:01:21.781839 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:01:21.781872 systemd[1]: Created slice system-getty.slice. Oct 2 19:01:21.781905 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:01:21.781940 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:01:21.781970 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:01:21.782001 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:01:21.782032 systemd[1]: Created slice user.slice. Oct 2 19:01:21.782066 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:01:21.782097 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:01:21.782128 systemd[1]: Set up automount boot.automount. Oct 2 19:01:21.782158 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:01:21.782187 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:01:21.782238 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:01:21.782270 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:01:21.782300 systemd[1]: Reached target integritysetup.target. Oct 2 19:01:21.782332 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:01:21.782367 systemd[1]: Reached target remote-fs.target. Oct 2 19:01:21.782399 systemd[1]: Reached target slices.target. Oct 2 19:01:21.782431 systemd[1]: Reached target swap.target. Oct 2 19:01:21.782460 systemd[1]: Reached target torcx.target. Oct 2 19:01:21.782492 systemd[1]: Reached target veritysetup.target. Oct 2 19:01:21.782523 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:01:21.782557 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:01:21.782588 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:01:21.782621 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:01:21.782650 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:01:21.782684 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:01:21.782716 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:01:21.782746 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:01:21.782776 systemd[1]: Mounting media.mount... Oct 2 19:01:21.782805 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:01:21.782835 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:01:21.782865 systemd[1]: Mounting tmp.mount... Oct 2 19:01:21.782894 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:01:21.782924 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:01:21.782959 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:01:21.782991 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:01:21.783021 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:01:21.783050 systemd[1]: Starting modprobe@drm.service... Oct 2 19:01:21.783080 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:01:21.783111 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:01:21.783141 systemd[1]: Starting modprobe@loop.service... Oct 2 19:01:21.783172 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:01:21.783223 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:01:21.783263 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:01:21.783294 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:01:21.783327 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:01:21.783357 systemd[1]: Stopped systemd-journald.service. Oct 2 19:01:21.783386 systemd[1]: Starting systemd-journald.service... Oct 2 19:01:21.783415 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:01:21.783445 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:01:21.783476 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:01:21.783505 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:01:21.783540 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:01:21.783570 systemd[1]: Stopped verity-setup.service. Oct 2 19:01:21.783602 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:01:21.783632 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:01:21.783663 systemd[1]: Mounted media.mount. Oct 2 19:01:21.783698 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:01:21.783727 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:01:21.783757 systemd[1]: Mounted tmp.mount. Oct 2 19:01:21.783789 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:01:21.783819 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:01:21.783854 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:01:21.783885 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:01:21.783915 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:01:21.783949 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:01:21.783982 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:01:21.784039 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:01:21.784080 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:01:21.784185 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:01:21.789322 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:01:21.789361 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:01:21.789392 systemd[1]: Reached target network-pre.target. Oct 2 19:01:21.789424 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:01:21.789460 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:01:21.789496 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:01:21.789527 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:01:21.789557 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:01:21.789592 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:01:21.789631 systemd[1]: Finished modprobe@drm.service. Oct 2 19:01:21.789668 systemd-journald[1491]: Journal started Oct 2 19:01:21.789769 systemd-journald[1491]: Runtime Journal (/run/log/journal/ec2f62ff16b9fc362cb1fc7dfa2c671f) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:01:16.482000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:01:16.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:01:21.794710 systemd[1]: Started systemd-journald.service. Oct 2 19:01:16.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:01:16.657000 audit: BPF prog-id=10 op=LOAD Oct 2 19:01:16.657000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:01:16.657000 audit: BPF prog-id=11 op=LOAD Oct 2 19:01:16.657000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:01:21.229000 audit: BPF prog-id=12 op=LOAD Oct 2 19:01:21.232000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:01:21.234000 audit: BPF prog-id=13 op=LOAD Oct 2 19:01:21.237000 audit: BPF prog-id=14 op=LOAD Oct 2 19:01:21.237000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:01:21.237000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:01:21.239000 audit: BPF prog-id=15 op=LOAD Oct 2 19:01:21.239000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:01:21.242000 audit: BPF prog-id=16 op=LOAD Oct 2 19:01:21.245000 audit: BPF prog-id=17 op=LOAD Oct 2 19:01:21.245000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:01:21.245000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:01:21.247000 audit: BPF prog-id=18 op=LOAD Oct 2 19:01:21.247000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:01:21.250000 audit: BPF prog-id=19 op=LOAD Oct 2 19:01:21.252000 audit: BPF prog-id=20 op=LOAD Oct 2 19:01:21.252000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:01:21.252000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:01:21.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.262000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:01:21.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.562000 audit: BPF prog-id=21 op=LOAD Oct 2 19:01:21.562000 audit: BPF prog-id=22 op=LOAD Oct 2 19:01:21.562000 audit: BPF prog-id=23 op=LOAD Oct 2 19:01:21.564000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:01:21.569000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:01:21.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.775000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:01:21.775000 audit[1491]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffe7d8dd30 a2=4000 a3=1 items=0 ppid=1 pid=1491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:21.775000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:01:21.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:16.897568 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:01:21.228257 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:01:16.908447 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:01:21.254825 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:01:16.908498 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:01:16.908731 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:01:21.800873 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:01:16.908758 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:01:16.908843 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:01:16.908875 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:01:16.909325 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:01:16.909411 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:01:16.909446 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:01:16.910344 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:01:16.910428 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:01:16.910473 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:01:16.910512 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:01:16.910557 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:01:16.910596 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:16Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:01:20.374114 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:20Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:01:20.374666 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:20Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:01:20.374902 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:20Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:01:20.375373 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:20Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:01:20.375479 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:20Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:01:20.375631 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:01:20Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:01:21.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.813659 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:01:21.836941 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:01:21.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.839085 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:01:21.844232 kernel: fuse: init (API version 7.34) Oct 2 19:01:21.844331 kernel: loop: module loaded Oct 2 19:01:21.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.852045 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:01:21.852369 systemd[1]: Finished modprobe@loop.service. Oct 2 19:01:21.854980 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:01:21.855259 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:01:21.862889 systemd-journald[1491]: Time spent on flushing to /var/log/journal/ec2f62ff16b9fc362cb1fc7dfa2c671f is 54.501ms for 1154 entries. Oct 2 19:01:21.862889 systemd-journald[1491]: System Journal (/var/log/journal/ec2f62ff16b9fc362cb1fc7dfa2c671f) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:01:21.925578 systemd-journald[1491]: Received client request to flush runtime journal. Oct 2 19:01:21.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:21.860659 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:01:21.862531 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:01:21.876418 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:01:21.928120 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:01:22.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.001465 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:01:22.005629 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:01:22.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.032440 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:01:22.036654 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:01:22.067306 udevadm[1531]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:01:22.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.157561 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:01:22.753300 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:01:22.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.757000 audit: BPF prog-id=24 op=LOAD Oct 2 19:01:22.757000 audit: BPF prog-id=25 op=LOAD Oct 2 19:01:22.757000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:01:22.757000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:01:22.759643 systemd[1]: Starting systemd-udevd.service... Oct 2 19:01:22.807547 systemd-udevd[1532]: Using default interface naming scheme 'v252'. Oct 2 19:01:22.849743 systemd[1]: Started systemd-udevd.service. Oct 2 19:01:22.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:22.854000 audit: BPF prog-id=26 op=LOAD Oct 2 19:01:22.856757 systemd[1]: Starting systemd-networkd.service... Oct 2 19:01:22.869000 audit: BPF prog-id=27 op=LOAD Oct 2 19:01:22.869000 audit: BPF prog-id=28 op=LOAD Oct 2 19:01:22.869000 audit: BPF prog-id=29 op=LOAD Oct 2 19:01:22.871918 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:01:22.996001 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:01:23.006897 systemd[1]: Started systemd-userdbd.service. Oct 2 19:01:23.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.039887 (udev-worker)[1537]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:01:23.188982 systemd-networkd[1542]: lo: Link UP Oct 2 19:01:23.189136 systemd-networkd[1542]: lo: Gained carrier Oct 2 19:01:23.190073 systemd-networkd[1542]: Enumeration completed Oct 2 19:01:23.190260 systemd[1]: Started systemd-networkd.service. Oct 2 19:01:23.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.199604 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:01:23.203700 systemd-networkd[1542]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:01:23.209248 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:01:23.209772 systemd-networkd[1542]: eth0: Link UP Oct 2 19:01:23.210072 systemd-networkd[1542]: eth0: Gained carrier Oct 2 19:01:23.219561 systemd-networkd[1542]: eth0: DHCPv4 address 172.31.29.187/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:01:23.345304 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1537) Oct 2 19:01:23.543578 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:01:23.546392 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:01:23.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.550497 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:01:23.637430 lvm[1651]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:01:23.674134 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:01:23.676341 systemd[1]: Reached target cryptsetup.target. Oct 2 19:01:23.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.680412 systemd[1]: Starting lvm2-activation.service... Oct 2 19:01:23.694348 lvm[1652]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:01:23.733155 systemd[1]: Finished lvm2-activation.service. Oct 2 19:01:23.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.735274 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:01:23.737099 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:01:23.737154 systemd[1]: Reached target local-fs.target. Oct 2 19:01:23.739029 systemd[1]: Reached target machines.target. Oct 2 19:01:23.743807 systemd[1]: Starting ldconfig.service... Oct 2 19:01:23.745994 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:01:23.746131 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:01:23.748534 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:01:23.753598 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:01:23.758111 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:01:23.760184 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:01:23.760329 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:01:23.762557 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:01:23.799538 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1654 (bootctl) Oct 2 19:01:23.801833 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:01:23.847412 systemd-tmpfiles[1657]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:01:23.861384 systemd-tmpfiles[1657]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:01:23.879084 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:01:23.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.898910 systemd-tmpfiles[1657]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:01:23.980476 systemd-fsck[1663]: fsck.fat 4.2 (2021-01-31) Oct 2 19:01:23.980476 systemd-fsck[1663]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:01:23.985612 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:01:23.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:23.990313 systemd[1]: Mounting boot.mount... Oct 2 19:01:24.032114 systemd[1]: Mounted boot.mount. Oct 2 19:01:24.056897 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:01:24.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.226132 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:01:24.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.230534 systemd[1]: Starting audit-rules.service... Oct 2 19:01:24.234671 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:01:24.239557 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:01:24.243000 audit: BPF prog-id=30 op=LOAD Oct 2 19:01:24.248636 systemd[1]: Starting systemd-resolved.service... Oct 2 19:01:24.252000 audit: BPF prog-id=31 op=LOAD Oct 2 19:01:24.255427 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:01:24.260661 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:01:24.296000 audit[1683]: SYSTEM_BOOT pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.309847 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:01:24.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.312510 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:01:24.329894 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:01:24.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.384261 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:01:24.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.459782 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:01:24.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.462485 systemd[1]: Reached target time-set.target. Oct 2 19:01:24.489273 systemd-resolved[1680]: Positive Trust Anchors: Oct 2 19:01:24.489302 systemd-resolved[1680]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:01:24.489353 systemd-resolved[1680]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:01:24.541874 systemd-timesyncd[1681]: Contacted time server 65.100.46.166:123 (0.flatcar.pool.ntp.org). Oct 2 19:01:24.542247 systemd-timesyncd[1681]: Initial clock synchronization to Mon 2023-10-02 19:01:24.194938 UTC. Oct 2 19:01:24.561151 systemd-resolved[1680]: Defaulting to hostname 'linux'. Oct 2 19:01:24.565174 systemd[1]: Started systemd-resolved.service. Oct 2 19:01:24.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:24.567227 systemd[1]: Reached target network.target. Oct 2 19:01:24.568965 systemd[1]: Reached target nss-lookup.target. Oct 2 19:01:24.571549 augenrules[1698]: No rules Oct 2 19:01:24.570000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:01:24.570000 audit[1698]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcd894910 a2=420 a3=0 items=0 ppid=1677 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:24.570000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:01:24.574167 systemd[1]: Finished audit-rules.service. Oct 2 19:01:24.730217 ldconfig[1653]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:01:24.774129 systemd[1]: Finished ldconfig.service. Oct 2 19:01:24.778113 systemd[1]: Starting systemd-update-done.service... Oct 2 19:01:24.800879 systemd[1]: Finished systemd-update-done.service. Oct 2 19:01:24.803530 systemd[1]: Reached target sysinit.target. Oct 2 19:01:24.811530 systemd[1]: Started motdgen.path. Oct 2 19:01:24.813317 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:01:24.815922 systemd[1]: Started logrotate.timer. Oct 2 19:01:24.817975 systemd[1]: Started mdadm.timer. Oct 2 19:01:24.819864 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:01:24.821627 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:01:24.821811 systemd[1]: Reached target paths.target. Oct 2 19:01:24.828014 systemd[1]: Reached target timers.target. Oct 2 19:01:24.830414 systemd[1]: Listening on dbus.socket. Oct 2 19:01:24.834144 systemd[1]: Starting docker.socket... Oct 2 19:01:24.892313 systemd[1]: Listening on sshd.socket. Oct 2 19:01:24.894582 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:01:24.895592 systemd[1]: Listening on docker.socket. Oct 2 19:01:24.897503 systemd[1]: Reached target sockets.target. Oct 2 19:01:24.899263 systemd[1]: Reached target basic.target. Oct 2 19:01:24.900929 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:01:24.901113 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:01:24.905505 systemd[1]: Starting containerd.service... Oct 2 19:01:24.916267 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:01:24.920512 systemd[1]: Starting dbus.service... Oct 2 19:01:24.923930 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:01:24.929017 systemd[1]: Starting extend-filesystems.service... Oct 2 19:01:24.930761 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:01:24.934335 systemd[1]: Starting motdgen.service... Oct 2 19:01:24.938746 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:01:24.943513 systemd[1]: Starting prepare-critools.service... Oct 2 19:01:24.947944 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:01:24.952665 systemd[1]: Starting sshd-keygen.service... Oct 2 19:01:24.966532 systemd[1]: Starting systemd-logind.service... Oct 2 19:01:24.968159 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:01:24.968297 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:01:24.969172 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:01:24.973267 systemd[1]: Starting update-engine.service... Oct 2 19:01:24.977639 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:01:25.001337 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:01:25.001689 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:01:25.066430 systemd-networkd[1542]: eth0: Gained IPv6LL Oct 2 19:01:25.086668 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:01:25.088975 systemd[1]: Reached target network-online.target. Oct 2 19:01:25.096273 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:01:25.104060 systemd[1]: Started nvidia.service. Oct 2 19:01:25.111690 jq[1726]: true Oct 2 19:01:25.114731 jq[1717]: false Oct 2 19:01:25.126716 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:01:25.127124 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:01:25.140972 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:01:25.141368 systemd[1]: Finished motdgen.service. Oct 2 19:01:25.164642 extend-filesystems[1718]: Found nvme0n1 Oct 2 19:01:25.166530 extend-filesystems[1718]: Found nvme0n1p1 Oct 2 19:01:25.166530 extend-filesystems[1718]: Found nvme0n1p2 Oct 2 19:01:25.166530 extend-filesystems[1718]: Found nvme0n1p3 Oct 2 19:01:25.166530 extend-filesystems[1718]: Found usr Oct 2 19:01:25.166530 extend-filesystems[1718]: Found nvme0n1p4 Oct 2 19:01:25.166530 extend-filesystems[1718]: Found nvme0n1p6 Oct 2 19:01:25.166530 extend-filesystems[1718]: Found nvme0n1p7 Oct 2 19:01:25.184365 extend-filesystems[1718]: Found nvme0n1p9 Oct 2 19:01:25.184365 extend-filesystems[1718]: Checking size of /dev/nvme0n1p9 Oct 2 19:01:25.199464 jq[1746]: true Oct 2 19:01:25.240234 tar[1728]: ./ Oct 2 19:01:25.240234 tar[1728]: ./loopback Oct 2 19:01:25.243797 systemd-logind[1724]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:01:25.247645 systemd-logind[1724]: New seat seat0. Oct 2 19:01:25.253386 tar[1729]: crictl Oct 2 19:01:25.375000 tar[1728]: ./bandwidth Oct 2 19:01:25.399622 env[1740]: time="2023-10-02T19:01:25.399538423Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:01:25.594453 extend-filesystems[1718]: Resized partition /dev/nvme0n1p9 Oct 2 19:01:25.611971 dbus-daemon[1716]: [system] SELinux support is enabled Oct 2 19:01:25.612911 systemd[1]: Started dbus.service. Oct 2 19:01:25.617655 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:01:25.617702 systemd[1]: Reached target system-config.target. Oct 2 19:01:25.619561 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:01:25.619598 systemd[1]: Reached target user-config.target. Oct 2 19:01:25.631453 extend-filesystems[1780]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:01:25.640418 tar[1728]: ./ptp Oct 2 19:01:25.659044 systemd[1]: Started systemd-logind.service. Oct 2 19:01:25.661308 update_engine[1725]: I1002 19:01:25.658713 1725 main.cc:92] Flatcar Update Engine starting Oct 2 19:01:25.674115 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:01:25.677644 dbus-daemon[1716]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1542 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:01:25.685257 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:01:25.688130 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:01:25.718010 systemd[1]: Started update-engine.service. Oct 2 19:01:25.757383 update_engine[1725]: I1002 19:01:25.719069 1725 update_check_scheduler.cc:74] Next update check in 2m17s Oct 2 19:01:25.757478 env[1740]: time="2023-10-02T19:01:25.695399900Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:01:25.758397 systemd[1]: Started locksmithd.service. Oct 2 19:01:25.770247 env[1740]: time="2023-10-02T19:01:25.767782820Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:25.770375 bash[1773]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:01:25.771264 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:01:25.785725 env[1740]: time="2023-10-02T19:01:25.785653768Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:01:25.785940 env[1740]: time="2023-10-02T19:01:25.785907611Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:25.786485 env[1740]: time="2023-10-02T19:01:25.786444375Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:01:25.788554 env[1740]: time="2023-10-02T19:01:25.788487307Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:25.788987 env[1740]: time="2023-10-02T19:01:25.788747257Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:01:25.789142 env[1740]: time="2023-10-02T19:01:25.789110790Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:25.790072 env[1740]: time="2023-10-02T19:01:25.789922508Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:25.794338 env[1740]: time="2023-10-02T19:01:25.792791520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:01:25.795981 env[1740]: time="2023-10-02T19:01:25.795914064Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:01:25.799501 env[1740]: time="2023-10-02T19:01:25.799407236Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:01:25.799903 env[1740]: time="2023-10-02T19:01:25.799866178Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:01:25.803312 env[1740]: time="2023-10-02T19:01:25.803252598Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:01:25.847041 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:01:25.920021 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:01:25.920249 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:01:25.923231 dbus-daemon[1716]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1782 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:01:25.929446 systemd[1]: Starting polkit.service... Oct 2 19:01:25.939388 amazon-ssm-agent[1744]: 2023/10/02 19:01:25 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:01:25.952978 amazon-ssm-agent[1744]: Initializing new seelog logger Oct 2 19:01:25.956760 amazon-ssm-agent[1744]: New Seelog Logger Creation Complete Oct 2 19:01:25.960456 amazon-ssm-agent[1744]: 2023/10/02 19:01:25 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:01:25.960631 amazon-ssm-agent[1744]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:01:25.961281 amazon-ssm-agent[1744]: 2023/10/02 19:01:25 processing appconfig overrides Oct 2 19:01:26.010298 polkitd[1800]: Started polkitd version 121 Oct 2 19:01:26.028439 tar[1728]: ./vlan Oct 2 19:01:26.028593 env[1740]: time="2023-10-02T19:01:26.027741051Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:01:26.028593 env[1740]: time="2023-10-02T19:01:26.027802620Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:01:26.028593 env[1740]: time="2023-10-02T19:01:26.027835177Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:01:26.028593 env[1740]: time="2023-10-02T19:01:26.027900659Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.028593 env[1740]: time="2023-10-02T19:01:26.027933874Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.028593 env[1740]: time="2023-10-02T19:01:26.027965253Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.028593 env[1740]: time="2023-10-02T19:01:26.027994762Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.185589 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:01:26.035493 polkitd[1800]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.028737801Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.028784905Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.028817334Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.028847997Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.028877621Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.186832795Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.187029231Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.187462949Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.187515536Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.187547492Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.187699377Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.187733815Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.187765113Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.190489 env[1740]: time="2023-10-02T19:01:26.187794830Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.187831970Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.187862113Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.187890629Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.187921465Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.187955338Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.188243856Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.188279253Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.188311371Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.188339228Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.188369753Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.188396006Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.188429071Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:01:26.191253 env[1740]: time="2023-10-02T19:01:26.188495315Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:01:26.191632 polkitd[1800]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:01:26.192045 env[1740]: time="2023-10-02T19:01:26.188849385Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:01:26.192045 env[1740]: time="2023-10-02T19:01:26.188944422Z" level=info msg="Connect containerd service" Oct 2 19:01:26.192045 env[1740]: time="2023-10-02T19:01:26.188998614Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.192080911Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.192836396Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.192938338Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.193325079Z" level=info msg="Start subscribing containerd event" Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.194964059Z" level=info msg="Start recovering state" Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.195146468Z" level=info msg="Start event monitor" Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.195321396Z" level=info msg="Start snapshots syncer" Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.195369158Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.195388715Z" level=info msg="Start streaming server" Oct 2 19:01:26.214738 env[1740]: time="2023-10-02T19:01:26.196278640Z" level=info msg="containerd successfully booted in 0.798587s" Oct 2 19:01:26.198090 polkitd[1800]: Finished loading, compiling and executing 2 rules Oct 2 19:01:26.216509 extend-filesystems[1780]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:01:26.216509 extend-filesystems[1780]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:01:26.216509 extend-filesystems[1780]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:01:26.193177 systemd[1]: Started containerd.service. Oct 2 19:01:26.203643 dbus-daemon[1716]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:01:26.228465 extend-filesystems[1718]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:01:26.198735 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:01:26.206657 polkitd[1800]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:01:26.199083 systemd[1]: Finished extend-filesystems.service. Oct 2 19:01:26.203928 systemd[1]: Started polkit.service. Oct 2 19:01:26.239760 systemd-resolved[1680]: System hostname changed to 'ip-172-31-29-187'. Oct 2 19:01:26.239762 systemd-hostnamed[1782]: Hostname set to (transient) Oct 2 19:01:26.312977 coreos-metadata[1715]: Oct 02 19:01:26.311 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:01:26.314108 coreos-metadata[1715]: Oct 02 19:01:26.313 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:01:26.317711 coreos-metadata[1715]: Oct 02 19:01:26.314 INFO Fetch successful Oct 2 19:01:26.317999 coreos-metadata[1715]: Oct 02 19:01:26.317 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:01:26.318538 coreos-metadata[1715]: Oct 02 19:01:26.318 INFO Fetch successful Oct 2 19:01:26.340393 unknown[1715]: wrote ssh authorized keys file for user: core Oct 2 19:01:26.429926 tar[1728]: ./host-device Oct 2 19:01:26.453148 update-ssh-keys[1879]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:01:26.454374 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:01:26.583829 tar[1728]: ./tuning Oct 2 19:01:26.596536 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:01:26.616647 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:01:26.710623 tar[1728]: ./vrf Oct 2 19:01:26.804806 amazon-ssm-agent[1744]: 2023-10-02 19:01:26 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0b263f73dc73958d8 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0b263f73dc73958d8 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:01:26.804806 amazon-ssm-agent[1744]: status code: 400, request id: b85990e4-54b4-4cd9-8718-f8b573e037ab Oct 2 19:01:26.804806 amazon-ssm-agent[1744]: 2023-10-02 19:01:26 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:01:26.814275 tar[1728]: ./sbr Oct 2 19:01:26.925072 tar[1728]: ./tap Oct 2 19:01:27.023011 tar[1728]: ./dhcp Oct 2 19:01:27.246769 tar[1728]: ./static Oct 2 19:01:27.292607 tar[1728]: ./firewall Oct 2 19:01:27.397984 tar[1728]: ./macvlan Oct 2 19:01:27.459129 systemd[1]: Finished prepare-critools.service. Oct 2 19:01:27.490298 tar[1728]: ./dummy Oct 2 19:01:27.551063 tar[1728]: ./bridge Oct 2 19:01:27.617103 tar[1728]: ./ipvlan Oct 2 19:01:27.677174 tar[1728]: ./portmap Oct 2 19:01:27.734811 tar[1728]: ./host-local Oct 2 19:01:27.813908 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:01:27.875820 locksmithd[1791]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:01:28.606132 sshd_keygen[1738]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:01:28.662588 systemd[1]: Finished sshd-keygen.service. Oct 2 19:01:28.667087 systemd[1]: Starting issuegen.service... Oct 2 19:01:28.685860 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:01:28.686242 systemd[1]: Finished issuegen.service. Oct 2 19:01:28.690674 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:01:28.712438 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:01:28.717582 systemd[1]: Started getty@tty1.service. Oct 2 19:01:28.721898 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:01:28.724263 systemd[1]: Reached target getty.target. Oct 2 19:01:28.726790 systemd[1]: Reached target multi-user.target. Oct 2 19:01:28.731465 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:01:28.754904 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:01:28.755262 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:01:28.757556 systemd[1]: Startup finished in 1.181s (kernel) + 13.755s (initrd) + 12.401s (userspace) = 27.338s. Oct 2 19:01:33.386979 systemd[1]: Created slice system-sshd.slice. Oct 2 19:01:33.389678 systemd[1]: Started sshd@0-172.31.29.187:22-139.178.89.65:33476.service. Oct 2 19:01:33.587627 sshd[1927]: Accepted publickey for core from 139.178.89.65 port 33476 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:33.592375 sshd[1927]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:33.610205 systemd[1]: Created slice user-500.slice. Oct 2 19:01:33.612564 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:01:33.620281 systemd-logind[1724]: New session 1 of user core. Oct 2 19:01:33.637699 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:01:33.642585 systemd[1]: Starting user@500.service... Oct 2 19:01:33.653932 (systemd)[1930]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:33.852772 systemd[1930]: Queued start job for default target default.target. Oct 2 19:01:33.855154 systemd[1930]: Reached target paths.target. Oct 2 19:01:33.855457 systemd[1930]: Reached target sockets.target. Oct 2 19:01:33.855619 systemd[1930]: Reached target timers.target. Oct 2 19:01:33.855768 systemd[1930]: Reached target basic.target. Oct 2 19:01:33.855975 systemd[1930]: Reached target default.target. Oct 2 19:01:33.856064 systemd[1]: Started user@500.service. Oct 2 19:01:33.856873 systemd[1930]: Startup finished in 185ms. Oct 2 19:01:33.857910 systemd[1]: Started session-1.scope. Oct 2 19:01:34.010455 systemd[1]: Started sshd@1-172.31.29.187:22-139.178.89.65:33484.service. Oct 2 19:01:34.197685 sshd[1939]: Accepted publickey for core from 139.178.89.65 port 33484 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:34.200920 sshd[1939]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:34.208674 systemd-logind[1724]: New session 2 of user core. Oct 2 19:01:34.210576 systemd[1]: Started session-2.scope. Oct 2 19:01:34.368061 sshd[1939]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:34.374457 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:01:34.375618 systemd-logind[1724]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:01:34.376021 systemd[1]: sshd@1-172.31.29.187:22-139.178.89.65:33484.service: Deactivated successfully. Oct 2 19:01:34.378022 systemd-logind[1724]: Removed session 2. Oct 2 19:01:34.398302 systemd[1]: Started sshd@2-172.31.29.187:22-139.178.89.65:33490.service. Oct 2 19:01:34.577589 sshd[1945]: Accepted publickey for core from 139.178.89.65 port 33490 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:34.580773 sshd[1945]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:34.589583 systemd[1]: Started session-3.scope. Oct 2 19:01:34.590333 systemd-logind[1724]: New session 3 of user core. Oct 2 19:01:34.720128 sshd[1945]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:34.726617 systemd[1]: sshd@2-172.31.29.187:22-139.178.89.65:33490.service: Deactivated successfully. Oct 2 19:01:34.727825 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:01:34.728962 systemd-logind[1724]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:01:34.731463 systemd-logind[1724]: Removed session 3. Oct 2 19:01:34.753536 systemd[1]: Started sshd@3-172.31.29.187:22-139.178.89.65:33498.service. Oct 2 19:01:34.937358 sshd[1951]: Accepted publickey for core from 139.178.89.65 port 33498 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:34.940544 sshd[1951]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:34.948301 systemd-logind[1724]: New session 4 of user core. Oct 2 19:01:34.949532 systemd[1]: Started session-4.scope. Oct 2 19:01:35.095916 sshd[1951]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:35.102426 systemd[1]: sshd@3-172.31.29.187:22-139.178.89.65:33498.service: Deactivated successfully. Oct 2 19:01:35.102776 systemd-logind[1724]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:01:35.103638 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:01:35.105369 systemd-logind[1724]: Removed session 4. Oct 2 19:01:35.127376 systemd[1]: Started sshd@4-172.31.29.187:22-139.178.89.65:33514.service. Oct 2 19:01:35.302731 sshd[1957]: Accepted publickey for core from 139.178.89.65 port 33514 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:35.305896 sshd[1957]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:35.314038 systemd-logind[1724]: New session 5 of user core. Oct 2 19:01:35.314882 systemd[1]: Started session-5.scope. Oct 2 19:01:35.462740 sudo[1960]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:01:35.463302 sudo[1960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:01:35.477492 dbus-daemon[1716]: avc: received setenforce notice (enforcing=1) Oct 2 19:01:35.481037 sudo[1960]: pam_unix(sudo:session): session closed for user root Oct 2 19:01:35.505633 sshd[1957]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:35.511590 systemd-logind[1724]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:01:35.513067 systemd[1]: sshd@4-172.31.29.187:22-139.178.89.65:33514.service: Deactivated successfully. Oct 2 19:01:35.514445 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:01:35.515975 systemd-logind[1724]: Removed session 5. Oct 2 19:01:35.538809 systemd[1]: Started sshd@5-172.31.29.187:22-139.178.89.65:33526.service. Oct 2 19:01:35.723584 sshd[1964]: Accepted publickey for core from 139.178.89.65 port 33526 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:35.727440 sshd[1964]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:35.735297 systemd-logind[1724]: New session 6 of user core. Oct 2 19:01:35.736555 systemd[1]: Started session-6.scope. Oct 2 19:01:35.857263 sudo[1968]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:01:35.857769 sudo[1968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:01:35.865021 sudo[1968]: pam_unix(sudo:session): session closed for user root Oct 2 19:01:35.878464 sudo[1967]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:01:35.879462 sudo[1967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:01:35.903271 systemd[1]: Stopping audit-rules.service... Oct 2 19:01:35.907000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:01:35.910152 kernel: kauditd_printk_skb: 79 callbacks suppressed Oct 2 19:01:35.910253 kernel: audit: type=1305 audit(1696273295.907:167): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:01:35.913552 auditctl[1971]: No rules Oct 2 19:01:35.915940 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:01:35.907000 audit[1971]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc3e7baa0 a2=420 a3=0 items=0 ppid=1 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:35.907000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:01:35.916334 systemd[1]: Stopped audit-rules.service. Oct 2 19:01:35.928331 systemd[1]: Starting audit-rules.service... Oct 2 19:01:35.932931 kernel: audit: type=1300 audit(1696273295.907:167): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc3e7baa0 a2=420 a3=0 items=0 ppid=1 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:35.932998 kernel: audit: type=1327 audit(1696273295.907:167): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:01:35.915000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.940928 kernel: audit: type=1131 audit(1696273295.915:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:35.990679 augenrules[1988]: No rules Oct 2 19:01:35.992862 systemd[1]: Finished audit-rules.service. Oct 2 19:01:35.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.002845 sudo[1967]: pam_unix(sudo:session): session closed for user root Oct 2 19:01:36.001000 audit[1967]: USER_END pid=1967 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.012202 kernel: audit: type=1130 audit(1696273295.993:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.012267 kernel: audit: type=1106 audit(1696273296.001:170): pid=1967 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.001000 audit[1967]: CRED_DISP pid=1967 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.020725 kernel: audit: type=1104 audit(1696273296.001:171): pid=1967 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.026751 sshd[1964]: pam_unix(sshd:session): session closed for user core Oct 2 19:01:36.027000 audit[1964]: USER_END pid=1964 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:36.027000 audit[1964]: CRED_DISP pid=1964 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:36.051241 kernel: audit: type=1106 audit(1696273296.027:172): pid=1964 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:36.051390 kernel: audit: type=1104 audit(1696273296.027:173): pid=1964 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:36.050980 systemd[1]: sshd@5-172.31.29.187:22-139.178.89.65:33526.service: Deactivated successfully. Oct 2 19:01:36.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.187:22-139.178.89.65:33526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.060955 kernel: audit: type=1131 audit(1696273296.050:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.187:22-139.178.89.65:33526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.052467 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:01:36.061818 systemd-logind[1724]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:01:36.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.187:22-139.178.89.65:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.071402 systemd[1]: Started sshd@6-172.31.29.187:22-139.178.89.65:60550.service. Oct 2 19:01:36.073866 systemd-logind[1724]: Removed session 6. Oct 2 19:01:36.250000 audit[1994]: USER_ACCT pid=1994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:36.253317 sshd[1994]: Accepted publickey for core from 139.178.89.65 port 60550 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:01:36.254000 audit[1994]: CRED_ACQ pid=1994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:36.254000 audit[1994]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff356ab40 a2=3 a3=1 items=0 ppid=1 pid=1994 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:36.254000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:01:36.256015 sshd[1994]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:01:36.264411 systemd[1]: Started session-7.scope. Oct 2 19:01:36.265165 systemd-logind[1724]: New session 7 of user core. Oct 2 19:01:36.272000 audit[1994]: USER_START pid=1994 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:36.280000 audit[1996]: CRED_ACQ pid=1996 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:01:36.383000 audit[1997]: USER_ACCT pid=1997 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.383760 sudo[1997]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:01:36.384000 audit[1997]: CRED_REFR pid=1997 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:36.384805 sudo[1997]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:01:36.388000 audit[1997]: USER_START pid=1997 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:01:37.107492 systemd[1]: Starting docker.service... Oct 2 19:01:37.214504 env[2012]: time="2023-10-02T19:01:37.214436788Z" level=info msg="Starting up" Oct 2 19:01:37.217965 env[2012]: time="2023-10-02T19:01:37.217892770Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:01:37.217965 env[2012]: time="2023-10-02T19:01:37.217944134Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:01:37.218143 env[2012]: time="2023-10-02T19:01:37.218005966Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:01:37.218143 env[2012]: time="2023-10-02T19:01:37.218032932Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:01:37.223001 env[2012]: time="2023-10-02T19:01:37.222931818Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:01:37.223001 env[2012]: time="2023-10-02T19:01:37.222979589Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:01:37.223251 env[2012]: time="2023-10-02T19:01:37.223013550Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:01:37.223251 env[2012]: time="2023-10-02T19:01:37.223035806Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:01:37.800599 env[2012]: time="2023-10-02T19:01:37.800545331Z" level=info msg="Loading containers: start." Oct 2 19:01:37.905000 audit[2043]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2043 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.905000 audit[2043]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffee4cc3f0 a2=0 a3=1 items=0 ppid=2012 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.905000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:01:37.912000 audit[2045]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.912000 audit[2045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff9634da0 a2=0 a3=1 items=0 ppid=2012 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.912000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:01:37.919000 audit[2047]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.919000 audit[2047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffed6ac70 a2=0 a3=1 items=0 ppid=2012 pid=2047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.919000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:01:37.925000 audit[2049]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.925000 audit[2049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd00afb00 a2=0 a3=1 items=0 ppid=2012 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.925000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:01:37.933000 audit[2051]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.933000 audit[2051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff7cb9080 a2=0 a3=1 items=0 ppid=2012 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.933000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:01:37.968000 audit[2056]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.968000 audit[2056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe96d9870 a2=0 a3=1 items=0 ppid=2012 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.968000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:01:37.986000 audit[2058]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.986000 audit[2058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffbb07c10 a2=0 a3=1 items=0 ppid=2012 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.986000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:01:37.994000 audit[2060]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2060 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:37.994000 audit[2060]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffffb054e70 a2=0 a3=1 items=0 ppid=2012 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:37.994000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:01:38.001000 audit[2062]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.001000 audit[2062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffcfec3b30 a2=0 a3=1 items=0 ppid=2012 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.001000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:38.020000 audit[2066]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.020000 audit[2066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff815c420 a2=0 a3=1 items=0 ppid=2012 pid=2066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.020000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:38.023000 audit[2067]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.023000 audit[2067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd2ca9560 a2=0 a3=1 items=0 ppid=2012 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:38.038235 kernel: Initializing XFRM netlink socket Oct 2 19:01:38.087831 env[2012]: time="2023-10-02T19:01:38.085505078Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:01:38.089640 (udev-worker)[2023]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:01:38.123000 audit[2075]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.123000 audit[2075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffe7b39c0 a2=0 a3=1 items=0 ppid=2012 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.123000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:01:38.145000 audit[2078]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.145000 audit[2078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffced1a120 a2=0 a3=1 items=0 ppid=2012 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.145000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:01:38.154000 audit[2081]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.154000 audit[2081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffef42fe30 a2=0 a3=1 items=0 ppid=2012 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.154000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:01:38.161000 audit[2083]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.161000 audit[2083]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff2aeeed0 a2=0 a3=1 items=0 ppid=2012 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.161000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:01:38.168000 audit[2085]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.168000 audit[2085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff4bd9d40 a2=0 a3=1 items=0 ppid=2012 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.168000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:01:38.175000 audit[2087]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.175000 audit[2087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe3f364a0 a2=0 a3=1 items=0 ppid=2012 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.175000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:01:38.182000 audit[2089]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.182000 audit[2089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff63978e0 a2=0 a3=1 items=0 ppid=2012 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.182000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:01:38.200000 audit[2092]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.200000 audit[2092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe9c7c990 a2=0 a3=1 items=0 ppid=2012 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.200000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:01:38.208000 audit[2094]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.208000 audit[2094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffed495300 a2=0 a3=1 items=0 ppid=2012 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.208000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:01:38.214000 audit[2096]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.214000 audit[2096]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffecdf5a60 a2=0 a3=1 items=0 ppid=2012 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.214000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:01:38.221000 audit[2098]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.221000 audit[2098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc0fdba40 a2=0 a3=1 items=0 ppid=2012 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.221000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:01:38.223532 systemd-networkd[1542]: docker0: Link UP Oct 2 19:01:38.244000 audit[2102]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.244000 audit[2102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff1418f80 a2=0 a3=1 items=0 ppid=2012 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.244000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:38.247000 audit[2103]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:01:38.247000 audit[2103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe0adf350 a2=0 a3=1 items=0 ppid=2012 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:01:38.247000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:01:38.250050 env[2012]: time="2023-10-02T19:01:38.249987843Z" level=info msg="Loading containers: done." Oct 2 19:01:38.280415 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3048248197-merged.mount: Deactivated successfully. Oct 2 19:01:38.295153 env[2012]: time="2023-10-02T19:01:38.295101456Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:01:38.295920 env[2012]: time="2023-10-02T19:01:38.295888311Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:01:38.296280 env[2012]: time="2023-10-02T19:01:38.296254683Z" level=info msg="Daemon has completed initialization" Oct 2 19:01:38.330387 systemd[1]: Started docker.service. Oct 2 19:01:38.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:38.345983 env[2012]: time="2023-10-02T19:01:38.345697618Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:01:38.396395 systemd[1]: Reloading. Oct 2 19:01:38.560346 /usr/lib/systemd/system-generators/torcx-generator[2149]: time="2023-10-02T19:01:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:01:38.561004 /usr/lib/systemd/system-generators/torcx-generator[2149]: time="2023-10-02T19:01:38Z" level=info msg="torcx already run" Oct 2 19:01:38.805745 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:01:38.805785 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:01:38.843381 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:38.998000 audit: BPF prog-id=40 op=LOAD Oct 2 19:01:38.998000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.000000 audit: BPF prog-id=41 op=LOAD Oct 2 19:01:39.000000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.004000 audit: BPF prog-id=42 op=LOAD Oct 2 19:01:39.004000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit: BPF prog-id=43 op=LOAD Oct 2 19:01:39.007000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit: BPF prog-id=44 op=LOAD Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.007000 audit: BPF prog-id=45 op=LOAD Oct 2 19:01:39.007000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:01:39.007000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.011000 audit: BPF prog-id=46 op=LOAD Oct 2 19:01:39.011000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:01:39.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit: BPF prog-id=47 op=LOAD Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.012000 audit: BPF prog-id=48 op=LOAD Oct 2 19:01:39.012000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:01:39.012000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit: BPF prog-id=49 op=LOAD Oct 2 19:01:39.013000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit: BPF prog-id=50 op=LOAD Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.014000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.014000 audit: BPF prog-id=51 op=LOAD Oct 2 19:01:39.014000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:01:39.014000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.015000 audit: BPF prog-id=52 op=LOAD Oct 2 19:01:39.015000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.021000 audit: BPF prog-id=53 op=LOAD Oct 2 19:01:39.021000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit: BPF prog-id=54 op=LOAD Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.022000 audit: BPF prog-id=55 op=LOAD Oct 2 19:01:39.022000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:01:39.022000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:01:39.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit: BPF prog-id=56 op=LOAD Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:01:39.023000 audit: BPF prog-id=57 op=LOAD Oct 2 19:01:39.023000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:01:39.023000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:01:39.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:39.043380 systemd[1]: Started kubelet.service. Oct 2 19:01:39.230361 kubelet[2204]: E1002 19:01:39.230240 2204 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:01:39.235338 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:01:39.235650 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:01:39.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:01:39.738711 env[1740]: time="2023-10-02T19:01:39.738661660Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 19:01:40.496283 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount311751683.mount: Deactivated successfully. Oct 2 19:01:43.373500 env[1740]: time="2023-10-02T19:01:43.373439943Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:43.376260 env[1740]: time="2023-10-02T19:01:43.376177463Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:43.379181 env[1740]: time="2023-10-02T19:01:43.379135228Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:43.382341 env[1740]: time="2023-10-02T19:01:43.382293780Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:43.383881 env[1740]: time="2023-10-02T19:01:43.383836623Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c\"" Oct 2 19:01:43.412791 env[1740]: time="2023-10-02T19:01:43.412706839Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 19:01:46.792748 env[1740]: time="2023-10-02T19:01:46.792673590Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:46.797340 env[1740]: time="2023-10-02T19:01:46.797286573Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:46.800077 env[1740]: time="2023-10-02T19:01:46.800015619Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:46.805893 env[1740]: time="2023-10-02T19:01:46.805841898Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c\"" Oct 2 19:01:46.806445 env[1740]: time="2023-10-02T19:01:46.804330419Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:46.836368 env[1740]: time="2023-10-02T19:01:46.836312063Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 19:01:49.324327 env[1740]: time="2023-10-02T19:01:49.324268857Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:49.327333 env[1740]: time="2023-10-02T19:01:49.327283323Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:49.330730 env[1740]: time="2023-10-02T19:01:49.330668631Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:49.333791 env[1740]: time="2023-10-02T19:01:49.333742177Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:49.335381 env[1740]: time="2023-10-02T19:01:49.335332172Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7\"" Oct 2 19:01:49.363749 env[1740]: time="2023-10-02T19:01:49.363698515Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 19:01:49.460319 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:01:49.471894 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:01:49.472009 kernel: audit: type=1130 audit(1696273309.459:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:49.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:49.460674 systemd[1]: Stopped kubelet.service. Oct 2 19:01:49.463253 systemd[1]: Started kubelet.service. Oct 2 19:01:49.480463 kernel: audit: type=1131 audit(1696273309.459:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:49.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:49.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:49.488604 kernel: audit: type=1130 audit(1696273309.462:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:49.615928 kubelet[2238]: E1002 19:01:49.615776 2238 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:01:49.625471 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:01:49.625785 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:01:49.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:01:49.636226 kernel: audit: type=1131 audit(1696273309.625:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:01:50.711463 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount226170775.mount: Deactivated successfully. Oct 2 19:01:51.573442 env[1740]: time="2023-10-02T19:01:51.573339798Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.589182 env[1740]: time="2023-10-02T19:01:51.589103347Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.599831 env[1740]: time="2023-10-02T19:01:51.599785314Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.619492 env[1740]: time="2023-10-02T19:01:51.619401333Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:51.620994 env[1740]: time="2023-10-02T19:01:51.620915552Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa\"" Oct 2 19:01:51.653098 env[1740]: time="2023-10-02T19:01:51.652874031Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:01:52.130893 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1709553415.mount: Deactivated successfully. Oct 2 19:01:52.141445 env[1740]: time="2023-10-02T19:01:52.141391067Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:52.144519 env[1740]: time="2023-10-02T19:01:52.144475366Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:52.147240 env[1740]: time="2023-10-02T19:01:52.147163579Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:52.149805 env[1740]: time="2023-10-02T19:01:52.149745274Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:52.150986 env[1740]: time="2023-10-02T19:01:52.150939198Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:01:52.180711 env[1740]: time="2023-10-02T19:01:52.180637304Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 19:01:56.246359 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:01:56.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:56.257249 kernel: audit: type=1131 audit(1696273316.245:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:56.281235 kernel: audit: type=1334 audit(1696273316.272:422): prog-id=48 op=UNLOAD Oct 2 19:01:56.281369 kernel: audit: type=1334 audit(1696273316.272:423): prog-id=47 op=UNLOAD Oct 2 19:01:56.281420 kernel: audit: type=1334 audit(1696273316.272:424): prog-id=46 op=UNLOAD Oct 2 19:01:56.272000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:01:56.272000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:01:56.272000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:01:57.903288 env[1740]: time="2023-10-02T19:01:57.903228910Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:57.906423 env[1740]: time="2023-10-02T19:01:57.906375044Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:57.909943 env[1740]: time="2023-10-02T19:01:57.909880855Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:57.913995 env[1740]: time="2023-10-02T19:01:57.913945613Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:57.915636 env[1740]: time="2023-10-02T19:01:57.915589546Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 19:01:57.946021 env[1740]: time="2023-10-02T19:01:57.945940401Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:01:58.540007 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3382266781.mount: Deactivated successfully. Oct 2 19:01:59.508713 env[1740]: time="2023-10-02T19:01:59.508649158Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:59.511729 env[1740]: time="2023-10-02T19:01:59.511664578Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:59.515176 env[1740]: time="2023-10-02T19:01:59.515120639Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:59.518464 env[1740]: time="2023-10-02T19:01:59.518411122Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:01:59.519826 env[1740]: time="2023-10-02T19:01:59.519777963Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:01:59.710356 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:01:59.710717 systemd[1]: Stopped kubelet.service. Oct 2 19:01:59.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.713421 systemd[1]: Started kubelet.service. Oct 2 19:01:59.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.729142 kernel: audit: type=1130 audit(1696273319.709:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.729299 kernel: audit: type=1131 audit(1696273319.709:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.737542 kernel: audit: type=1130 audit(1696273319.712:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.892598 kubelet[2267]: E1002 19:01:59.891712 2267 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:01:59.896866 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:01:59.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:01:59.897181 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:01:59.907276 kernel: audit: type=1131 audit(1696273319.896:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:02:06.602786 systemd[1]: Stopped kubelet.service. Oct 2 19:02:06.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.620127 kernel: audit: type=1130 audit(1696273326.603:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.620318 kernel: audit: type=1131 audit(1696273326.604:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.664334 systemd[1]: Reloading. Oct 2 19:02:06.844307 /usr/lib/systemd/system-generators/torcx-generator[2354]: time="2023-10-02T19:02:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:02:06.844376 /usr/lib/systemd/system-generators/torcx-generator[2354]: time="2023-10-02T19:02:06Z" level=info msg="torcx already run" Oct 2 19:02:07.102576 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:02:07.102626 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:02:07.144645 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:02:07.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.323868 kernel: audit: type=1400 audit(1696273327.308:431): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.324021 kernel: audit: type=1400 audit(1696273327.315:432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.339946 kernel: audit: type=1400 audit(1696273327.315:433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.340078 kernel: audit: type=1400 audit(1696273327.315:434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.348277 kernel: audit: type=1400 audit(1696273327.315:435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356263 kernel: audit: type=1400 audit(1696273327.315:436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.364235 kernel: audit: type=1400 audit(1696273327.315:437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.364385 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:02:07.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.323000 audit: BPF prog-id=58 op=LOAD Oct 2 19:02:07.323000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.331000 audit: BPF prog-id=59 op=LOAD Oct 2 19:02:07.331000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.339000 audit: BPF prog-id=60 op=LOAD Oct 2 19:02:07.339000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.347000 audit: BPF prog-id=61 op=LOAD Oct 2 19:02:07.347000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:02:07.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.355000 audit: BPF prog-id=62 op=LOAD Oct 2 19:02:07.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.356000 audit: BPF prog-id=63 op=LOAD Oct 2 19:02:07.356000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:02:07.356000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:02:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit: BPF prog-id=64 op=LOAD Oct 2 19:02:07.366000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit: BPF prog-id=65 op=LOAD Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.366000 audit: BPF prog-id=66 op=LOAD Oct 2 19:02:07.366000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:02:07.366000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:02:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.368000 audit: BPF prog-id=67 op=LOAD Oct 2 19:02:07.368000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit: BPF prog-id=68 op=LOAD Oct 2 19:02:07.375000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit: BPF prog-id=69 op=LOAD Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.375000 audit: BPF prog-id=70 op=LOAD Oct 2 19:02:07.375000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:02:07.375000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit: BPF prog-id=71 op=LOAD Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.376000 audit: BPF prog-id=72 op=LOAD Oct 2 19:02:07.376000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:02:07.376000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:02:07.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:07.415534 systemd[1]: Started kubelet.service. Oct 2 19:02:07.558300 kubelet[2409]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:07.558861 kubelet[2409]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:07.558973 kubelet[2409]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:07.559393 kubelet[2409]: I1002 19:02:07.559311 2409 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:02:08.610860 kubelet[2409]: I1002 19:02:08.610783 2409 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:02:08.610860 kubelet[2409]: I1002 19:02:08.610841 2409 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:02:08.611523 kubelet[2409]: I1002 19:02:08.611265 2409 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:02:08.621534 kubelet[2409]: I1002 19:02:08.621472 2409 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:02:08.627303 kubelet[2409]: E1002 19:02:08.627268 2409 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.29.187:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.630731 kubelet[2409]: W1002 19:02:08.630675 2409 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:02:08.632553 kubelet[2409]: I1002 19:02:08.632490 2409 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:02:08.633351 kubelet[2409]: I1002 19:02:08.633302 2409 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:02:08.633683 kubelet[2409]: I1002 19:02:08.633637 2409 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:02:08.633944 kubelet[2409]: I1002 19:02:08.633764 2409 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:02:08.633944 kubelet[2409]: I1002 19:02:08.633791 2409 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:02:08.634073 kubelet[2409]: I1002 19:02:08.633983 2409 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:08.634724 kubelet[2409]: I1002 19:02:08.634679 2409 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:02:08.634833 kubelet[2409]: I1002 19:02:08.634787 2409 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:02:08.634833 kubelet[2409]: I1002 19:02:08.634824 2409 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:02:08.634981 kubelet[2409]: I1002 19:02:08.634911 2409 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:02:08.640634 kubelet[2409]: I1002 19:02:08.640570 2409 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:02:08.641514 kubelet[2409]: W1002 19:02:08.641426 2409 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:02:08.642833 kubelet[2409]: I1002 19:02:08.642770 2409 server.go:1232] "Started kubelet" Oct 2 19:02:08.643118 kubelet[2409]: W1002 19:02:08.643041 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.187:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.643292 kubelet[2409]: E1002 19:02:08.643131 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.187:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.643386 kubelet[2409]: W1002 19:02:08.643307 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.187:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-187&limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.643386 kubelet[2409]: E1002 19:02:08.643373 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.187:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-187&limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.647320 kubelet[2409]: E1002 19:02:08.647277 2409 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:02:08.647529 kubelet[2409]: E1002 19:02:08.647504 2409 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:02:08.646000 audit[2409]: AVC avc: denied { mac_admin } for pid=2409 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:08.646000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:08.646000 audit[2409]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b72660 a1=4000ad6f30 a2=4000b72630 a3=25 items=0 ppid=1 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.646000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:08.646000 audit[2409]: AVC avc: denied { mac_admin } for pid=2409 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:08.646000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:08.646000 audit[2409]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d46180 a1=4000ad6f48 a2=4000b726f0 a3=25 items=0 ppid=1 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.646000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:08.648514 kubelet[2409]: I1002 19:02:08.647705 2409 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:02:08.648514 kubelet[2409]: I1002 19:02:08.647780 2409 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:02:08.648514 kubelet[2409]: I1002 19:02:08.647923 2409 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:02:08.652622 kubelet[2409]: I1002 19:02:08.652577 2409 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:02:08.654002 kubelet[2409]: I1002 19:02:08.653961 2409 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:02:08.656157 kubelet[2409]: I1002 19:02:08.656113 2409 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:02:08.656692 kubelet[2409]: I1002 19:02:08.656660 2409 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:02:08.657339 kubelet[2409]: I1002 19:02:08.657286 2409 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:02:08.658060 kubelet[2409]: I1002 19:02:08.657997 2409 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:02:08.658184 kubelet[2409]: I1002 19:02:08.658129 2409 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:02:08.658000 audit[2419]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:08.658000 audit[2419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffddecb580 a2=0 a3=1 items=0 ppid=2409 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.658000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:02:08.662292 kubelet[2409]: E1002 19:02:08.661710 2409 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.187:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-187?timeout=10s\": dial tcp 172.31.29.187:6443: connect: connection refused" interval="200ms" Oct 2 19:02:08.662292 kubelet[2409]: E1002 19:02:08.661834 2409 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-187.178a5f9aebb82cd2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-187", UID:"ip-172-31-29-187", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-187"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 8, 642731218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 8, 642731218, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-29-187"}': 'Post "https://172.31.29.187:6443/api/v1/namespaces/default/events": dial tcp 172.31.29.187:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:02:08.662898 kubelet[2409]: W1002 19:02:08.662401 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.29.187:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.663033 kubelet[2409]: E1002 19:02:08.662926 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.29.187:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.667000 audit[2421]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:08.667000 audit[2421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd2c0d040 a2=0 a3=1 items=0 ppid=2409 pid=2421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.667000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:02:08.699000 audit[2424]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:08.699000 audit[2424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff2f35980 a2=0 a3=1 items=0 ppid=2409 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.699000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:02:08.706000 audit[2426]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:08.706000 audit[2426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc49d6cc0 a2=0 a3=1 items=0 ppid=2409 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.706000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:02:08.738308 kubelet[2409]: I1002 19:02:08.738269 2409 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:02:08.738569 kubelet[2409]: I1002 19:02:08.738535 2409 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:02:08.738722 kubelet[2409]: I1002 19:02:08.738699 2409 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:08.737000 audit[2431]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:08.737000 audit[2431]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff8542130 a2=0 a3=1 items=0 ppid=2409 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.737000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:02:08.739483 kubelet[2409]: I1002 19:02:08.739435 2409 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:02:08.742262 kubelet[2409]: I1002 19:02:08.742174 2409 policy_none.go:49] "None policy: Start" Oct 2 19:02:08.742000 audit[2432]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2432 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:08.742000 audit[2432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd37f6ed0 a2=0 a3=1 items=0 ppid=2409 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.742000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:02:08.744532 kubelet[2409]: I1002 19:02:08.744053 2409 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:02:08.744689 kubelet[2409]: I1002 19:02:08.744664 2409 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:02:08.748435 kubelet[2409]: I1002 19:02:08.744452 2409 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:02:08.748757 kubelet[2409]: I1002 19:02:08.748724 2409 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:02:08.747000 audit[2433]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:08.747000 audit[2433]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd94932f0 a2=0 a3=1 items=0 ppid=2409 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.747000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:02:08.749380 kubelet[2409]: I1002 19:02:08.749342 2409 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:02:08.749616 kubelet[2409]: E1002 19:02:08.749592 2409 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:02:08.751320 kubelet[2409]: W1002 19:02:08.751140 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.187:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.751570 kubelet[2409]: E1002 19:02:08.751538 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.187:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:08.753000 audit[2434]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:08.753000 audit[2434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe51b77a0 a2=0 a3=1 items=0 ppid=2409 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.753000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:02:08.755000 audit[2435]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=2435 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:08.755000 audit[2435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7f4fde0 a2=0 a3=1 items=0 ppid=2409 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.755000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:02:08.756000 audit[2436]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=2436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:08.756000 audit[2436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc049fc60 a2=0 a3=1 items=0 ppid=2409 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:02:08.762161 kubelet[2409]: I1002 19:02:08.762122 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-187" Oct 2 19:02:08.761000 audit[2437]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2437 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:08.761000 audit[2437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd32432a0 a2=0 a3=1 items=0 ppid=2409 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.761000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:02:08.763723 kubelet[2409]: E1002 19:02:08.763679 2409 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.187:6443/api/v1/nodes\": dial tcp 172.31.29.187:6443: connect: connection refused" node="ip-172-31-29-187" Oct 2 19:02:08.768433 systemd[1]: Created slice kubepods.slice. Oct 2 19:02:08.772000 audit[2439]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2439 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:08.772000 audit[2439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcd97ae80 a2=0 a3=1 items=0 ppid=2409 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:02:08.779646 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:02:08.787521 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:02:08.795724 kubelet[2409]: I1002 19:02:08.795686 2409 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:02:08.795000 audit[2409]: AVC avc: denied { mac_admin } for pid=2409 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:08.795000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:08.795000 audit[2409]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ccb170 a1=4000507c08 a2=4000ccb140 a3=25 items=0 ppid=1 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:08.795000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:08.798015 kubelet[2409]: I1002 19:02:08.797979 2409 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:02:08.798561 kubelet[2409]: I1002 19:02:08.798526 2409 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:02:08.801391 kubelet[2409]: E1002 19:02:08.801345 2409 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-29-187\" not found" Oct 2 19:02:08.850936 kubelet[2409]: I1002 19:02:08.850826 2409 topology_manager.go:215] "Topology Admit Handler" podUID="7e32e413b8b10b19fa99fa8d0efcaee6" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-29-187" Oct 2 19:02:08.853557 kubelet[2409]: I1002 19:02:08.853521 2409 topology_manager.go:215] "Topology Admit Handler" podUID="cd086b47000132586d5964d7c9c88457" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:08.856647 kubelet[2409]: I1002 19:02:08.856578 2409 topology_manager.go:215] "Topology Admit Handler" podUID="5fc113e1a1198af9b87b1e90370795e6" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-29-187" Oct 2 19:02:08.859089 kubelet[2409]: I1002 19:02:08.859047 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7e32e413b8b10b19fa99fa8d0efcaee6-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-187\" (UID: \"7e32e413b8b10b19fa99fa8d0efcaee6\") " pod="kube-system/kube-apiserver-ip-172-31-29-187" Oct 2 19:02:08.859979 kubelet[2409]: I1002 19:02:08.859924 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:08.860144 kubelet[2409]: I1002 19:02:08.860131 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:08.860640 kubelet[2409]: I1002 19:02:08.860359 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5fc113e1a1198af9b87b1e90370795e6-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-187\" (UID: \"5fc113e1a1198af9b87b1e90370795e6\") " pod="kube-system/kube-scheduler-ip-172-31-29-187" Oct 2 19:02:08.860640 kubelet[2409]: I1002 19:02:08.860440 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7e32e413b8b10b19fa99fa8d0efcaee6-ca-certs\") pod \"kube-apiserver-ip-172-31-29-187\" (UID: \"7e32e413b8b10b19fa99fa8d0efcaee6\") " pod="kube-system/kube-apiserver-ip-172-31-29-187" Oct 2 19:02:08.860640 kubelet[2409]: I1002 19:02:08.860533 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7e32e413b8b10b19fa99fa8d0efcaee6-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-187\" (UID: \"7e32e413b8b10b19fa99fa8d0efcaee6\") " pod="kube-system/kube-apiserver-ip-172-31-29-187" Oct 2 19:02:08.860640 kubelet[2409]: I1002 19:02:08.860626 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:08.861030 kubelet[2409]: I1002 19:02:08.860805 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:08.861030 kubelet[2409]: I1002 19:02:08.860901 2409 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:08.863592 kubelet[2409]: E1002 19:02:08.863553 2409 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.187:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-187?timeout=10s\": dial tcp 172.31.29.187:6443: connect: connection refused" interval="400ms" Oct 2 19:02:08.876085 systemd[1]: Created slice kubepods-burstable-pod7e32e413b8b10b19fa99fa8d0efcaee6.slice. Oct 2 19:02:08.882991 systemd[1]: Created slice kubepods-burstable-podcd086b47000132586d5964d7c9c88457.slice. Oct 2 19:02:08.902012 systemd[1]: Created slice kubepods-burstable-pod5fc113e1a1198af9b87b1e90370795e6.slice. Oct 2 19:02:08.967035 kubelet[2409]: I1002 19:02:08.966975 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-187" Oct 2 19:02:08.967571 kubelet[2409]: E1002 19:02:08.967542 2409 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.187:6443/api/v1/nodes\": dial tcp 172.31.29.187:6443: connect: connection refused" node="ip-172-31-29-187" Oct 2 19:02:09.198921 env[1740]: time="2023-10-02T19:02:09.198281423Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-187,Uid:7e32e413b8b10b19fa99fa8d0efcaee6,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:09.201416 env[1740]: time="2023-10-02T19:02:09.200544242Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-187,Uid:cd086b47000132586d5964d7c9c88457,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:09.208575 env[1740]: time="2023-10-02T19:02:09.208520706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-187,Uid:5fc113e1a1198af9b87b1e90370795e6,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:09.265280 kubelet[2409]: E1002 19:02:09.265181 2409 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.187:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-187?timeout=10s\": dial tcp 172.31.29.187:6443: connect: connection refused" interval="800ms" Oct 2 19:02:09.369996 kubelet[2409]: I1002 19:02:09.369931 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-187" Oct 2 19:02:09.370585 kubelet[2409]: E1002 19:02:09.370537 2409 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.187:6443/api/v1/nodes\": dial tcp 172.31.29.187:6443: connect: connection refused" node="ip-172-31-29-187" Oct 2 19:02:09.478846 kubelet[2409]: W1002 19:02:09.478702 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.29.187:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:09.478846 kubelet[2409]: E1002 19:02:09.478803 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.29.187:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:09.487480 kubelet[2409]: W1002 19:02:09.487336 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.187:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:09.487480 kubelet[2409]: E1002 19:02:09.487444 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.187:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:09.582615 kubelet[2409]: W1002 19:02:09.582520 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.187:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:09.582615 kubelet[2409]: E1002 19:02:09.582581 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.187:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:09.732583 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2078450693.mount: Deactivated successfully. Oct 2 19:02:09.743447 env[1740]: time="2023-10-02T19:02:09.743363536Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.749116 env[1740]: time="2023-10-02T19:02:09.749063931Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.750848 env[1740]: time="2023-10-02T19:02:09.750796208Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.754813 env[1740]: time="2023-10-02T19:02:09.754707663Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.756779 env[1740]: time="2023-10-02T19:02:09.756731676Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.758382 env[1740]: time="2023-10-02T19:02:09.758340872Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.761282 env[1740]: time="2023-10-02T19:02:09.761218524Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.767037 env[1740]: time="2023-10-02T19:02:09.766973684Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.773800 env[1740]: time="2023-10-02T19:02:09.773738078Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.776107 env[1740]: time="2023-10-02T19:02:09.776039844Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.778815 env[1740]: time="2023-10-02T19:02:09.778753643Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.794236 env[1740]: time="2023-10-02T19:02:09.794112682Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:09.851803 env[1740]: time="2023-10-02T19:02:09.851663260Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:09.852067 env[1740]: time="2023-10-02T19:02:09.852006365Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:09.852271 env[1740]: time="2023-10-02T19:02:09.852186336Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:09.853104 env[1740]: time="2023-10-02T19:02:09.853038235Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b66373d31003df439bb3137d4e53fbea8b5657809c5435dfacb0bf2405ac8579 pid=2454 runtime=io.containerd.runc.v2 Oct 2 19:02:09.860798 env[1740]: time="2023-10-02T19:02:09.860619841Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:09.860998 env[1740]: time="2023-10-02T19:02:09.860742971Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:09.860998 env[1740]: time="2023-10-02T19:02:09.860794700Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:09.861252 env[1740]: time="2023-10-02T19:02:09.861162265Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e42a4700c3d3801f33c22e8e62d2d1c84ca01e75c62abd0d78ddac6b365fad2 pid=2458 runtime=io.containerd.runc.v2 Oct 2 19:02:09.877046 env[1740]: time="2023-10-02T19:02:09.876906307Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:09.877046 env[1740]: time="2023-10-02T19:02:09.876983469Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:09.877333 env[1740]: time="2023-10-02T19:02:09.877010942Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:09.877537 env[1740]: time="2023-10-02T19:02:09.877297481Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1691b3d988fee413b24b4f4585c8456270ce52a9dc2c1dcf1df1ef2cb075bd8e pid=2482 runtime=io.containerd.runc.v2 Oct 2 19:02:09.909680 systemd[1]: Started cri-containerd-b66373d31003df439bb3137d4e53fbea8b5657809c5435dfacb0bf2405ac8579.scope. Oct 2 19:02:09.919031 kubelet[2409]: W1002 19:02:09.918917 2409 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.187:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-187&limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:09.919648 kubelet[2409]: E1002 19:02:09.919037 2409 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.187:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-187&limit=500&resourceVersion=0": dial tcp 172.31.29.187:6443: connect: connection refused Oct 2 19:02:09.940342 systemd[1]: Started cri-containerd-1691b3d988fee413b24b4f4585c8456270ce52a9dc2c1dcf1df1ef2cb075bd8e.scope. Oct 2 19:02:09.956347 systemd[1]: Started cri-containerd-1e42a4700c3d3801f33c22e8e62d2d1c84ca01e75c62abd0d78ddac6b365fad2.scope. Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.994000 audit: BPF prog-id=73 op=LOAD Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2454 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236363337336433313030336466343339626233313337643465353366 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2454 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236363337336433313030336466343339626233313337643465353366 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit: BPF prog-id=74 op=LOAD Oct 2 19:02:09.995000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2454 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236363337336433313030336466343339626233313337643465353366 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit: BPF prog-id=75 op=LOAD Oct 2 19:02:09.995000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2454 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236363337336433313030336466343339626233313337643465353366 Oct 2 19:02:09.995000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:02:09.995000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:09.995000 audit: BPF prog-id=76 op=LOAD Oct 2 19:02:09.995000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2454 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:09.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236363337336433313030336466343339626233313337643465353366 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.011000 audit: BPF prog-id=77 op=LOAD Oct 2 19:02:10.012000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.012000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2482 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393162336439383866656534313362323462346634353835633834 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2482 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393162336439383866656534313362323462346634353835633834 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.013000 audit: BPF prog-id=78 op=LOAD Oct 2 19:02:10.013000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2482 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393162336439383866656534313362323462346634353835633834 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.015000 audit: BPF prog-id=79 op=LOAD Oct 2 19:02:10.015000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2482 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393162336439383866656534313362323462346634353835633834 Oct 2 19:02:10.017000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:02:10.017000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.017000 audit: BPF prog-id=80 op=LOAD Oct 2 19:02:10.017000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2482 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136393162336439383866656534313362323462346634353835633834 Oct 2 19:02:10.066747 kubelet[2409]: E1002 19:02:10.066663 2409 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.187:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-187?timeout=10s\": dial tcp 172.31.29.187:6443: connect: connection refused" interval="1.6s" Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.075000 audit: BPF prog-id=81 op=LOAD Oct 2 19:02:10.076000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.076000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2458 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343261343730306333643338303166333363323265386536326432 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2458 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343261343730306333643338303166333363323265386536326432 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.077000 audit: BPF prog-id=82 op=LOAD Oct 2 19:02:10.077000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2458 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343261343730306333643338303166333363323265386536326432 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.080000 audit: BPF prog-id=83 op=LOAD Oct 2 19:02:10.080000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2458 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343261343730306333643338303166333363323265386536326432 Oct 2 19:02:10.083000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:02:10.083000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { perfmon } for pid=2489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit[2489]: AVC avc: denied { bpf } for pid=2489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.083000 audit: BPF prog-id=84 op=LOAD Oct 2 19:02:10.083000 audit[2489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2458 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165343261343730306333643338303166333363323265386536326432 Oct 2 19:02:10.091386 env[1740]: time="2023-10-02T19:02:10.091306028Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-187,Uid:7e32e413b8b10b19fa99fa8d0efcaee6,Namespace:kube-system,Attempt:0,} returns sandbox id \"b66373d31003df439bb3137d4e53fbea8b5657809c5435dfacb0bf2405ac8579\"" Oct 2 19:02:10.111855 env[1740]: time="2023-10-02T19:02:10.111717182Z" level=info msg="CreateContainer within sandbox \"b66373d31003df439bb3137d4e53fbea8b5657809c5435dfacb0bf2405ac8579\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:02:10.128518 env[1740]: time="2023-10-02T19:02:10.128459740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-187,Uid:cd086b47000132586d5964d7c9c88457,Namespace:kube-system,Attempt:0,} returns sandbox id \"1691b3d988fee413b24b4f4585c8456270ce52a9dc2c1dcf1df1ef2cb075bd8e\"" Oct 2 19:02:10.137598 env[1740]: time="2023-10-02T19:02:10.137538339Z" level=info msg="CreateContainer within sandbox \"1691b3d988fee413b24b4f4585c8456270ce52a9dc2c1dcf1df1ef2cb075bd8e\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:02:10.162663 env[1740]: time="2023-10-02T19:02:10.162596433Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-187,Uid:5fc113e1a1198af9b87b1e90370795e6,Namespace:kube-system,Attempt:0,} returns sandbox id \"1e42a4700c3d3801f33c22e8e62d2d1c84ca01e75c62abd0d78ddac6b365fad2\"" Oct 2 19:02:10.168281 env[1740]: time="2023-10-02T19:02:10.168178522Z" level=info msg="CreateContainer within sandbox \"b66373d31003df439bb3137d4e53fbea8b5657809c5435dfacb0bf2405ac8579\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"aafcaef00754e47c03b69c140c8c91d3b914b8caf1d979cfd135bfcf5c85dcbb\"" Oct 2 19:02:10.170406 env[1740]: time="2023-10-02T19:02:10.170338848Z" level=info msg="StartContainer for \"aafcaef00754e47c03b69c140c8c91d3b914b8caf1d979cfd135bfcf5c85dcbb\"" Oct 2 19:02:10.173607 kubelet[2409]: I1002 19:02:10.173556 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-187" Oct 2 19:02:10.173821 env[1740]: time="2023-10-02T19:02:10.173530232Z" level=info msg="CreateContainer within sandbox \"1e42a4700c3d3801f33c22e8e62d2d1c84ca01e75c62abd0d78ddac6b365fad2\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:02:10.174311 kubelet[2409]: E1002 19:02:10.174260 2409 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.187:6443/api/v1/nodes\": dial tcp 172.31.29.187:6443: connect: connection refused" node="ip-172-31-29-187" Oct 2 19:02:10.176572 env[1740]: time="2023-10-02T19:02:10.176499182Z" level=info msg="CreateContainer within sandbox \"1691b3d988fee413b24b4f4585c8456270ce52a9dc2c1dcf1df1ef2cb075bd8e\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c\"" Oct 2 19:02:10.178754 env[1740]: time="2023-10-02T19:02:10.178702500Z" level=info msg="StartContainer for \"0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c\"" Oct 2 19:02:10.198007 kubelet[2409]: E1002 19:02:10.197798 2409 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-187.178a5f9aebb82cd2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-187", UID:"ip-172-31-29-187", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-187"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 8, 642731218, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 8, 642731218, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-29-187"}': 'Post "https://172.31.29.187:6443/api/v1/namespaces/default/events": dial tcp 172.31.29.187:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:02:10.201441 env[1740]: time="2023-10-02T19:02:10.201348105Z" level=info msg="CreateContainer within sandbox \"1e42a4700c3d3801f33c22e8e62d2d1c84ca01e75c62abd0d78ddac6b365fad2\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b\"" Oct 2 19:02:10.202453 env[1740]: time="2023-10-02T19:02:10.202384622Z" level=info msg="StartContainer for \"be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b\"" Oct 2 19:02:10.246125 systemd[1]: Started cri-containerd-aafcaef00754e47c03b69c140c8c91d3b914b8caf1d979cfd135bfcf5c85dcbb.scope. Oct 2 19:02:10.276324 systemd[1]: Started cri-containerd-0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c.scope. Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.329000 audit: BPF prog-id=85 op=LOAD Oct 2 19:02:10.334547 systemd[1]: Started cri-containerd-be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b.scope. Oct 2 19:02:10.339000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.339000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2454 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161666361656630303735346534376330336236396331343063386339 Oct 2 19:02:10.339000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.339000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2454 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161666361656630303735346534376330336236396331343063386339 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.340000 audit: BPF prog-id=86 op=LOAD Oct 2 19:02:10.340000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2454 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161666361656630303735346534376330336236396331343063386339 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit: BPF prog-id=87 op=LOAD Oct 2 19:02:10.341000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2454 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161666361656630303735346534376330336236396331343063386339 Oct 2 19:02:10.341000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:02:10.341000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.341000 audit: BPF prog-id=88 op=LOAD Oct 2 19:02:10.341000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2454 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161666361656630303735346534376330336236396331343063386339 Oct 2 19:02:10.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.367000 audit: BPF prog-id=89 op=LOAD Oct 2 19:02:10.370000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.370000 audit[2589]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001b1b38 a2=10 a3=0 items=0 ppid=2482 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663762353164333636393361613838383036643836356538636132 Oct 2 19:02:10.370000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.370000 audit[2589]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001b15a0 a2=3c a3=0 items=0 ppid=2482 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663762353164333636393361613838383036643836356538636132 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.371000 audit: BPF prog-id=90 op=LOAD Oct 2 19:02:10.371000 audit[2589]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001b18e0 a2=78 a3=0 items=0 ppid=2482 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663762353164333636393361613838383036643836356538636132 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.374000 audit: BPF prog-id=91 op=LOAD Oct 2 19:02:10.374000 audit[2589]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001b1670 a2=78 a3=0 items=0 ppid=2482 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663762353164333636393361613838383036643836356538636132 Oct 2 19:02:10.376000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:02:10.376000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.376000 audit: BPF prog-id=92 op=LOAD Oct 2 19:02:10.376000 audit[2589]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001b1b40 a2=78 a3=0 items=0 ppid=2482 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663762353164333636393361613838383036643836356538636132 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.421000 audit: BPF prog-id=93 op=LOAD Oct 2 19:02:10.423000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.423000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2458 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336135396666613266373361663636643833623038343539313936 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2458 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336135396666613266373361663636643833623038343539313936 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.424000 audit: BPF prog-id=94 op=LOAD Oct 2 19:02:10.424000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2458 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336135396666613266373361663636643833623038343539313936 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.426000 audit: BPF prog-id=95 op=LOAD Oct 2 19:02:10.426000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2458 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.426000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336135396666613266373361663636643833623038343539313936 Oct 2 19:02:10.428000 audit: BPF prog-id=95 op=UNLOAD Oct 2 19:02:10.428000 audit: BPF prog-id=94 op=UNLOAD Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:10.428000 audit: BPF prog-id=96 op=LOAD Oct 2 19:02:10.428000 audit[2606]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2458 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:10.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336135396666613266373361663636643833623038343539313936 Oct 2 19:02:10.461176 env[1740]: time="2023-10-02T19:02:10.461111336Z" level=info msg="StartContainer for \"aafcaef00754e47c03b69c140c8c91d3b914b8caf1d979cfd135bfcf5c85dcbb\" returns successfully" Oct 2 19:02:10.503857 env[1740]: time="2023-10-02T19:02:10.503705849Z" level=info msg="StartContainer for \"0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c\" returns successfully" Oct 2 19:02:10.527021 env[1740]: time="2023-10-02T19:02:10.526938988Z" level=info msg="StartContainer for \"be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b\" returns successfully" Oct 2 19:02:11.420323 update_engine[1725]: I1002 19:02:11.420251 1725 update_attempter.cc:505] Updating boot flags... Oct 2 19:02:11.782544 kubelet[2409]: I1002 19:02:11.781635 2409 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-187" Oct 2 19:02:15.233040 kernel: kauditd_printk_skb: 557 callbacks suppressed Oct 2 19:02:15.233257 kernel: audit: type=1400 audit(1696273335.219:726): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.219000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.219000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003a62510 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.249935 kernel: audit: type=1300 audit(1696273335.219:726): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003a62510 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.266810 kernel: audit: type=1327 audit(1696273335.219:726): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.219000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.279851 kernel: audit: type=1400 audit(1696273335.219:727): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.219000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004a09cc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.294574 kernel: audit: type=1300 audit(1696273335.219:727): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004a09cc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.307757 kernel: audit: type=1327 audit(1696273335.219:727): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.219000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.320113 kernel: audit: type=1400 audit(1696273335.219:728): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.219000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003a62630 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.334702 kernel: audit: type=1300 audit(1696273335.219:728): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003a62630 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.345485 kernel: audit: type=1327 audit(1696273335.219:728): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.345631 kernel: audit: type=1400 audit(1696273335.242:729): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.242000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.242000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=4003c688d0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.242000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.300000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.300000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=64 a1=4006c17a80 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.300000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.305000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:15.305000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=64 a1=4003f0eab0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:02:15.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:02:15.640763 kubelet[2409]: I1002 19:02:15.640556 2409 apiserver.go:52] "Watching apiserver" Oct 2 19:02:15.770559 kubelet[2409]: E1002 19:02:15.770498 2409 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-29-187\" not found" node="ip-172-31-29-187" Oct 2 19:02:15.858385 kubelet[2409]: I1002 19:02:15.858330 2409 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:02:15.923352 kubelet[2409]: I1002 19:02:15.923170 2409 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-29-187" Oct 2 19:02:16.036000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:16.036000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003c87b0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:16.036000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:16.036000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:16.036000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000152d40 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:16.036000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:18.633989 systemd[1]: Reloading. Oct 2 19:02:18.857532 /usr/lib/systemd/system-generators/torcx-generator[2797]: time="2023-10-02T19:02:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:02:18.857593 /usr/lib/systemd/system-generators/torcx-generator[2797]: time="2023-10-02T19:02:18Z" level=info msg="torcx already run" Oct 2 19:02:19.134368 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:02:19.134623 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:02:19.173749 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:02:19.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.369000 audit: BPF prog-id=97 op=LOAD Oct 2 19:02:19.369000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.372000 audit: BPF prog-id=98 op=LOAD Oct 2 19:02:19.372000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.378000 audit: BPF prog-id=99 op=LOAD Oct 2 19:02:19.378000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.381000 audit: BPF prog-id=100 op=LOAD Oct 2 19:02:19.382000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:02:19.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit: BPF prog-id=101 op=LOAD Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.383000 audit: BPF prog-id=102 op=LOAD Oct 2 19:02:19.383000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:02:19.383000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:02:19.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.388000 audit: BPF prog-id=103 op=LOAD Oct 2 19:02:19.388000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.391000 audit: BPF prog-id=104 op=LOAD Oct 2 19:02:19.391000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:02:19.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.395000 audit: BPF prog-id=105 op=LOAD Oct 2 19:02:19.396000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:02:19.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit: BPF prog-id=106 op=LOAD Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.398000 audit: BPF prog-id=107 op=LOAD Oct 2 19:02:19.398000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:02:19.398000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.400000 audit: BPF prog-id=108 op=LOAD Oct 2 19:02:19.400000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:02:19.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.403000 audit: BPF prog-id=109 op=LOAD Oct 2 19:02:19.403000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:02:19.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.406000 audit: BPF prog-id=110 op=LOAD Oct 2 19:02:19.407000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:02:19.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.412000 audit: BPF prog-id=111 op=LOAD Oct 2 19:02:19.412000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.416000 audit: BPF prog-id=112 op=LOAD Oct 2 19:02:19.416000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:02:19.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.418000 audit: BPF prog-id=113 op=LOAD Oct 2 19:02:19.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.419000 audit: BPF prog-id=114 op=LOAD Oct 2 19:02:19.420000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:02:19.420000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:02:19.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit: BPF prog-id=115 op=LOAD Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.422000 audit: BPF prog-id=116 op=LOAD Oct 2 19:02:19.422000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:02:19.422000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.425000 audit: BPF prog-id=117 op=LOAD Oct 2 19:02:19.425000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:02:19.475001 kubelet[2409]: I1002 19:02:19.474941 2409 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:02:19.475950 systemd[1]: Stopping kubelet.service... Oct 2 19:02:19.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:19.498762 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:02:19.499164 systemd[1]: Stopped kubelet.service. Oct 2 19:02:19.499301 systemd[1]: kubelet.service: Consumed 1.840s CPU time. Oct 2 19:02:19.503921 systemd[1]: Started kubelet.service. Oct 2 19:02:19.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:19.646000 audit[2864]: USER_ACCT pid=2864 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:19.647000 audit[2864]: CRED_REFR pid=2864 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:19.648290 sudo[2864]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:02:19.648877 sudo[2864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:02:19.656000 audit[2864]: USER_START pid=2864 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:19.704182 kubelet[2854]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:19.704182 kubelet[2854]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:19.704182 kubelet[2854]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:19.704823 kubelet[2854]: I1002 19:02:19.704441 2854 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:02:19.718169 kubelet[2854]: I1002 19:02:19.718107 2854 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:02:19.718169 kubelet[2854]: I1002 19:02:19.718157 2854 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:02:19.718644 kubelet[2854]: I1002 19:02:19.718599 2854 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:02:19.722691 kubelet[2854]: I1002 19:02:19.722621 2854 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:02:19.726599 kubelet[2854]: I1002 19:02:19.726552 2854 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:02:19.737329 kubelet[2854]: W1002 19:02:19.737280 2854 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:02:19.738936 kubelet[2854]: I1002 19:02:19.738846 2854 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:02:19.739759 kubelet[2854]: I1002 19:02:19.739709 2854 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:02:19.740091 kubelet[2854]: I1002 19:02:19.740047 2854 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:02:19.740091 kubelet[2854]: I1002 19:02:19.740089 2854 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:02:19.740330 kubelet[2854]: I1002 19:02:19.740121 2854 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:02:19.740330 kubelet[2854]: I1002 19:02:19.740260 2854 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:19.746239 kubelet[2854]: I1002 19:02:19.742889 2854 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:02:19.746239 kubelet[2854]: I1002 19:02:19.742943 2854 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:02:19.746239 kubelet[2854]: I1002 19:02:19.743005 2854 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:02:19.758354 kubelet[2854]: I1002 19:02:19.758301 2854 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:02:19.764617 kubelet[2854]: I1002 19:02:19.764562 2854 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:02:19.773425 kubelet[2854]: I1002 19:02:19.773369 2854 server.go:1232] "Started kubelet" Oct 2 19:02:19.794646 kubelet[2854]: I1002 19:02:19.794180 2854 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:02:19.796935 kubelet[2854]: I1002 19:02:19.796838 2854 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:02:19.796000 audit[2854]: AVC avc: denied { mac_admin } for pid=2854 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.802655 kubelet[2854]: I1002 19:02:19.800606 2854 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:02:19.802655 kubelet[2854]: I1002 19:02:19.801004 2854 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:02:19.802795 kubelet[2854]: E1002 19:02:19.802734 2854 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:02:19.802795 kubelet[2854]: E1002 19:02:19.802790 2854 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:02:19.796000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:19.796000 audit[2854]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000be6480 a1=4000b570e0 a2=4000be6450 a3=25 items=0 ppid=1 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:19.796000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:19.804845 kubelet[2854]: I1002 19:02:19.804799 2854 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:02:19.803000 audit[2854]: AVC avc: denied { mac_admin } for pid=2854 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:19.803000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:19.803000 audit[2854]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b75bc0 a1=4000b570f8 a2=4000be6510 a3=25 items=0 ppid=1 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:19.803000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:19.810580 kubelet[2854]: I1002 19:02:19.810349 2854 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:02:19.810580 kubelet[2854]: I1002 19:02:19.810455 2854 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:02:19.815862 kubelet[2854]: I1002 19:02:19.815811 2854 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:02:19.819371 kubelet[2854]: I1002 19:02:19.819311 2854 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:02:19.819859 kubelet[2854]: I1002 19:02:19.819804 2854 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:02:19.915552 kubelet[2854]: I1002 19:02:19.914864 2854 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:02:19.935949 kubelet[2854]: I1002 19:02:19.933629 2854 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:02:19.935949 kubelet[2854]: I1002 19:02:19.933676 2854 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:02:19.935949 kubelet[2854]: I1002 19:02:19.933707 2854 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:02:19.935949 kubelet[2854]: E1002 19:02:19.933805 2854 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:02:19.956953 kubelet[2854]: I1002 19:02:19.956517 2854 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-187" Oct 2 19:02:19.978254 kubelet[2854]: I1002 19:02:19.971962 2854 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-29-187" Oct 2 19:02:19.978254 kubelet[2854]: I1002 19:02:19.972107 2854 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-29-187" Oct 2 19:02:20.044214 kubelet[2854]: E1002 19:02:20.038279 2854 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:02:20.055606 kubelet[2854]: I1002 19:02:20.055556 2854 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:02:20.055606 kubelet[2854]: I1002 19:02:20.055596 2854 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:02:20.055807 kubelet[2854]: I1002 19:02:20.055633 2854 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:20.055901 kubelet[2854]: I1002 19:02:20.055867 2854 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:02:20.055970 kubelet[2854]: I1002 19:02:20.055918 2854 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 19:02:20.055970 kubelet[2854]: I1002 19:02:20.055936 2854 policy_none.go:49] "None policy: Start" Oct 2 19:02:20.057378 kubelet[2854]: I1002 19:02:20.057328 2854 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:02:20.057522 kubelet[2854]: I1002 19:02:20.057437 2854 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:02:20.057772 kubelet[2854]: I1002 19:02:20.057697 2854 state_mem.go:75] "Updated machine memory state" Oct 2 19:02:20.067055 kubelet[2854]: I1002 19:02:20.066976 2854 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:02:20.067230 kubelet[2854]: I1002 19:02:20.067143 2854 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:02:20.065000 audit[2854]: AVC avc: denied { mac_admin } for pid=2854 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:20.065000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:20.065000 audit[2854]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40010e3a40 a1=4000cf53b0 a2=40010e3a10 a3=25 items=0 ppid=1 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:20.065000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:20.068613 kubelet[2854]: I1002 19:02:20.068579 2854 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:02:20.245007 kubelet[2854]: I1002 19:02:20.244962 2854 topology_manager.go:215] "Topology Admit Handler" podUID="7e32e413b8b10b19fa99fa8d0efcaee6" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-29-187" Oct 2 19:02:20.245440 kubelet[2854]: I1002 19:02:20.245411 2854 topology_manager.go:215] "Topology Admit Handler" podUID="cd086b47000132586d5964d7c9c88457" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:20.245643 kubelet[2854]: I1002 19:02:20.245617 2854 topology_manager.go:215] "Topology Admit Handler" podUID="5fc113e1a1198af9b87b1e90370795e6" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-29-187" Oct 2 19:02:20.256033 kubelet[2854]: E1002 19:02:20.255992 2854 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-29-187\" already exists" pod="kube-system/kube-scheduler-ip-172-31-29-187" Oct 2 19:02:20.321734 kubelet[2854]: I1002 19:02:20.321672 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7e32e413b8b10b19fa99fa8d0efcaee6-ca-certs\") pod \"kube-apiserver-ip-172-31-29-187\" (UID: \"7e32e413b8b10b19fa99fa8d0efcaee6\") " pod="kube-system/kube-apiserver-ip-172-31-29-187" Oct 2 19:02:20.322035 kubelet[2854]: I1002 19:02:20.322010 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7e32e413b8b10b19fa99fa8d0efcaee6-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-187\" (UID: \"7e32e413b8b10b19fa99fa8d0efcaee6\") " pod="kube-system/kube-apiserver-ip-172-31-29-187" Oct 2 19:02:20.322291 kubelet[2854]: I1002 19:02:20.322268 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:20.322496 kubelet[2854]: I1002 19:02:20.322456 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:20.322698 kubelet[2854]: I1002 19:02:20.322658 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5fc113e1a1198af9b87b1e90370795e6-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-187\" (UID: \"5fc113e1a1198af9b87b1e90370795e6\") " pod="kube-system/kube-scheduler-ip-172-31-29-187" Oct 2 19:02:20.322924 kubelet[2854]: I1002 19:02:20.322899 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7e32e413b8b10b19fa99fa8d0efcaee6-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-187\" (UID: \"7e32e413b8b10b19fa99fa8d0efcaee6\") " pod="kube-system/kube-apiserver-ip-172-31-29-187" Oct 2 19:02:20.323134 kubelet[2854]: I1002 19:02:20.323094 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:20.323379 kubelet[2854]: I1002 19:02:20.323338 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:20.323596 kubelet[2854]: I1002 19:02:20.323546 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/cd086b47000132586d5964d7c9c88457-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-187\" (UID: \"cd086b47000132586d5964d7c9c88457\") " pod="kube-system/kube-controller-manager-ip-172-31-29-187" Oct 2 19:02:20.691141 sudo[2864]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:20.703281 kernel: kauditd_printk_skb: 275 callbacks suppressed Oct 2 19:02:20.703489 kernel: audit: type=1106 audit(1696273340.691:986): pid=2864 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:20.691000 audit[2864]: USER_END pid=2864 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:20.691000 audit[2864]: CRED_DISP pid=2864 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:20.717566 kernel: audit: type=1104 audit(1696273340.691:987): pid=2864 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:20.759557 kubelet[2854]: I1002 19:02:20.759499 2854 apiserver.go:52] "Watching apiserver" Oct 2 19:02:20.804288 kubelet[2854]: I1002 19:02:20.804219 2854 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-29-187" podStartSLOduration=0.804058775 podCreationTimestamp="2023-10-02 19:02:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:20.804047878 +0000 UTC m=+1.266427856" watchObservedRunningTime="2023-10-02 19:02:20.804058775 +0000 UTC m=+1.266438717" Oct 2 19:02:20.804450 kubelet[2854]: I1002 19:02:20.804369 2854 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-29-187" podStartSLOduration=0.804333328 podCreationTimestamp="2023-10-02 19:02:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:20.789141567 +0000 UTC m=+1.251521569" watchObservedRunningTime="2023-10-02 19:02:20.804333328 +0000 UTC m=+1.266713282" Oct 2 19:02:20.821245 kubelet[2854]: I1002 19:02:20.819641 2854 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:02:21.020069 kubelet[2854]: E1002 19:02:21.020013 2854 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-29-187\" already exists" pod="kube-system/kube-apiserver-ip-172-31-29-187" Oct 2 19:02:22.775755 sudo[1997]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:22.775000 audit[1997]: USER_END pid=1997 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:22.775000 audit[1997]: CRED_DISP pid=1997 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:22.795326 kernel: audit: type=1106 audit(1696273342.775:988): pid=1997 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:22.795450 kernel: audit: type=1104 audit(1696273342.775:989): pid=1997 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:22.808468 sshd[1994]: pam_unix(sshd:session): session closed for user core Oct 2 19:02:22.809000 audit[1994]: USER_END pid=1994 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:02:22.823641 systemd[1]: sshd@6-172.31.29.187:22-139.178.89.65:60550.service: Deactivated successfully. Oct 2 19:02:22.810000 audit[1994]: CRED_DISP pid=1994 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:02:22.824414 kernel: audit: type=1106 audit(1696273342.809:990): pid=1994 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:02:22.825007 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:02:22.825569 systemd[1]: session-7.scope: Consumed 10.613s CPU time. Oct 2 19:02:22.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.187:22-139.178.89.65:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:22.835831 systemd-logind[1724]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:02:22.844626 kernel: audit: type=1104 audit(1696273342.810:991): pid=1994 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:02:22.844823 kernel: audit: type=1131 audit(1696273342.822:992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.187:22-139.178.89.65:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:22.845676 systemd-logind[1724]: Removed session 7. Oct 2 19:02:28.719000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:02:28.719000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fac240 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:28.745680 kernel: audit: type=1400 audit(1696273348.719:993): avc: denied { watch } for pid=2627 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:02:28.745874 kernel: audit: type=1300 audit(1696273348.719:993): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fac240 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:28.719000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:28.759879 kernel: audit: type=1327 audit(1696273348.719:993): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.436000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.441000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.457058 kernel: audit: type=1400 audit(1696273350.436:994): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.457235 kernel: audit: type=1400 audit(1696273350.441:995): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.457312 kernel: audit: type=1300 audit(1696273350.441:995): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001322060 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:30.441000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001322060 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:30.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.480221 kernel: audit: type=1327 audit(1696273350.441:995): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.441000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.490299 kernel: audit: type=1400 audit(1696273350.441:996): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.441000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013220a0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:30.503154 kernel: audit: type=1300 audit(1696273350.441:996): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013220a0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:30.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.514301 kernel: audit: type=1327 audit(1696273350.441:996): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.441000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:30.441000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013220e0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:30.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:30.436000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122dbc0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:02:30.436000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:31.626209 kubelet[2854]: I1002 19:02:31.626149 2854 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:02:31.627641 env[1740]: time="2023-10-02T19:02:31.627419610Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:02:31.628502 kubelet[2854]: I1002 19:02:31.628465 2854 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:02:32.414814 kubelet[2854]: I1002 19:02:32.414770 2854 topology_manager.go:215] "Topology Admit Handler" podUID="592b656b-89f0-4658-b90d-69fc9b402bc1" podNamespace="kube-system" podName="kube-proxy-d494f" Oct 2 19:02:32.427714 systemd[1]: Created slice kubepods-besteffort-pod592b656b_89f0_4658_b90d_69fc9b402bc1.slice. Oct 2 19:02:32.459647 kubelet[2854]: I1002 19:02:32.459586 2854 topology_manager.go:215] "Topology Admit Handler" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" podNamespace="kube-system" podName="cilium-zgqpx" Oct 2 19:02:32.470248 systemd[1]: Created slice kubepods-burstable-pode6a649b0_dc78_4826_bd89_851dcf934b2a.slice. Oct 2 19:02:32.598539 kubelet[2854]: I1002 19:02:32.598501 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jjm95\" (UniqueName: \"kubernetes.io/projected/592b656b-89f0-4658-b90d-69fc9b402bc1-kube-api-access-jjm95\") pod \"kube-proxy-d494f\" (UID: \"592b656b-89f0-4658-b90d-69fc9b402bc1\") " pod="kube-system/kube-proxy-d494f" Oct 2 19:02:32.598965 kubelet[2854]: I1002 19:02:32.598938 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-etc-cni-netd\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.599220 kubelet[2854]: I1002 19:02:32.599157 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-xtables-lock\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.599432 kubelet[2854]: I1002 19:02:32.599389 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-config-path\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.599640 kubelet[2854]: I1002 19:02:32.599597 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e6a649b0-dc78-4826-bd89-851dcf934b2a-hubble-tls\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.599848 kubelet[2854]: I1002 19:02:32.599807 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nw9p8\" (UniqueName: \"kubernetes.io/projected/e6a649b0-dc78-4826-bd89-851dcf934b2a-kube-api-access-nw9p8\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.600090 kubelet[2854]: I1002 19:02:32.600066 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/592b656b-89f0-4658-b90d-69fc9b402bc1-lib-modules\") pod \"kube-proxy-d494f\" (UID: \"592b656b-89f0-4658-b90d-69fc9b402bc1\") " pod="kube-system/kube-proxy-d494f" Oct 2 19:02:32.600340 kubelet[2854]: I1002 19:02:32.600297 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-run\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.600559 kubelet[2854]: I1002 19:02:32.600518 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cni-path\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.600761 kubelet[2854]: I1002 19:02:32.600720 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e6a649b0-dc78-4826-bd89-851dcf934b2a-clustermesh-secrets\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.600961 kubelet[2854]: I1002 19:02:32.600921 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-host-proc-sys-net\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.601189 kubelet[2854]: I1002 19:02:32.601143 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/592b656b-89f0-4658-b90d-69fc9b402bc1-kube-proxy\") pod \"kube-proxy-d494f\" (UID: \"592b656b-89f0-4658-b90d-69fc9b402bc1\") " pod="kube-system/kube-proxy-d494f" Oct 2 19:02:32.601408 kubelet[2854]: I1002 19:02:32.601367 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/592b656b-89f0-4658-b90d-69fc9b402bc1-xtables-lock\") pod \"kube-proxy-d494f\" (UID: \"592b656b-89f0-4658-b90d-69fc9b402bc1\") " pod="kube-system/kube-proxy-d494f" Oct 2 19:02:32.601634 kubelet[2854]: I1002 19:02:32.601593 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-lib-modules\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.601876 kubelet[2854]: I1002 19:02:32.601852 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-hostproc\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.602096 kubelet[2854]: I1002 19:02:32.602054 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-host-proc-sys-kernel\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.602357 kubelet[2854]: I1002 19:02:32.602316 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-cgroup\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.602570 kubelet[2854]: I1002 19:02:32.602528 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-bpf-maps\") pod \"cilium-zgqpx\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " pod="kube-system/cilium-zgqpx" Oct 2 19:02:32.628769 kubelet[2854]: I1002 19:02:32.628701 2854 topology_manager.go:215] "Topology Admit Handler" podUID="4d7eb91f-aee1-41de-ad1e-520cec083c0e" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-8hrhk" Oct 2 19:02:32.639785 systemd[1]: Created slice kubepods-besteffort-pod4d7eb91f_aee1_41de_ad1e_520cec083c0e.slice. Oct 2 19:02:32.804793 kubelet[2854]: I1002 19:02:32.804734 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mhhsj\" (UniqueName: \"kubernetes.io/projected/4d7eb91f-aee1-41de-ad1e-520cec083c0e-kube-api-access-mhhsj\") pod \"cilium-operator-6bc8ccdb58-8hrhk\" (UID: \"4d7eb91f-aee1-41de-ad1e-520cec083c0e\") " pod="kube-system/cilium-operator-6bc8ccdb58-8hrhk" Oct 2 19:02:32.804989 kubelet[2854]: I1002 19:02:32.804852 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4d7eb91f-aee1-41de-ad1e-520cec083c0e-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-8hrhk\" (UID: \"4d7eb91f-aee1-41de-ad1e-520cec083c0e\") " pod="kube-system/cilium-operator-6bc8ccdb58-8hrhk" Oct 2 19:02:32.948071 env[1740]: time="2023-10-02T19:02:32.947428839Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-8hrhk,Uid:4d7eb91f-aee1-41de-ad1e-520cec083c0e,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:32.995921 env[1740]: time="2023-10-02T19:02:32.995788030Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:32.996950 env[1740]: time="2023-10-02T19:02:32.996874525Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:32.997178 env[1740]: time="2023-10-02T19:02:32.997095797Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:32.997770 env[1740]: time="2023-10-02T19:02:32.997705199Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd pid=2934 runtime=io.containerd.runc.v2 Oct 2 19:02:33.030703 systemd[1]: Started cri-containerd-54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd.scope. Oct 2 19:02:33.039712 env[1740]: time="2023-10-02T19:02:33.039648513Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-d494f,Uid:592b656b-89f0-4658-b90d-69fc9b402bc1,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.079000 audit: BPF prog-id=118 op=LOAD Oct 2 19:02:33.082003 env[1740]: time="2023-10-02T19:02:33.079667781Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-zgqpx,Uid:e6a649b0-dc78-4826-bd89-851dcf934b2a,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:33.082000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.082000 audit[2944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613066653062393866363766343039386563366336653662356333 Oct 2 19:02:33.084000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.084000 audit[2944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.084000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613066653062393866363766343039386563366336653662356333 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.086000 audit: BPF prog-id=119 op=LOAD Oct 2 19:02:33.086000 audit[2944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613066653062393866363766343039386563366336653662356333 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.087000 audit: BPF prog-id=120 op=LOAD Oct 2 19:02:33.087000 audit[2944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613066653062393866363766343039386563366336653662356333 Oct 2 19:02:33.088000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:02:33.089000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { perfmon } for pid=2944 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit[2944]: AVC avc: denied { bpf } for pid=2944 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.089000 audit: BPF prog-id=121 op=LOAD Oct 2 19:02:33.089000 audit[2944]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2934 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613066653062393866363766343039386563366336653662356333 Oct 2 19:02:33.095245 env[1740]: time="2023-10-02T19:02:33.094575806Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:33.095245 env[1740]: time="2023-10-02T19:02:33.094940763Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:33.095245 env[1740]: time="2023-10-02T19:02:33.095080740Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:33.097338 env[1740]: time="2023-10-02T19:02:33.097139862Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7f527f6f6120cd10bdea1e60231d9965bce640065f5e3bfb565331a51a6f1d04 pid=2967 runtime=io.containerd.runc.v2 Oct 2 19:02:33.155925 systemd[1]: Started cri-containerd-7f527f6f6120cd10bdea1e60231d9965bce640065f5e3bfb565331a51a6f1d04.scope. Oct 2 19:02:33.165445 env[1740]: time="2023-10-02T19:02:33.157022780Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:33.165445 env[1740]: time="2023-10-02T19:02:33.157662423Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:33.165445 env[1740]: time="2023-10-02T19:02:33.157739517Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:33.165445 env[1740]: time="2023-10-02T19:02:33.158463069Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915 pid=2990 runtime=io.containerd.runc.v2 Oct 2 19:02:33.186060 env[1740]: time="2023-10-02T19:02:33.185986066Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-8hrhk,Uid:4d7eb91f-aee1-41de-ad1e-520cec083c0e,Namespace:kube-system,Attempt:0,} returns sandbox id \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\"" Oct 2 19:02:33.195895 env[1740]: time="2023-10-02T19:02:33.195833759Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:02:33.223271 systemd[1]: Started cri-containerd-1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915.scope. Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.229000 audit: BPF prog-id=122 op=LOAD Oct 2 19:02:33.231000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.231000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2967 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766353237663666363132306364313062646561316536303233316439 Oct 2 19:02:33.231000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.231000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2967 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766353237663666363132306364313062646561316536303233316439 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.232000 audit: BPF prog-id=123 op=LOAD Oct 2 19:02:33.232000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2967 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766353237663666363132306364313062646561316536303233316439 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.233000 audit: BPF prog-id=124 op=LOAD Oct 2 19:02:33.233000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2967 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766353237663666363132306364313062646561316536303233316439 Oct 2 19:02:33.234000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:02:33.235000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.235000 audit: BPF prog-id=125 op=LOAD Oct 2 19:02:33.235000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2967 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766353237663666363132306364313062646561316536303233316439 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.277000 audit: BPF prog-id=126 op=LOAD Oct 2 19:02:33.280000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.280000 audit[3004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2990 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366536323364626533353364353665363362613764633362373435 Oct 2 19:02:33.280000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.280000 audit[3004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2990 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366536323364626533353364353665363362613764633362373435 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.281000 audit: BPF prog-id=127 op=LOAD Oct 2 19:02:33.281000 audit[3004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2990 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366536323364626533353364353665363362613764633362373435 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.282000 audit: BPF prog-id=128 op=LOAD Oct 2 19:02:33.282000 audit[3004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2990 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366536323364626533353364353665363362613764633362373435 Oct 2 19:02:33.284000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:02:33.284000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { perfmon } for pid=3004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit[3004]: AVC avc: denied { bpf } for pid=3004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.284000 audit: BPF prog-id=129 op=LOAD Oct 2 19:02:33.284000 audit[3004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2990 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366536323364626533353364353665363362613764633362373435 Oct 2 19:02:33.302424 env[1740]: time="2023-10-02T19:02:33.302368455Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-d494f,Uid:592b656b-89f0-4658-b90d-69fc9b402bc1,Namespace:kube-system,Attempt:0,} returns sandbox id \"7f527f6f6120cd10bdea1e60231d9965bce640065f5e3bfb565331a51a6f1d04\"" Oct 2 19:02:33.311818 env[1740]: time="2023-10-02T19:02:33.311752365Z" level=info msg="CreateContainer within sandbox \"7f527f6f6120cd10bdea1e60231d9965bce640065f5e3bfb565331a51a6f1d04\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:02:33.350412 env[1740]: time="2023-10-02T19:02:33.341287033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-zgqpx,Uid:e6a649b0-dc78-4826-bd89-851dcf934b2a,Namespace:kube-system,Attempt:0,} returns sandbox id \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\"" Oct 2 19:02:33.356560 env[1740]: time="2023-10-02T19:02:33.356480113Z" level=info msg="CreateContainer within sandbox \"7f527f6f6120cd10bdea1e60231d9965bce640065f5e3bfb565331a51a6f1d04\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"9f9df563d6b3ba5ca3a341299c618c2b6652554efc0d80f7f4046ba60dc79540\"" Oct 2 19:02:33.360612 env[1740]: time="2023-10-02T19:02:33.360510812Z" level=info msg="StartContainer for \"9f9df563d6b3ba5ca3a341299c618c2b6652554efc0d80f7f4046ba60dc79540\"" Oct 2 19:02:33.408735 systemd[1]: Started cri-containerd-9f9df563d6b3ba5ca3a341299c618c2b6652554efc0d80f7f4046ba60dc79540.scope. Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2967 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966396466353633643662336261356361336133343132393963363138 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.462000 audit: BPF prog-id=130 op=LOAD Oct 2 19:02:33.462000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2967 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966396466353633643662336261356361336133343132393963363138 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.464000 audit: BPF prog-id=131 op=LOAD Oct 2 19:02:33.464000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2967 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966396466353633643662336261356361336133343132393963363138 Oct 2 19:02:33.466000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:02:33.466000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:33.466000 audit: BPF prog-id=132 op=LOAD Oct 2 19:02:33.466000 audit[3052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2967 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966396466353633643662336261356361336133343132393963363138 Oct 2 19:02:33.501872 env[1740]: time="2023-10-02T19:02:33.501779453Z" level=info msg="StartContainer for \"9f9df563d6b3ba5ca3a341299c618c2b6652554efc0d80f7f4046ba60dc79540\" returns successfully" Oct 2 19:02:33.687000 audit[3103]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3103 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:33.687000 audit[3103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdae26e20 a2=0 a3=ffff9ddfd6c0 items=0 ppid=3063 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.687000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:02:33.701000 audit[3105]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=3105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:33.701000 audit[3105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7d321f0 a2=0 a3=ffffa2a636c0 items=0 ppid=3063 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.701000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:02:33.705000 audit[3107]: NETFILTER_CFG table=filter:40 family=10 entries=1 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:33.705000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffecb902d0 a2=0 a3=ffffbe1ac6c0 items=0 ppid=3063 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.705000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:02:33.705000 audit[3106]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.705000 audit[3106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcd8f21b0 a2=0 a3=ffffb32056c0 items=0 ppid=3063 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.705000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:02:33.709000 audit[3108]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.709000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea45d4f0 a2=0 a3=ffff85e766c0 items=0 ppid=3063 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.709000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:02:33.716000 audit[3109]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.716000 audit[3109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe3b7ee10 a2=0 a3=ffffae71b6c0 items=0 ppid=3063 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.716000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:02:33.797000 audit[3110]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.799571 kernel: kauditd_printk_skb: 237 callbacks suppressed Oct 2 19:02:33.799675 kernel: audit: type=1325 audit(1696273353.797:1064): table=filter:44 family=2 entries=1 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.797000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffe07d830 a2=0 a3=ffff9980a6c0 items=0 ppid=3063 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.817610 kernel: audit: type=1300 audit(1696273353.797:1064): arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffe07d830 a2=0 a3=ffff9980a6c0 items=0 ppid=3063 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.797000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:02:33.824383 kernel: audit: type=1327 audit(1696273353.797:1064): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:02:33.815000 audit[3112]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3112 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.830667 kernel: audit: type=1325 audit(1696273353.815:1065): table=filter:45 family=2 entries=1 op=nft_register_rule pid=3112 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.815000 audit[3112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffcb28d60 a2=0 a3=ffff9f6286c0 items=0 ppid=3063 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.843928 kernel: audit: type=1300 audit(1696273353.815:1065): arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffcb28d60 a2=0 a3=ffff9f6286c0 items=0 ppid=3063 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.815000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:02:33.854926 kernel: audit: type=1327 audit(1696273353.815:1065): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:02:33.831000 audit[3115]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.861179 kernel: audit: type=1325 audit(1696273353.831:1066): table=filter:46 family=2 entries=1 op=nft_register_rule pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.831000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdeb71e00 a2=0 a3=ffffabe036c0 items=0 ppid=3063 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.873669 kernel: audit: type=1300 audit(1696273353.831:1066): arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdeb71e00 a2=0 a3=ffffabe036c0 items=0 ppid=3063 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.831000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:02:33.884894 kernel: audit: type=1327 audit(1696273353.831:1066): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:02:33.844000 audit[3116]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.891219 kernel: audit: type=1325 audit(1696273353.844:1067): table=filter:47 family=2 entries=1 op=nft_register_chain pid=3116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.844000 audit[3116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffedfce550 a2=0 a3=ffffb05c66c0 items=0 ppid=3063 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.844000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:02:33.861000 audit[3118]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.861000 audit[3118]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd2601590 a2=0 a3=ffff943546c0 items=0 ppid=3063 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.861000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:02:33.873000 audit[3119]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.873000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca8c59e0 a2=0 a3=ffffbb1056c0 items=0 ppid=3063 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.873000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:02:33.895000 audit[3121]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.895000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffde17ff30 a2=0 a3=ffff9955e6c0 items=0 ppid=3063 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.895000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:02:33.907000 audit[3124]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.907000 audit[3124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd7439e50 a2=0 a3=ffff8ec406c0 items=0 ppid=3063 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:02:33.912000 audit[3125]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3125 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.912000 audit[3125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc2ceb970 a2=0 a3=ffff837ce6c0 items=0 ppid=3063 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.912000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:02:33.927000 audit[3127]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.927000 audit[3127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe6e5c380 a2=0 a3=ffffa8f9d6c0 items=0 ppid=3063 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.927000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:02:33.930000 audit[3128]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3128 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.930000 audit[3128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6bf6a80 a2=0 a3=ffffaeff26c0 items=0 ppid=3063 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.930000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:02:33.943000 audit[3130]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3130 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.943000 audit[3130]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcfc67600 a2=0 a3=ffff964c06c0 items=0 ppid=3063 pid=3130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.943000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:33.960000 audit[3133]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.960000 audit[3133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd4719380 a2=0 a3=ffff87bf16c0 items=0 ppid=3063 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.960000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:33.976000 audit[3136]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.976000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffaa64540 a2=0 a3=ffffb407a6c0 items=0 ppid=3063 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:02:33.980000 audit[3137]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.980000 audit[3137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcdb5d770 a2=0 a3=ffff872916c0 items=0 ppid=3063 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.980000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:02:33.988000 audit[3139]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:33.988000 audit[3139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe0720560 a2=0 a3=ffffa9b336c0 items=0 ppid=3063 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:33.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:34.000000 audit[3142]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.000000 audit[3142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffde41180 a2=0 a3=ffff945336c0 items=0 ppid=3063 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.000000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:34.003000 audit[3143]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.003000 audit[3143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd9170550 a2=0 a3=ffff936946c0 items=0 ppid=3063 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.003000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:02:34.012000 audit[3145]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:34.012000 audit[3145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd5c7c680 a2=0 a3=ffffba8306c0 items=0 ppid=3063 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.012000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:02:34.075000 audit[3151]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:02:34.075000 audit[3151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe938a4a0 a2=0 a3=ffff8e8776c0 items=0 ppid=3063 pid=3151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:34.086000 audit[3151]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:02:34.086000 audit[3151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffe938a4a0 a2=0 a3=ffff8e8776c0 items=0 ppid=3063 pid=3151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:34.092000 audit[3157]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.092000 audit[3157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff7886cc0 a2=0 a3=ffffaec306c0 items=0 ppid=3063 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.092000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:02:34.104000 audit[3159]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3159 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.104000 audit[3159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc3402310 a2=0 a3=ffffae4ce6c0 items=0 ppid=3063 pid=3159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.104000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:02:34.117000 audit[3162]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.117000 audit[3162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff5c91d00 a2=0 a3=ffffbdf6f6c0 items=0 ppid=3063 pid=3162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.117000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:02:34.121000 audit[3163]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.121000 audit[3163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdbd57270 a2=0 a3=ffffa16806c0 items=0 ppid=3063 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.121000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:02:34.130000 audit[3165]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.130000 audit[3165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe9322700 a2=0 a3=ffff84b706c0 items=0 ppid=3063 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:02:34.134000 audit[3166]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.134000 audit[3166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff53f8480 a2=0 a3=ffffa3eb26c0 items=0 ppid=3063 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.134000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:02:34.143000 audit[3168]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.143000 audit[3168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe309bb90 a2=0 a3=ffffa8b866c0 items=0 ppid=3063 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.143000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:02:34.156000 audit[3171]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3171 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.156000 audit[3171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffeeb93e20 a2=0 a3=ffffb25f96c0 items=0 ppid=3063 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.156000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:02:34.160000 audit[3172]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3172 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.160000 audit[3172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd59a2720 a2=0 a3=ffffbc4126c0 items=0 ppid=3063 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.160000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:02:34.170000 audit[3174]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.170000 audit[3174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff1c94080 a2=0 a3=ffffbba526c0 items=0 ppid=3063 pid=3174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.170000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:02:34.176000 audit[3175]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3175 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.176000 audit[3175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1e80130 a2=0 a3=ffffacdea6c0 items=0 ppid=3063 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.176000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:02:34.185000 audit[3177]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.185000 audit[3177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc9050c10 a2=0 a3=ffffad0746c0 items=0 ppid=3063 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.185000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:34.203000 audit[3180]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3180 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.203000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd7c1cf70 a2=0 a3=ffff9f9336c0 items=0 ppid=3063 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.203000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:02:34.225000 audit[3183]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3183 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.225000 audit[3183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffca5120a0 a2=0 a3=ffffaf3676c0 items=0 ppid=3063 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.225000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:02:34.231000 audit[3184]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3184 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.231000 audit[3184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdacdfca0 a2=0 a3=ffffa82d36c0 items=0 ppid=3063 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.231000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:02:34.241000 audit[3186]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3186 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.241000 audit[3186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc507dc80 a2=0 a3=ffffad2266c0 items=0 ppid=3063 pid=3186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.241000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:34.256000 audit[3189]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3189 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.256000 audit[3189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc5601b50 a2=0 a3=ffffa12376c0 items=0 ppid=3063 pid=3189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.256000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:34.260000 audit[3190]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3190 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.260000 audit[3190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff64a27b0 a2=0 a3=ffff803ab6c0 items=0 ppid=3063 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.260000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:02:34.268000 audit[3192]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3192 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.268000 audit[3192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffde504df0 a2=0 a3=ffff8695c6c0 items=0 ppid=3063 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.268000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:02:34.272000 audit[3193]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3193 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.272000 audit[3193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd8dab70 a2=0 a3=ffff9cbaa6c0 items=0 ppid=3063 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:02:34.282000 audit[3195]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3195 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.282000 audit[3195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe3519a40 a2=0 a3=ffff88f2b6c0 items=0 ppid=3063 pid=3195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.282000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:02:34.294000 audit[3198]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3198 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:34.294000 audit[3198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe291c510 a2=0 a3=ffff952446c0 items=0 ppid=3063 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.294000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:02:34.304000 audit[3200]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:02:34.304000 audit[3200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffe548a980 a2=0 a3=ffffb60cc6c0 items=0 ppid=3063 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.304000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:34.305000 audit[3200]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:02:34.305000 audit[3200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffe548a980 a2=0 a3=ffffb60cc6c0 items=0 ppid=3063 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:34.305000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:34.582326 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount742230983.mount: Deactivated successfully. Oct 2 19:02:35.537517 env[1740]: time="2023-10-02T19:02:35.537456519Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:35.540532 env[1740]: time="2023-10-02T19:02:35.540468398Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:35.543710 env[1740]: time="2023-10-02T19:02:35.543647436Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:35.544827 env[1740]: time="2023-10-02T19:02:35.544779204Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:02:35.548083 env[1740]: time="2023-10-02T19:02:35.547907563Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:02:35.550968 env[1740]: time="2023-10-02T19:02:35.550912566Z" level=info msg="CreateContainer within sandbox \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:02:35.576948 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1150819384.mount: Deactivated successfully. Oct 2 19:02:35.587429 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2693748657.mount: Deactivated successfully. Oct 2 19:02:35.591294 env[1740]: time="2023-10-02T19:02:35.591166174Z" level=info msg="CreateContainer within sandbox \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\"" Oct 2 19:02:35.594700 env[1740]: time="2023-10-02T19:02:35.592166966Z" level=info msg="StartContainer for \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\"" Oct 2 19:02:35.647878 systemd[1]: Started cri-containerd-ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952.scope. Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.694000 audit: BPF prog-id=133 op=LOAD Oct 2 19:02:35.695000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.695000 audit[3209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2934 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:35.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313064663934353239396336333037343065393236336131363637 Oct 2 19:02:35.695000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.695000 audit[3209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2934 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:35.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313064663934353239396336333037343065393236336131363637 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.696000 audit: BPF prog-id=134 op=LOAD Oct 2 19:02:35.696000 audit[3209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2934 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:35.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313064663934353239396336333037343065393236336131363637 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.698000 audit: BPF prog-id=135 op=LOAD Oct 2 19:02:35.698000 audit[3209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2934 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:35.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313064663934353239396336333037343065393236336131363637 Oct 2 19:02:35.699000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:02:35.700000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { perfmon } for pid=3209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit[3209]: AVC avc: denied { bpf } for pid=3209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:35.700000 audit: BPF prog-id=136 op=LOAD Oct 2 19:02:35.700000 audit[3209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2934 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:35.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313064663934353239396336333037343065393236336131363637 Oct 2 19:02:35.738745 env[1740]: time="2023-10-02T19:02:35.738667182Z" level=info msg="StartContainer for \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\" returns successfully" Oct 2 19:02:35.825000 audit[3219]: AVC avc: denied { map_create } for pid=3219 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c861,c914 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c861,c914 tclass=bpf permissive=0 Oct 2 19:02:35.825000 audit[3219]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=4000645768 a2=48 a3=0 items=0 ppid=2934 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c861,c914 key=(null) Oct 2 19:02:35.825000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:02:36.103402 kubelet[2854]: I1002 19:02:36.103255 2854 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-d494f" podStartSLOduration=4.103116946 podCreationTimestamp="2023-10-02 19:02:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:34.068027676 +0000 UTC m=+14.530407654" watchObservedRunningTime="2023-10-02 19:02:36.103116946 +0000 UTC m=+16.565496900" Oct 2 19:02:39.960432 kubelet[2854]: I1002 19:02:39.960386 2854 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-8hrhk" podStartSLOduration=5.607438576 podCreationTimestamp="2023-10-02 19:02:32 +0000 UTC" firstStartedPulling="2023-10-02 19:02:33.192608303 +0000 UTC m=+13.654988257" lastFinishedPulling="2023-10-02 19:02:35.545499118 +0000 UTC m=+16.007879072" observedRunningTime="2023-10-02 19:02:36.105144352 +0000 UTC m=+16.567524330" watchObservedRunningTime="2023-10-02 19:02:39.960329391 +0000 UTC m=+20.422709369" Oct 2 19:02:43.385478 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1859145582.mount: Deactivated successfully. Oct 2 19:02:47.574820 env[1740]: time="2023-10-02T19:02:47.574735718Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:47.579296 env[1740]: time="2023-10-02T19:02:47.579241125Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:47.582599 env[1740]: time="2023-10-02T19:02:47.582531304Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:47.584038 env[1740]: time="2023-10-02T19:02:47.583979668Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:02:47.589969 env[1740]: time="2023-10-02T19:02:47.589893154Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:02:47.613680 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3834246802.mount: Deactivated successfully. Oct 2 19:02:47.621622 env[1740]: time="2023-10-02T19:02:47.621509058Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\"" Oct 2 19:02:47.625527 env[1740]: time="2023-10-02T19:02:47.625458790Z" level=info msg="StartContainer for \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\"" Oct 2 19:02:47.676723 systemd[1]: Started cri-containerd-cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380.scope. Oct 2 19:02:47.723391 systemd[1]: cri-containerd-cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380.scope: Deactivated successfully. Oct 2 19:02:48.353934 env[1740]: time="2023-10-02T19:02:48.353834438Z" level=info msg="shim disconnected" id=cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380 Oct 2 19:02:48.354339 env[1740]: time="2023-10-02T19:02:48.354289992Z" level=warning msg="cleaning up after shim disconnected" id=cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380 namespace=k8s.io Oct 2 19:02:48.354468 env[1740]: time="2023-10-02T19:02:48.354439831Z" level=info msg="cleaning up dead shim" Oct 2 19:02:48.381711 env[1740]: time="2023-10-02T19:02:48.381641501Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:02:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3265 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:02:48Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:02:48.382576 env[1740]: time="2023-10-02T19:02:48.382355692Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:02:48.383346 env[1740]: time="2023-10-02T19:02:48.383292493Z" level=error msg="Failed to pipe stdout of container \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\"" error="reading from a closed fifo" Oct 2 19:02:48.383681 env[1740]: time="2023-10-02T19:02:48.383497295Z" level=error msg="Failed to pipe stderr of container \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\"" error="reading from a closed fifo" Oct 2 19:02:48.385983 env[1740]: time="2023-10-02T19:02:48.385875128Z" level=error msg="StartContainer for \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:02:48.386328 kubelet[2854]: E1002 19:02:48.386275 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380" Oct 2 19:02:48.387053 kubelet[2854]: E1002 19:02:48.386716 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:02:48.387053 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:02:48.387053 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:02:48.387416 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nw9p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:02:48.387416 kubelet[2854]: E1002 19:02:48.386786 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:02:48.604871 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380-rootfs.mount: Deactivated successfully. Oct 2 19:02:49.120868 env[1740]: time="2023-10-02T19:02:49.120784958Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:02:49.144422 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3088665430.mount: Deactivated successfully. Oct 2 19:02:49.158859 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3401899586.mount: Deactivated successfully. Oct 2 19:02:49.165572 env[1740]: time="2023-10-02T19:02:49.165494096Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\"" Oct 2 19:02:49.167151 env[1740]: time="2023-10-02T19:02:49.167087833Z" level=info msg="StartContainer for \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\"" Oct 2 19:02:49.210819 systemd[1]: Started cri-containerd-4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50.scope. Oct 2 19:02:49.250244 systemd[1]: cri-containerd-4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50.scope: Deactivated successfully. Oct 2 19:02:49.274239 env[1740]: time="2023-10-02T19:02:49.274140213Z" level=info msg="shim disconnected" id=4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50 Oct 2 19:02:49.274763 env[1740]: time="2023-10-02T19:02:49.274715713Z" level=warning msg="cleaning up after shim disconnected" id=4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50 namespace=k8s.io Oct 2 19:02:49.274928 env[1740]: time="2023-10-02T19:02:49.274899490Z" level=info msg="cleaning up dead shim" Oct 2 19:02:49.302348 env[1740]: time="2023-10-02T19:02:49.302286069Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:02:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3301 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:02:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:02:49.303108 env[1740]: time="2023-10-02T19:02:49.303016616Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:02:49.304190 env[1740]: time="2023-10-02T19:02:49.303606228Z" level=error msg="Failed to pipe stdout of container \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\"" error="reading from a closed fifo" Oct 2 19:02:49.304473 env[1740]: time="2023-10-02T19:02:49.303781749Z" level=error msg="Failed to pipe stderr of container \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\"" error="reading from a closed fifo" Oct 2 19:02:49.306291 env[1740]: time="2023-10-02T19:02:49.306130982Z" level=error msg="StartContainer for \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:02:49.306797 kubelet[2854]: E1002 19:02:49.306743 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50" Oct 2 19:02:49.306951 kubelet[2854]: E1002 19:02:49.306901 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:02:49.306951 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:02:49.306951 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:02:49.306951 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nw9p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:02:49.307384 kubelet[2854]: E1002 19:02:49.307067 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:02:50.120676 kubelet[2854]: I1002 19:02:50.120641 2854 scope.go:117] "RemoveContainer" containerID="cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380" Oct 2 19:02:50.121819 kubelet[2854]: I1002 19:02:50.121788 2854 scope.go:117] "RemoveContainer" containerID="cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380" Oct 2 19:02:50.126339 env[1740]: time="2023-10-02T19:02:50.126252648Z" level=info msg="RemoveContainer for \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\"" Oct 2 19:02:50.128031 env[1740]: time="2023-10-02T19:02:50.127931804Z" level=info msg="RemoveContainer for \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\"" Oct 2 19:02:50.128859 env[1740]: time="2023-10-02T19:02:50.128142702Z" level=error msg="RemoveContainer for \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\" failed" error="failed to set removing state for container \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\": container is already in removing state" Oct 2 19:02:50.129278 kubelet[2854]: E1002 19:02:50.129163 2854 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\": container is already in removing state" containerID="cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380" Oct 2 19:02:50.129484 kubelet[2854]: E1002 19:02:50.129460 2854 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380": container is already in removing state; Skipping pod "cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)" Oct 2 19:02:50.130057 kubelet[2854]: E1002 19:02:50.130028 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:02:50.137570 env[1740]: time="2023-10-02T19:02:50.137471537Z" level=info msg="RemoveContainer for \"cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380\" returns successfully" Oct 2 19:02:51.126327 kubelet[2854]: E1002 19:02:51.126290 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:02:51.458395 kubelet[2854]: W1002 19:02:51.458235 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode6a649b0_dc78_4826_bd89_851dcf934b2a.slice/cri-containerd-cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380.scope WatchSource:0}: container "cff683faec23362527895df4f24cd9d4369a8fd06ce41660fd5f1a29ad371380" in namespace "k8s.io": not found Oct 2 19:02:54.568380 kubelet[2854]: W1002 19:02:54.568268 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode6a649b0_dc78_4826_bd89_851dcf934b2a.slice/cri-containerd-4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50.scope WatchSource:0}: task 4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50 not found: not found Oct 2 19:03:04.939753 env[1740]: time="2023-10-02T19:03:04.939316368Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:03:04.958076 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3364601922.mount: Deactivated successfully. Oct 2 19:03:04.966905 env[1740]: time="2023-10-02T19:03:04.966798714Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\"" Oct 2 19:03:04.969850 env[1740]: time="2023-10-02T19:03:04.968127350Z" level=info msg="StartContainer for \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\"" Oct 2 19:03:05.031423 systemd[1]: Started cri-containerd-94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47.scope. Oct 2 19:03:05.074320 systemd[1]: cri-containerd-94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47.scope: Deactivated successfully. Oct 2 19:03:05.097475 env[1740]: time="2023-10-02T19:03:05.097404158Z" level=info msg="shim disconnected" id=94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47 Oct 2 19:03:05.097988 env[1740]: time="2023-10-02T19:03:05.097912313Z" level=warning msg="cleaning up after shim disconnected" id=94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47 namespace=k8s.io Oct 2 19:03:05.098158 env[1740]: time="2023-10-02T19:03:05.098126689Z" level=info msg="cleaning up dead shim" Oct 2 19:03:05.126086 env[1740]: time="2023-10-02T19:03:05.126013291Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:03:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3344 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:03:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:03:05.126929 env[1740]: time="2023-10-02T19:03:05.126787828Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:03:05.127898 env[1740]: time="2023-10-02T19:03:05.127277203Z" level=error msg="Failed to pipe stdout of container \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\"" error="reading from a closed fifo" Oct 2 19:03:05.128138 env[1740]: time="2023-10-02T19:03:05.127813736Z" level=error msg="Failed to pipe stderr of container \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\"" error="reading from a closed fifo" Oct 2 19:03:05.133096 env[1740]: time="2023-10-02T19:03:05.132995165Z" level=error msg="StartContainer for \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:03:05.133614 kubelet[2854]: E1002 19:03:05.133534 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47" Oct 2 19:03:05.134172 kubelet[2854]: E1002 19:03:05.133743 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:03:05.134172 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:03:05.134172 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:03:05.134172 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nw9p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:03:05.134172 kubelet[2854]: E1002 19:03:05.133829 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:03:05.163033 kubelet[2854]: I1002 19:03:05.162845 2854 scope.go:117] "RemoveContainer" containerID="4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50" Oct 2 19:03:05.165154 kubelet[2854]: I1002 19:03:05.163543 2854 scope.go:117] "RemoveContainer" containerID="4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50" Oct 2 19:03:05.171968 env[1740]: time="2023-10-02T19:03:05.171909712Z" level=info msg="RemoveContainer for \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\"" Oct 2 19:03:05.176861 env[1740]: time="2023-10-02T19:03:05.176799091Z" level=info msg="RemoveContainer for \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\"" Oct 2 19:03:05.177134 env[1740]: time="2023-10-02T19:03:05.176931724Z" level=error msg="RemoveContainer for \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\" failed" error="rpc error: code = NotFound desc = get container info: container \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\" in namespace \"k8s.io\": not found" Oct 2 19:03:05.178588 kubelet[2854]: E1002 19:03:05.177501 2854 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\" in namespace \"k8s.io\": not found" containerID="4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50" Oct 2 19:03:05.178588 kubelet[2854]: E1002 19:03:05.177588 2854 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50" in namespace "k8s.io": not found; Skipping pod "cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)" Oct 2 19:03:05.178588 kubelet[2854]: E1002 19:03:05.178246 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:03:05.185327 env[1740]: time="2023-10-02T19:03:05.185249233Z" level=info msg="RemoveContainer for \"4af9bfe719d886ee4a269de71bbaafd947c09b70bb67a898d6882e26bb4cad50\" returns successfully" Oct 2 19:03:05.953016 systemd[1]: run-containerd-runc-k8s.io-94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47-runc.0fhCWP.mount: Deactivated successfully. Oct 2 19:03:05.953513 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47-rootfs.mount: Deactivated successfully. Oct 2 19:03:08.203894 kubelet[2854]: W1002 19:03:08.203798 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode6a649b0_dc78_4826_bd89_851dcf934b2a.slice/cri-containerd-94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47.scope WatchSource:0}: task 94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47 not found: not found Oct 2 19:03:13.312841 systemd[1]: Started sshd@7-172.31.29.187:22-139.178.89.65:59652.service. Oct 2 19:03:13.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.187:22-139.178.89.65:59652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:13.315928 kernel: kauditd_printk_skb: 185 callbacks suppressed Oct 2 19:03:13.316065 kernel: audit: type=1130 audit(1696273393.313:1128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.187:22-139.178.89.65:59652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:13.502000 audit[3358]: USER_ACCT pid=3358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.504605 sshd[3358]: Accepted publickey for core from 139.178.89.65 port 59652 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:13.513255 kernel: audit: type=1101 audit(1696273393.502:1129): pid=3358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.515000 audit[3358]: CRED_ACQ pid=3358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.516840 sshd[3358]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:13.533334 kernel: audit: type=1103 audit(1696273393.515:1130): pid=3358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.533501 kernel: audit: type=1006 audit(1696273393.515:1131): pid=3358 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:03:13.527926 systemd[1]: Started session-8.scope. Oct 2 19:03:13.530960 systemd-logind[1724]: New session 8 of user core. Oct 2 19:03:13.515000 audit[3358]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfa04180 a2=3 a3=1 items=0 ppid=1 pid=3358 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:13.515000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:13.549639 kernel: audit: type=1300 audit(1696273393.515:1131): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfa04180 a2=3 a3=1 items=0 ppid=1 pid=3358 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:13.549805 kernel: audit: type=1327 audit(1696273393.515:1131): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:13.547000 audit[3358]: USER_START pid=3358 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.566003 kernel: audit: type=1105 audit(1696273393.547:1132): pid=3358 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.566000 audit[3360]: CRED_ACQ pid=3360 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.577529 kernel: audit: type=1103 audit(1696273393.566:1133): pid=3360 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.877882 sshd[3358]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:13.881000 audit[3358]: USER_END pid=3358 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.885030 systemd-logind[1724]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:03:13.888178 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:03:13.890748 systemd-logind[1724]: Removed session 8. Oct 2 19:03:13.892882 systemd[1]: sshd@7-172.31.29.187:22-139.178.89.65:59652.service: Deactivated successfully. Oct 2 19:03:13.881000 audit[3358]: CRED_DISP pid=3358 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.894339 kernel: audit: type=1106 audit(1696273393.881:1134): pid=3358 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:13.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.187:22-139.178.89.65:59652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:13.904258 kernel: audit: type=1104 audit(1696273393.881:1135): pid=3358 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:15.221000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.221000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400791fd10 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:03:15.221000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.221000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.221000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400ad0d000 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:03:15.221000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.222000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.222000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40078f2de0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:03:15.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.246000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.246000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400791fef0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:03:15.246000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.306000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.306000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a91bd00 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:03:15.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:15.306000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:15.306000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40078f2e40 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:03:15.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:03:16.037000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:16.037000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400138dc20 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:16.037000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:16.038000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:16.038000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f0bae0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:16.038000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:17.935702 kubelet[2854]: E1002 19:03:17.935646 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:03:23.908614 systemd[1]: Started sshd@8-172.31.29.187:22-139.178.89.65:33702.service. Oct 2 19:03:23.920509 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:03:23.920571 kernel: audit: type=1130 audit(1696273403.908:1145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.187:22-139.178.89.65:33702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:23.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.187:22-139.178.89.65:33702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:24.096000 audit[3373]: USER_ACCT pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.096991 sshd[3373]: Accepted publickey for core from 139.178.89.65 port 33702 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:24.108247 kernel: audit: type=1101 audit(1696273404.096:1146): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.109000 audit[3373]: CRED_ACQ pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.111496 sshd[3373]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:24.126929 kernel: audit: type=1103 audit(1696273404.109:1147): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.127032 kernel: audit: type=1006 audit(1696273404.109:1148): pid=3373 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:03:24.109000 audit[3373]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3db87e0 a2=3 a3=1 items=0 ppid=1 pid=3373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:24.137940 kernel: audit: type=1300 audit(1696273404.109:1148): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3db87e0 a2=3 a3=1 items=0 ppid=1 pid=3373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:24.138341 kernel: audit: type=1327 audit(1696273404.109:1148): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:24.109000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:24.147331 systemd-logind[1724]: New session 9 of user core. Oct 2 19:03:24.149094 systemd[1]: Started session-9.scope. Oct 2 19:03:24.158000 audit[3373]: USER_START pid=3373 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.172272 kernel: audit: type=1105 audit(1696273404.158:1149): pid=3373 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.172000 audit[3375]: CRED_ACQ pid=3375 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.184331 kernel: audit: type=1103 audit(1696273404.172:1150): pid=3375 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.440539 sshd[3373]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:24.443000 audit[3373]: USER_END pid=3373 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.446287 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:03:24.447833 systemd[1]: sshd@8-172.31.29.187:22-139.178.89.65:33702.service: Deactivated successfully. Oct 2 19:03:24.443000 audit[3373]: CRED_DISP pid=3373 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.464506 kernel: audit: type=1106 audit(1696273404.443:1151): pid=3373 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.464646 kernel: audit: type=1104 audit(1696273404.443:1152): pid=3373 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:24.464606 systemd-logind[1724]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:03:24.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.187:22-139.178.89.65:33702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:24.466276 systemd-logind[1724]: Removed session 9. Oct 2 19:03:30.449234 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:03:30.449367 kernel: audit: type=1400 audit(1696273410.442:1154): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.442000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.442000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012ae920 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:30.467499 kernel: audit: type=1300 audit(1696273410.442:1154): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012ae920 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:30.467575 kernel: audit: type=1327 audit(1696273410.442:1154): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.443000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.487748 kernel: audit: type=1400 audit(1696273410.443:1155): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.487841 kernel: audit: type=1300 audit(1696273410.443:1155): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122dd00 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:30.443000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122dd00 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:30.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.511504 kernel: audit: type=1327 audit(1696273410.443:1155): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.444000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.521668 kernel: audit: type=1400 audit(1696273410.444:1156): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.521762 kernel: audit: type=1300 audit(1696273410.444:1156): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012ae940 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:30.444000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012ae940 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:30.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.544691 kernel: audit: type=1327 audit(1696273410.444:1156): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.544800 kernel: audit: type=1400 audit(1696273410.446:1157): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.446000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:30.446000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012aea80 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:03:30.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:30.939180 env[1740]: time="2023-10-02T19:03:30.939116906Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:03:30.964444 env[1740]: time="2023-10-02T19:03:30.964361006Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\"" Oct 2 19:03:30.965576 env[1740]: time="2023-10-02T19:03:30.965518152Z" level=info msg="StartContainer for \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\"" Oct 2 19:03:31.032556 systemd[1]: run-containerd-runc-k8s.io-a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853-runc.wcVZKw.mount: Deactivated successfully. Oct 2 19:03:31.039534 systemd[1]: Started cri-containerd-a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853.scope. Oct 2 19:03:31.078343 systemd[1]: cri-containerd-a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853.scope: Deactivated successfully. Oct 2 19:03:31.110352 env[1740]: time="2023-10-02T19:03:31.110271251Z" level=info msg="shim disconnected" id=a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853 Oct 2 19:03:31.110702 env[1740]: time="2023-10-02T19:03:31.110351772Z" level=warning msg="cleaning up after shim disconnected" id=a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853 namespace=k8s.io Oct 2 19:03:31.110702 env[1740]: time="2023-10-02T19:03:31.110374200Z" level=info msg="cleaning up dead shim" Oct 2 19:03:31.143718 env[1740]: time="2023-10-02T19:03:31.143630489Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:03:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3409 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:03:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:03:31.145006 env[1740]: time="2023-10-02T19:03:31.144526885Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:03:31.146559 env[1740]: time="2023-10-02T19:03:31.146435862Z" level=error msg="Failed to pipe stdout of container \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\"" error="reading from a closed fifo" Oct 2 19:03:31.146747 env[1740]: time="2023-10-02T19:03:31.146683964Z" level=error msg="Failed to pipe stderr of container \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\"" error="reading from a closed fifo" Oct 2 19:03:31.150146 env[1740]: time="2023-10-02T19:03:31.150054302Z" level=error msg="StartContainer for \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:03:31.153274 kubelet[2854]: E1002 19:03:31.150637 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853" Oct 2 19:03:31.153274 kubelet[2854]: E1002 19:03:31.153062 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:03:31.153274 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:03:31.153274 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:03:31.153274 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nw9p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:03:31.154878 kubelet[2854]: E1002 19:03:31.154828 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:03:31.233012 kubelet[2854]: I1002 19:03:31.232938 2854 scope.go:117] "RemoveContainer" containerID="94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47" Oct 2 19:03:31.233604 kubelet[2854]: I1002 19:03:31.233570 2854 scope.go:117] "RemoveContainer" containerID="94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47" Oct 2 19:03:31.237700 env[1740]: time="2023-10-02T19:03:31.237144973Z" level=info msg="RemoveContainer for \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\"" Oct 2 19:03:31.246093 env[1740]: time="2023-10-02T19:03:31.242238802Z" level=info msg="RemoveContainer for \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\"" Oct 2 19:03:31.246093 env[1740]: time="2023-10-02T19:03:31.242449056Z" level=error msg="RemoveContainer for \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\" failed" error="rpc error: code = NotFound desc = get container info: container \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\" in namespace \"k8s.io\": not found" Oct 2 19:03:31.246093 env[1740]: time="2023-10-02T19:03:31.244872453Z" level=info msg="RemoveContainer for \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\" returns successfully" Oct 2 19:03:31.246448 kubelet[2854]: E1002 19:03:31.245361 2854 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47\" in namespace \"k8s.io\": not found" containerID="94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47" Oct 2 19:03:31.246448 kubelet[2854]: E1002 19:03:31.245430 2854 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "94dd1c1bc3ff8b023895b6a44e424a53f7a9f127a6cce79684120524ea438e47" in namespace "k8s.io": not found; Skipping pod "cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)" Oct 2 19:03:31.246448 kubelet[2854]: E1002 19:03:31.246046 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:03:31.953168 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853-rootfs.mount: Deactivated successfully. Oct 2 19:03:34.217138 kubelet[2854]: W1002 19:03:34.217088 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode6a649b0_dc78_4826_bd89_851dcf934b2a.slice/cri-containerd-a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853.scope WatchSource:0}: task a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853 not found: not found Oct 2 19:03:34.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.187:22-139.178.89.65:39056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:34.473286 systemd[1]: Started sshd@9-172.31.29.187:22-139.178.89.65:39056.service. Oct 2 19:03:34.655000 audit[3426]: USER_ACCT pid=3426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.655927 sshd[3426]: Accepted publickey for core from 139.178.89.65 port 39056 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:34.658000 audit[3426]: CRED_ACQ pid=3426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.658000 audit[3426]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee9f2910 a2=3 a3=1 items=0 ppid=1 pid=3426 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:34.658000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:34.659870 sshd[3426]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:34.668190 systemd-logind[1724]: New session 10 of user core. Oct 2 19:03:34.669032 systemd[1]: Started session-10.scope. Oct 2 19:03:34.679000 audit[3426]: USER_START pid=3426 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.686000 audit[3428]: CRED_ACQ pid=3428 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.959424 sshd[3426]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:34.961000 audit[3426]: USER_END pid=3426 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.961000 audit[3426]: CRED_DISP pid=3426 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:34.965905 systemd[1]: sshd@9-172.31.29.187:22-139.178.89.65:39056.service: Deactivated successfully. Oct 2 19:03:34.967327 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:03:34.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.187:22-139.178.89.65:39056 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:34.968700 systemd-logind[1724]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:03:34.970435 systemd-logind[1724]: Removed session 10. Oct 2 19:03:43.420263 update_engine[1725]: I1002 19:03:43.419960 1725 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:03:43.420263 update_engine[1725]: I1002 19:03:43.420018 1725 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:03:43.420980 update_engine[1725]: I1002 19:03:43.420419 1725 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:03:43.421228 update_engine[1725]: I1002 19:03:43.421175 1725 omaha_request_params.cc:62] Current group set to lts Oct 2 19:03:43.421606 update_engine[1725]: I1002 19:03:43.421403 1725 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:03:43.421606 update_engine[1725]: I1002 19:03:43.421427 1725 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:03:43.421606 update_engine[1725]: I1002 19:03:43.421458 1725 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:03:43.421606 update_engine[1725]: I1002 19:03:43.421505 1725 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:03:43.422692 update_engine[1725]: I1002 19:03:43.422649 1725 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:03:43.422692 update_engine[1725]: I1002 19:03:43.422684 1725 omaha_request_action.cc:269] Request: Oct 2 19:03:43.422692 update_engine[1725]: Oct 2 19:03:43.422692 update_engine[1725]: Oct 2 19:03:43.422692 update_engine[1725]: Oct 2 19:03:43.422692 update_engine[1725]: Oct 2 19:03:43.422692 update_engine[1725]: Oct 2 19:03:43.422692 update_engine[1725]: Oct 2 19:03:43.422692 update_engine[1725]: Oct 2 19:03:43.422692 update_engine[1725]: Oct 2 19:03:43.424081 update_engine[1725]: I1002 19:03:43.422713 1725 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:03:43.424312 locksmithd[1791]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:03:43.426132 update_engine[1725]: I1002 19:03:43.426074 1725 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:03:43.426441 update_engine[1725]: I1002 19:03:43.426386 1725 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:03:44.646535 update_engine[1725]: I1002 19:03:44.646464 1725 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:03:44.647055 update_engine[1725]: I1002 19:03:44.646891 1725 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:03:44.647318 update_engine[1725]: I1002 19:03:44.647279 1725 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:03:44.935611 kubelet[2854]: E1002 19:03:44.935470 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:03:44.961423 update_engine[1725]: I1002 19:03:44.961364 1725 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:03:44.963894 update_engine[1725]: I1002 19:03:44.963831 1725 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:03:44.963894 update_engine[1725]: I1002 19:03:44.963876 1725 omaha_request_action.cc:619] Omaha request response: Oct 2 19:03:44.963894 update_engine[1725]: Oct 2 19:03:44.971689 update_engine[1725]: I1002 19:03:44.971618 1725 omaha_request_action.cc:409] No update. Oct 2 19:03:44.971689 update_engine[1725]: I1002 19:03:44.971678 1725 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:03:44.971689 update_engine[1725]: I1002 19:03:44.971693 1725 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:03:44.971985 update_engine[1725]: I1002 19:03:44.971704 1725 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:03:44.971985 update_engine[1725]: I1002 19:03:44.971712 1725 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:03:44.971985 update_engine[1725]: I1002 19:03:44.971721 1725 update_attempter.cc:302] Processing Done. Oct 2 19:03:44.971985 update_engine[1725]: I1002 19:03:44.971745 1725 update_attempter.cc:338] No update. Oct 2 19:03:44.971985 update_engine[1725]: I1002 19:03:44.971763 1725 update_check_scheduler.cc:74] Next update check in 41m12s Oct 2 19:03:44.972343 locksmithd[1791]: LastCheckedTime=1696273424 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:03:44.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.187:22-139.178.89.65:37164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:44.989581 systemd[1]: Started sshd@10-172.31.29.187:22-139.178.89.65:37164.service. Oct 2 19:03:44.993230 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:03:44.993367 kernel: audit: type=1130 audit(1696273424.989:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.187:22-139.178.89.65:37164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:45.175000 audit[3439]: USER_ACCT pid=3439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.176606 sshd[3439]: Accepted publickey for core from 139.178.89.65 port 37164 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:45.189234 kernel: audit: type=1101 audit(1696273425.175:1168): pid=3439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.189435 kernel: audit: type=1103 audit(1696273425.188:1169): pid=3439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.188000 audit[3439]: CRED_ACQ pid=3439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.191389 sshd[3439]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:45.205350 kernel: audit: type=1006 audit(1696273425.188:1170): pid=3439 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:03:45.188000 audit[3439]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff297bb20 a2=3 a3=1 items=0 ppid=1 pid=3439 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:45.217872 kernel: audit: type=1300 audit(1696273425.188:1170): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff297bb20 a2=3 a3=1 items=0 ppid=1 pid=3439 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:45.188000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:45.222135 kernel: audit: type=1327 audit(1696273425.188:1170): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:45.226451 systemd-logind[1724]: New session 11 of user core. Oct 2 19:03:45.226693 systemd[1]: Started session-11.scope. Oct 2 19:03:45.237000 audit[3439]: USER_START pid=3439 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.244000 audit[3441]: CRED_ACQ pid=3441 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.259245 kernel: audit: type=1105 audit(1696273425.237:1171): pid=3439 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.259363 kernel: audit: type=1103 audit(1696273425.244:1172): pid=3441 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.521036 sshd[3439]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:45.523000 audit[3439]: USER_END pid=3439 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.527607 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:03:45.528951 systemd[1]: sshd@10-172.31.29.187:22-139.178.89.65:37164.service: Deactivated successfully. Oct 2 19:03:45.525000 audit[3439]: CRED_DISP pid=3439 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.545223 kernel: audit: type=1106 audit(1696273425.523:1173): pid=3439 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.545341 kernel: audit: type=1104 audit(1696273425.525:1174): pid=3439 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:45.545311 systemd-logind[1724]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:03:45.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.187:22-139.178.89.65:37164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:45.546974 systemd-logind[1724]: Removed session 11. Oct 2 19:03:55.551699 systemd[1]: Started sshd@11-172.31.29.187:22-139.178.89.65:50312.service. Oct 2 19:03:55.563935 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:03:55.564067 kernel: audit: type=1130 audit(1696273435.550:1176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.187:22-139.178.89.65:50312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:55.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.187:22-139.178.89.65:50312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:55.735000 audit[3452]: USER_ACCT pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:55.737176 sshd[3452]: Accepted publickey for core from 139.178.89.65 port 50312 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:03:55.749246 kernel: audit: type=1101 audit(1696273435.735:1177): pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:55.748000 audit[3452]: CRED_ACQ pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:55.751611 sshd[3452]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:55.766632 kernel: audit: type=1103 audit(1696273435.748:1178): pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:55.766767 kernel: audit: type=1006 audit(1696273435.748:1179): pid=3452 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:03:55.748000 audit[3452]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6823b20 a2=3 a3=1 items=0 ppid=1 pid=3452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:55.777355 kernel: audit: type=1300 audit(1696273435.748:1179): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6823b20 a2=3 a3=1 items=0 ppid=1 pid=3452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:55.748000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:55.783305 kernel: audit: type=1327 audit(1696273435.748:1179): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:55.784674 systemd-logind[1724]: New session 12 of user core. Oct 2 19:03:55.786667 systemd[1]: Started session-12.scope. Oct 2 19:03:55.796000 audit[3452]: USER_START pid=3452 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:55.809000 audit[3454]: CRED_ACQ pid=3454 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:55.820146 kernel: audit: type=1105 audit(1696273435.796:1180): pid=3452 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:55.820337 kernel: audit: type=1103 audit(1696273435.809:1181): pid=3454 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.088589 sshd[3452]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:56.090000 audit[3452]: USER_END pid=3452 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.091000 audit[3452]: CRED_DISP pid=3452 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.103842 systemd[1]: sshd@11-172.31.29.187:22-139.178.89.65:50312.service: Deactivated successfully. Oct 2 19:03:56.105117 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:03:56.112418 kernel: audit: type=1106 audit(1696273436.090:1182): pid=3452 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.112551 kernel: audit: type=1104 audit(1696273436.091:1183): pid=3452 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:03:56.112556 systemd-logind[1724]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:03:56.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.187:22-139.178.89.65:50312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:56.114160 systemd-logind[1724]: Removed session 12. Oct 2 19:03:58.935878 kubelet[2854]: E1002 19:03:58.935836 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:04:06.131321 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:06.131520 kernel: audit: type=1130 audit(1696273446.118:1185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.187:22-139.178.89.65:38766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:06.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.187:22-139.178.89.65:38766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:06.119818 systemd[1]: Started sshd@12-172.31.29.187:22-139.178.89.65:38766.service. Oct 2 19:04:06.306000 audit[3466]: USER_ACCT pid=3466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.311406 sshd[3466]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:06.313870 sshd[3466]: Accepted publickey for core from 139.178.89.65 port 38766 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:06.309000 audit[3466]: CRED_ACQ pid=3466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.329779 kernel: audit: type=1101 audit(1696273446.306:1186): pid=3466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.329938 kernel: audit: type=1103 audit(1696273446.309:1187): pid=3466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.337000 kernel: audit: type=1006 audit(1696273446.309:1188): pid=3466 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:04:06.309000 audit[3466]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed8d95c0 a2=3 a3=1 items=0 ppid=1 pid=3466 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:06.342404 systemd[1]: Started session-13.scope. Oct 2 19:04:06.347926 kernel: audit: type=1300 audit(1696273446.309:1188): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed8d95c0 a2=3 a3=1 items=0 ppid=1 pid=3466 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:06.348036 systemd-logind[1724]: New session 13 of user core. Oct 2 19:04:06.309000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:06.352571 kernel: audit: type=1327 audit(1696273446.309:1188): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:06.359000 audit[3466]: USER_START pid=3466 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.365000 audit[3468]: CRED_ACQ pid=3468 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.382023 kernel: audit: type=1105 audit(1696273446.359:1189): pid=3466 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.382149 kernel: audit: type=1103 audit(1696273446.365:1190): pid=3468 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.648562 sshd[3466]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:06.649000 audit[3466]: USER_END pid=3466 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.654361 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:04:06.655677 systemd[1]: sshd@12-172.31.29.187:22-139.178.89.65:38766.service: Deactivated successfully. Oct 2 19:04:06.650000 audit[3466]: CRED_DISP pid=3466 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.672232 kernel: audit: type=1106 audit(1696273446.649:1191): pid=3466 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.672352 kernel: audit: type=1104 audit(1696273446.650:1192): pid=3466 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:06.672389 systemd-logind[1724]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:04:06.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.187:22-139.178.89.65:38766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:06.674170 systemd-logind[1724]: Removed session 13. Oct 2 19:04:12.941415 env[1740]: time="2023-10-02T19:04:12.940861435Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:04:12.971005 env[1740]: time="2023-10-02T19:04:12.970917605Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\"" Oct 2 19:04:12.973874 env[1740]: time="2023-10-02T19:04:12.973379897Z" level=info msg="StartContainer for \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\"" Oct 2 19:04:13.030891 systemd[1]: Started cri-containerd-f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea.scope. Oct 2 19:04:13.049573 systemd[1]: run-containerd-runc-k8s.io-f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea-runc.si7g9J.mount: Deactivated successfully. Oct 2 19:04:13.080414 systemd[1]: cri-containerd-f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea.scope: Deactivated successfully. Oct 2 19:04:13.089447 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea-rootfs.mount: Deactivated successfully. Oct 2 19:04:13.116244 env[1740]: time="2023-10-02T19:04:13.116133137Z" level=info msg="shim disconnected" id=f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea Oct 2 19:04:13.116710 env[1740]: time="2023-10-02T19:04:13.116656242Z" level=warning msg="cleaning up after shim disconnected" id=f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea namespace=k8s.io Oct 2 19:04:13.116875 env[1740]: time="2023-10-02T19:04:13.116844287Z" level=info msg="cleaning up dead shim" Oct 2 19:04:13.143135 env[1740]: time="2023-10-02T19:04:13.143058182Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:04:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3501 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:04:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:04:13.143840 env[1740]: time="2023-10-02T19:04:13.143745716Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:04:13.144776 env[1740]: time="2023-10-02T19:04:13.144709772Z" level=error msg="Failed to pipe stderr of container \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\"" error="reading from a closed fifo" Oct 2 19:04:13.144898 env[1740]: time="2023-10-02T19:04:13.144852359Z" level=error msg="Failed to pipe stdout of container \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\"" error="reading from a closed fifo" Oct 2 19:04:13.147381 env[1740]: time="2023-10-02T19:04:13.147287868Z" level=error msg="StartContainer for \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:04:13.147707 kubelet[2854]: E1002 19:04:13.147668 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea" Oct 2 19:04:13.148318 kubelet[2854]: E1002 19:04:13.147858 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:04:13.148318 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:04:13.148318 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:04:13.148318 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nw9p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:04:13.148318 kubelet[2854]: E1002 19:04:13.147947 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:04:13.352501 kubelet[2854]: I1002 19:04:13.352314 2854 scope.go:117] "RemoveContainer" containerID="a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853" Oct 2 19:04:13.354851 kubelet[2854]: I1002 19:04:13.353578 2854 scope.go:117] "RemoveContainer" containerID="a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853" Oct 2 19:04:13.356381 env[1740]: time="2023-10-02T19:04:13.356324412Z" level=info msg="RemoveContainer for \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\"" Oct 2 19:04:13.357587 env[1740]: time="2023-10-02T19:04:13.357489461Z" level=info msg="RemoveContainer for \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\"" Oct 2 19:04:13.357826 env[1740]: time="2023-10-02T19:04:13.357715127Z" level=error msg="RemoveContainer for \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\" failed" error="failed to set removing state for container \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\": container is already in removing state" Oct 2 19:04:13.358701 kubelet[2854]: E1002 19:04:13.358498 2854 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\": container is already in removing state" containerID="a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853" Oct 2 19:04:13.359337 kubelet[2854]: I1002 19:04:13.358890 2854 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853"} err="rpc error: code = Unknown desc = failed to set removing state for container \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\": container is already in removing state" Oct 2 19:04:13.365243 env[1740]: time="2023-10-02T19:04:13.362879431Z" level=info msg="RemoveContainer for \"a40c41cb51634ee288f90e6715e5d593deedce4f48bcdc46f7f6b9d783b56853\" returns successfully" Oct 2 19:04:13.371336 kubelet[2854]: E1002 19:04:13.371276 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:04:15.224236 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:15.220000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.221000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.244634 kernel: audit: type=1400 audit(1696273455.220:1194): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.244721 kernel: audit: type=1400 audit(1696273455.221:1195): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.221000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4005f8ffc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.257503 kernel: audit: type=1300 audit(1696273455.221:1195): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4005f8ffc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.221000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.268376 kernel: audit: type=1327 audit(1696273455.221:1195): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.220000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4004fc6fc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.281082 kernel: audit: type=1300 audit(1696273455.220:1194): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4004fc6fc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.292218 kernel: audit: type=1327 audit(1696273455.220:1194): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.222000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.302942 kernel: audit: type=1400 audit(1696273455.222:1196): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.222000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4004fc74a0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.316214 kernel: audit: type=1300 audit(1696273455.222:1196): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4004fc74a0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.246000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.337097 kernel: audit: type=1327 audit(1696273455.222:1196): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.337179 kernel: audit: type=1400 audit(1696273455.246:1197): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.246000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4004fc7a70 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.246000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.302000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.302000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4004fc7c80 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.302000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:15.302000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:15.302000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40062922a0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:04:15.302000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:04:16.037000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:16.037000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001028750 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:04:16.037000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:16.038000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:16.038000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400143fec0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:04:16.038000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:16.223093 kubelet[2854]: W1002 19:04:16.222988 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode6a649b0_dc78_4826_bd89_851dcf934b2a.slice/cri-containerd-f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea.scope WatchSource:0}: task f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea not found: not found Oct 2 19:04:16.678941 systemd[1]: Started sshd@13-172.31.29.187:22-139.178.89.65:47936.service. Oct 2 19:04:16.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.187:22-139.178.89.65:47936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:16.858000 audit[3516]: USER_ACCT pid=3516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:16.861323 sshd[3516]: Accepted publickey for core from 139.178.89.65 port 47936 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:16.861000 audit[3516]: CRED_ACQ pid=3516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:16.861000 audit[3516]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc4acdd0 a2=3 a3=1 items=0 ppid=1 pid=3516 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:16.861000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:16.863046 sshd[3516]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:16.872338 systemd[1]: Started session-14.scope. Oct 2 19:04:16.873171 systemd-logind[1724]: New session 14 of user core. Oct 2 19:04:16.886000 audit[3516]: USER_START pid=3516 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:16.894000 audit[3518]: CRED_ACQ pid=3518 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.159297 sshd[3516]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:17.159000 audit[3516]: USER_END pid=3516 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.160000 audit[3516]: CRED_DISP pid=3516 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:17.164157 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:04:17.165419 systemd[1]: sshd@13-172.31.29.187:22-139.178.89.65:47936.service: Deactivated successfully. Oct 2 19:04:17.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.187:22-139.178.89.65:47936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:17.167270 systemd-logind[1724]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:04:17.169184 systemd-logind[1724]: Removed session 14. Oct 2 19:04:19.886216 kubelet[2854]: E1002 19:04:19.886117 2854 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:04:20.107174 kubelet[2854]: E1002 19:04:20.107124 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:25.109136 kubelet[2854]: E1002 19:04:25.108994 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:27.190628 systemd[1]: Started sshd@14-172.31.29.187:22-139.178.89.65:40116.service. Oct 2 19:04:27.193451 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:04:27.193509 kernel: audit: type=1130 audit(1696273467.189:1211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.187:22-139.178.89.65:40116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:27.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.187:22-139.178.89.65:40116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:27.376000 audit[3531]: USER_ACCT pid=3531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.377677 sshd[3531]: Accepted publickey for core from 139.178.89.65 port 40116 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:27.389663 kernel: audit: type=1101 audit(1696273467.376:1212): pid=3531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.391000 audit[3531]: CRED_ACQ pid=3531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.393036 sshd[3531]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:27.409103 kernel: audit: type=1103 audit(1696273467.391:1213): pid=3531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.409211 kernel: audit: type=1006 audit(1696273467.391:1214): pid=3531 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:04:27.391000 audit[3531]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9ad3210 a2=3 a3=1 items=0 ppid=1 pid=3531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:27.420361 kernel: audit: type=1300 audit(1696273467.391:1214): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9ad3210 a2=3 a3=1 items=0 ppid=1 pid=3531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:27.391000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:27.424070 kernel: audit: type=1327 audit(1696273467.391:1214): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:27.430323 systemd[1]: Started session-15.scope. Oct 2 19:04:27.430729 systemd-logind[1724]: New session 15 of user core. Oct 2 19:04:27.440000 audit[3531]: USER_START pid=3531 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.446000 audit[3533]: CRED_ACQ pid=3533 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.462850 kernel: audit: type=1105 audit(1696273467.440:1215): pid=3531 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.462977 kernel: audit: type=1103 audit(1696273467.446:1216): pid=3533 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.705565 sshd[3531]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:27.706000 audit[3531]: USER_END pid=3531 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.713134 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:04:27.714617 systemd[1]: sshd@14-172.31.29.187:22-139.178.89.65:40116.service: Deactivated successfully. Oct 2 19:04:27.707000 audit[3531]: CRED_DISP pid=3531 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.721095 systemd-logind[1724]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:04:27.730561 kernel: audit: type=1106 audit(1696273467.706:1217): pid=3531 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.730681 kernel: audit: type=1104 audit(1696273467.707:1218): pid=3531 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:27.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.187:22-139.178.89.65:40116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:27.731894 systemd-logind[1724]: Removed session 15. Oct 2 19:04:28.935567 kubelet[2854]: E1002 19:04:28.935525 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:04:30.110495 kubelet[2854]: E1002 19:04:30.110444 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:30.444000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:30.445000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:30.445000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40015b2a80 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:04:30.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:30.444000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f6be00 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:04:30.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:30.445000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:30.445000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f6be40 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:04:30.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:30.447000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:30.447000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040e5e0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:04:30.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:35.111943 kubelet[2854]: E1002 19:04:35.111905 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:37.750861 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:04:37.751023 kernel: audit: type=1130 audit(1696273477.738:1224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.187:22-139.178.89.65:49206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:37.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.187:22-139.178.89.65:49206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:37.739359 systemd[1]: Started sshd@15-172.31.29.187:22-139.178.89.65:49206.service. Oct 2 19:04:37.923000 audit[3546]: USER_ACCT pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:37.924963 sshd[3546]: Accepted publickey for core from 139.178.89.65 port 49206 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:37.940274 kernel: audit: type=1101 audit(1696273477.923:1225): pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:37.940000 audit[3546]: CRED_ACQ pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:37.942784 sshd[3546]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:37.957840 kernel: audit: type=1103 audit(1696273477.940:1226): pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:37.957969 kernel: audit: type=1006 audit(1696273477.940:1227): pid=3546 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:04:37.940000 audit[3546]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe18eb2a0 a2=3 a3=1 items=0 ppid=1 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:37.968647 kernel: audit: type=1300 audit(1696273477.940:1227): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe18eb2a0 a2=3 a3=1 items=0 ppid=1 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:37.972918 kernel: audit: type=1327 audit(1696273477.940:1227): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:37.940000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:37.976104 systemd-logind[1724]: New session 16 of user core. Oct 2 19:04:37.977533 systemd[1]: Started session-16.scope. Oct 2 19:04:37.986000 audit[3546]: USER_START pid=3546 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:37.992000 audit[3548]: CRED_ACQ pid=3548 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.008927 kernel: audit: type=1105 audit(1696273477.986:1228): pid=3546 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.009040 kernel: audit: type=1103 audit(1696273477.992:1229): pid=3548 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.264544 sshd[3546]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:38.265000 audit[3546]: USER_END pid=3546 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.270594 systemd-logind[1724]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:04:38.273440 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:04:38.275561 systemd-logind[1724]: Removed session 16. Oct 2 19:04:38.277286 systemd[1]: sshd@15-172.31.29.187:22-139.178.89.65:49206.service: Deactivated successfully. Oct 2 19:04:38.265000 audit[3546]: CRED_DISP pid=3546 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.288153 kernel: audit: type=1106 audit(1696273478.265:1230): pid=3546 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.288335 kernel: audit: type=1104 audit(1696273478.265:1231): pid=3546 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:38.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.187:22-139.178.89.65:49206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:40.113775 kubelet[2854]: E1002 19:04:40.113718 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:40.935328 kubelet[2854]: E1002 19:04:40.935277 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:04:45.115214 kubelet[2854]: E1002 19:04:45.115166 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:48.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.187:22-139.178.89.65:56532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:48.297235 systemd[1]: Started sshd@16-172.31.29.187:22-139.178.89.65:56532.service. Oct 2 19:04:48.300873 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:48.300998 kernel: audit: type=1130 audit(1696273488.296:1233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.187:22-139.178.89.65:56532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:48.489000 audit[3559]: USER_ACCT pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.491102 sshd[3559]: Accepted publickey for core from 139.178.89.65 port 56532 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:48.495114 sshd[3559]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:48.493000 audit[3559]: CRED_ACQ pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.511351 kernel: audit: type=1101 audit(1696273488.489:1234): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.511514 kernel: audit: type=1103 audit(1696273488.493:1235): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.511576 kernel: audit: type=1006 audit(1696273488.493:1236): pid=3559 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:04:48.493000 audit[3559]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc24e35f0 a2=3 a3=1 items=0 ppid=1 pid=3559 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:48.528286 kernel: audit: type=1300 audit(1696273488.493:1236): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc24e35f0 a2=3 a3=1 items=0 ppid=1 pid=3559 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:48.493000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:48.532239 kernel: audit: type=1327 audit(1696273488.493:1236): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:48.533717 systemd-logind[1724]: New session 17 of user core. Oct 2 19:04:48.534089 systemd[1]: Started session-17.scope. Oct 2 19:04:48.544000 audit[3559]: USER_START pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.550000 audit[3561]: CRED_ACQ pid=3561 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.566424 kernel: audit: type=1105 audit(1696273488.544:1237): pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.566573 kernel: audit: type=1103 audit(1696273488.550:1238): pid=3561 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.831557 sshd[3559]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:48.832000 audit[3559]: USER_END pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.836781 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:04:48.838162 systemd[1]: sshd@16-172.31.29.187:22-139.178.89.65:56532.service: Deactivated successfully. Oct 2 19:04:48.833000 audit[3559]: CRED_DISP pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.855719 kernel: audit: type=1106 audit(1696273488.832:1239): pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.855940 kernel: audit: type=1104 audit(1696273488.833:1240): pid=3559 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:48.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.187:22-139.178.89.65:56532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:48.856726 systemd-logind[1724]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:04:48.868696 systemd[1]: Started sshd@17-172.31.29.187:22-139.178.89.65:56548.service. Oct 2 19:04:48.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.187:22-139.178.89.65:56548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:48.872696 systemd-logind[1724]: Removed session 17. Oct 2 19:04:49.046000 audit[3571]: USER_ACCT pid=3571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:49.048175 sshd[3571]: Accepted publickey for core from 139.178.89.65 port 56548 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:49.049000 audit[3571]: CRED_ACQ pid=3571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:49.049000 audit[3571]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7bdc9a0 a2=3 a3=1 items=0 ppid=1 pid=3571 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:49.049000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:49.052220 sshd[3571]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:49.060855 systemd-logind[1724]: New session 18 of user core. Oct 2 19:04:49.061722 systemd[1]: Started session-18.scope. Oct 2 19:04:49.070000 audit[3571]: USER_START pid=3571 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:49.077000 audit[3573]: CRED_ACQ pid=3573 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:50.116882 kubelet[2854]: E1002 19:04:50.116847 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:50.669070 sshd[3571]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:50.672000 audit[3571]: USER_END pid=3571 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:50.672000 audit[3571]: CRED_DISP pid=3571 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:50.677811 systemd[1]: sshd@17-172.31.29.187:22-139.178.89.65:56548.service: Deactivated successfully. Oct 2 19:04:50.679165 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:04:50.679279 systemd-logind[1724]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:04:50.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.187:22-139.178.89.65:56548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:50.682554 systemd-logind[1724]: Removed session 18. Oct 2 19:04:50.704165 systemd[1]: Started sshd@18-172.31.29.187:22-139.178.89.65:56554.service. Oct 2 19:04:50.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.187:22-139.178.89.65:56554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:50.891000 audit[3581]: USER_ACCT pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:50.892639 sshd[3581]: Accepted publickey for core from 139.178.89.65 port 56554 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:04:50.893000 audit[3581]: CRED_ACQ pid=3581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:50.894000 audit[3581]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0972060 a2=3 a3=1 items=0 ppid=1 pid=3581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:50.894000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:50.896575 sshd[3581]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:50.905313 systemd-logind[1724]: New session 19 of user core. Oct 2 19:04:50.906053 systemd[1]: Started session-19.scope. Oct 2 19:04:50.916000 audit[3581]: USER_START pid=3581 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:50.922000 audit[3583]: CRED_ACQ pid=3583 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:51.192818 sshd[3581]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:51.193000 audit[3581]: USER_END pid=3581 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:51.194000 audit[3581]: CRED_DISP pid=3581 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:04:51.199160 systemd-logind[1724]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:04:51.199760 systemd[1]: sshd@18-172.31.29.187:22-139.178.89.65:56554.service: Deactivated successfully. Oct 2 19:04:51.201075 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:04:51.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.187:22-139.178.89.65:56554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:51.203063 systemd-logind[1724]: Removed session 19. Oct 2 19:04:54.935279 kubelet[2854]: E1002 19:04:54.935240 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:04:55.118713 kubelet[2854]: E1002 19:04:55.118561 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:00.119645 kubelet[2854]: E1002 19:05:00.119546 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:01.227695 systemd[1]: Started sshd@19-172.31.29.187:22-139.178.89.65:44124.service. Oct 2 19:05:01.240476 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:05:01.240591 kernel: audit: type=1130 audit(1696273501.228:1260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.187:22-139.178.89.65:44124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:01.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.187:22-139.178.89.65:44124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:01.408000 audit[3592]: USER_ACCT pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.409983 sshd[3592]: Accepted publickey for core from 139.178.89.65 port 44124 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:01.421255 kernel: audit: type=1101 audit(1696273501.408:1261): pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.421000 audit[3592]: CRED_ACQ pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.423784 sshd[3592]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:01.439782 kernel: audit: type=1103 audit(1696273501.421:1262): pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.439932 kernel: audit: type=1006 audit(1696273501.421:1263): pid=3592 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:05:01.421000 audit[3592]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda545780 a2=3 a3=1 items=0 ppid=1 pid=3592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:01.451371 kernel: audit: type=1300 audit(1696273501.421:1263): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda545780 a2=3 a3=1 items=0 ppid=1 pid=3592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:01.421000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:01.455232 kernel: audit: type=1327 audit(1696273501.421:1263): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:01.461455 systemd-logind[1724]: New session 20 of user core. Oct 2 19:05:01.462484 systemd[1]: Started session-20.scope. Oct 2 19:05:01.473000 audit[3592]: USER_START pid=3592 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.478000 audit[3594]: CRED_ACQ pid=3594 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.495400 kernel: audit: type=1105 audit(1696273501.473:1264): pid=3592 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.495579 kernel: audit: type=1103 audit(1696273501.478:1265): pid=3594 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.746532 sshd[3592]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:01.747000 audit[3592]: USER_END pid=3592 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.752518 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:05:01.753900 systemd[1]: sshd@19-172.31.29.187:22-139.178.89.65:44124.service: Deactivated successfully. Oct 2 19:05:01.748000 audit[3592]: CRED_DISP pid=3592 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.770996 kernel: audit: type=1106 audit(1696273501.747:1266): pid=3592 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.771109 kernel: audit: type=1104 audit(1696273501.748:1267): pid=3592 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:01.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.187:22-139.178.89.65:44124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:01.771454 systemd-logind[1724]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:05:01.774351 systemd-logind[1724]: Removed session 20. Oct 2 19:05:05.121443 kubelet[2854]: E1002 19:05:05.121408 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:07.935592 kubelet[2854]: E1002 19:05:07.935534 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:05:10.123042 kubelet[2854]: E1002 19:05:10.122993 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:11.790420 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:05:11.790636 kernel: audit: type=1130 audit(1696273511.777:1269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.187:22-139.178.89.65:47258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:11.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.187:22-139.178.89.65:47258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:11.778429 systemd[1]: Started sshd@20-172.31.29.187:22-139.178.89.65:47258.service. Oct 2 19:05:11.974000 audit[3606]: USER_ACCT pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:11.978973 sshd[3606]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:11.980180 sshd[3606]: Accepted publickey for core from 139.178.89.65 port 47258 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:11.977000 audit[3606]: CRED_ACQ pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:11.996661 kernel: audit: type=1101 audit(1696273511.974:1270): pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:11.996828 kernel: audit: type=1103 audit(1696273511.977:1271): pid=3606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.003314 kernel: audit: type=1006 audit(1696273511.977:1272): pid=3606 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:05:11.977000 audit[3606]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6325710 a2=3 a3=1 items=0 ppid=1 pid=3606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:12.014035 kernel: audit: type=1300 audit(1696273511.977:1272): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6325710 a2=3 a3=1 items=0 ppid=1 pid=3606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:11.977000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:12.018172 kernel: audit: type=1327 audit(1696273511.977:1272): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:12.021120 systemd-logind[1724]: New session 21 of user core. Oct 2 19:05:12.022901 systemd[1]: Started session-21.scope. Oct 2 19:05:12.032000 audit[3606]: USER_START pid=3606 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.047349 kernel: audit: type=1105 audit(1696273512.032:1273): pid=3606 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.047485 kernel: audit: type=1103 audit(1696273512.045:1274): pid=3608 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.045000 audit[3608]: CRED_ACQ pid=3608 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.312894 sshd[3606]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:12.314000 audit[3606]: USER_END pid=3606 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.328177 systemd[1]: sshd@20-172.31.29.187:22-139.178.89.65:47258.service: Deactivated successfully. Oct 2 19:05:12.314000 audit[3606]: CRED_DISP pid=3606 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.337834 kernel: audit: type=1106 audit(1696273512.314:1275): pid=3606 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.337937 kernel: audit: type=1104 audit(1696273512.314:1276): pid=3606 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:12.330054 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:05:12.331654 systemd-logind[1724]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:05:12.333513 systemd-logind[1724]: Removed session 21. Oct 2 19:05:12.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.187:22-139.178.89.65:47258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:15.125160 kubelet[2854]: E1002 19:05:15.125127 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:15.222000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.222000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e859840 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:05:15.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.222000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.222000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e719ef0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:05:15.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.223000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.223000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e9e6c60 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:05:15.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.247000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.247000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e9bc090 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:05:15.247000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.307000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.307000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:15.307000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400ea28b40 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:05:15.307000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:15.307000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400e9bc0c0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:05:15.307000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:05:16.038000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:16.038000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:16.038000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f0b360 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:16.038000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:16.038000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011d2ff0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:16.038000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:20.127571 kubelet[2854]: E1002 19:05:20.127535 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:20.935358 kubelet[2854]: E1002 19:05:20.935318 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:05:22.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.187:22-139.178.89.65:43466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:22.345742 systemd[1]: Started sshd@21-172.31.29.187:22-139.178.89.65:43466.service. Oct 2 19:05:22.348163 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:05:22.348302 kernel: audit: type=1130 audit(1696273522.344:1286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.187:22-139.178.89.65:43466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:22.527000 audit[3621]: USER_ACCT pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.529027 sshd[3621]: Accepted publickey for core from 139.178.89.65 port 43466 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:22.541252 kernel: audit: type=1101 audit(1696273522.527:1287): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.540000 audit[3621]: CRED_ACQ pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.547974 sshd[3621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:22.558054 kernel: audit: type=1103 audit(1696273522.540:1288): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.558256 kernel: audit: type=1006 audit(1696273522.546:1289): pid=3621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:05:22.546000 audit[3621]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2d5ad40 a2=3 a3=1 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:22.569110 kernel: audit: type=1300 audit(1696273522.546:1289): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2d5ad40 a2=3 a3=1 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:22.546000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:22.573519 kernel: audit: type=1327 audit(1696273522.546:1289): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:22.579340 systemd-logind[1724]: New session 22 of user core. Oct 2 19:05:22.580469 systemd[1]: Started session-22.scope. Oct 2 19:05:22.589000 audit[3621]: USER_START pid=3621 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.595000 audit[3623]: CRED_ACQ pid=3623 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.611579 kernel: audit: type=1105 audit(1696273522.589:1290): pid=3621 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.611692 kernel: audit: type=1103 audit(1696273522.595:1291): pid=3623 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.871541 sshd[3621]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:22.872000 audit[3621]: USER_END pid=3621 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.878958 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:05:22.880411 systemd[1]: sshd@21-172.31.29.187:22-139.178.89.65:43466.service: Deactivated successfully. Oct 2 19:05:22.875000 audit[3621]: CRED_DISP pid=3621 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.894766 kernel: audit: type=1106 audit(1696273522.872:1292): pid=3621 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.894853 kernel: audit: type=1104 audit(1696273522.875:1293): pid=3621 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:22.895594 systemd-logind[1724]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:05:22.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.187:22-139.178.89.65:43466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:22.897327 systemd-logind[1724]: Removed session 22. Oct 2 19:05:25.129536 kubelet[2854]: E1002 19:05:25.129481 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:30.130455 kubelet[2854]: E1002 19:05:30.130355 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:30.450952 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:05:30.451104 kernel: audit: type=1400 audit(1696273530.446:1296): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.446000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.446000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.469418 kernel: audit: type=1400 audit(1696273530.446:1295): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.446000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122cc40 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:30.482343 kernel: audit: type=1300 audit(1696273530.446:1296): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122cc40 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:30.482486 kernel: audit: type=1327 audit(1696273530.446:1296): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.446000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.502498 kernel: audit: type=1400 audit(1696273530.446:1297): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.502574 kernel: audit: type=1300 audit(1696273530.446:1297): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122cda0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:30.446000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122cda0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:30.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.525631 kernel: audit: type=1327 audit(1696273530.446:1297): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.525720 kernel: audit: type=1400 audit(1696273530.448:1298): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.448000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:30.448000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122d040 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:30.547864 kernel: audit: type=1300 audit(1696273530.448:1298): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400122d040 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:30.448000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.558602 kernel: audit: type=1327 audit(1696273530.448:1298): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:30.446000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012ae780 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:05:30.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:31.936091 kubelet[2854]: E1002 19:05:31.936035 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:05:32.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.187:22-139.178.89.65:58860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:32.902921 systemd[1]: Started sshd@22-172.31.29.187:22-139.178.89.65:58860.service. Oct 2 19:05:33.083000 audit[3632]: USER_ACCT pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.085045 sshd[3632]: Accepted publickey for core from 139.178.89.65 port 58860 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:33.086000 audit[3632]: CRED_ACQ pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.086000 audit[3632]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4ea5570 a2=3 a3=1 items=0 ppid=1 pid=3632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:33.086000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:33.088684 sshd[3632]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:33.097943 systemd-logind[1724]: New session 23 of user core. Oct 2 19:05:33.098054 systemd[1]: Started session-23.scope. Oct 2 19:05:33.109000 audit[3632]: USER_START pid=3632 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.115000 audit[3634]: CRED_ACQ pid=3634 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.375747 sshd[3632]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:33.376000 audit[3632]: USER_END pid=3632 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.376000 audit[3632]: CRED_DISP pid=3632 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:33.381809 systemd-logind[1724]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:05:33.382427 systemd[1]: sshd@22-172.31.29.187:22-139.178.89.65:58860.service: Deactivated successfully. Oct 2 19:05:33.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.187:22-139.178.89.65:58860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:33.383798 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:05:33.386010 systemd-logind[1724]: Removed session 23. Oct 2 19:05:35.132383 kubelet[2854]: E1002 19:05:35.132348 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:40.134535 kubelet[2854]: E1002 19:05:40.134478 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:43.418287 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:05:43.418441 kernel: audit: type=1130 audit(1696273543.405:1308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.187:22-139.178.89.65:37436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:43.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.187:22-139.178.89.65:37436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:43.406760 systemd[1]: Started sshd@23-172.31.29.187:22-139.178.89.65:37436.service. Oct 2 19:05:43.591000 audit[3646]: USER_ACCT pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.596774 sshd[3646]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:43.600008 sshd[3646]: Accepted publickey for core from 139.178.89.65 port 37436 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:43.594000 audit[3646]: CRED_ACQ pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.613431 kernel: audit: type=1101 audit(1696273543.591:1309): pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.613569 kernel: audit: type=1103 audit(1696273543.594:1310): pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.613625 kernel: audit: type=1006 audit(1696273543.594:1311): pid=3646 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:05:43.619693 kernel: audit: type=1300 audit(1696273543.594:1311): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb8138b0 a2=3 a3=1 items=0 ppid=1 pid=3646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:43.594000 audit[3646]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb8138b0 a2=3 a3=1 items=0 ppid=1 pid=3646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:43.594000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:43.634106 kernel: audit: type=1327 audit(1696273543.594:1311): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:43.638570 systemd-logind[1724]: New session 24 of user core. Oct 2 19:05:43.639490 systemd[1]: Started session-24.scope. Oct 2 19:05:43.648000 audit[3646]: USER_START pid=3646 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.654000 audit[3648]: CRED_ACQ pid=3648 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.670330 kernel: audit: type=1105 audit(1696273543.648:1312): pid=3646 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.670410 kernel: audit: type=1103 audit(1696273543.654:1313): pid=3648 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.938064 sshd[3646]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:43.941000 audit[3646]: USER_END pid=3646 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.944997 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:05:43.946166 systemd[1]: sshd@23-172.31.29.187:22-139.178.89.65:37436.service: Deactivated successfully. Oct 2 19:05:43.949876 env[1740]: time="2023-10-02T19:05:43.949662877Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:05:43.941000 audit[3646]: CRED_DISP pid=3646 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.955559 systemd-logind[1724]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:05:43.958277 systemd-logind[1724]: Removed session 24. Oct 2 19:05:43.963889 kernel: audit: type=1106 audit(1696273543.941:1314): pid=3646 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.964016 kernel: audit: type=1104 audit(1696273543.941:1315): pid=3646 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:43.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.187:22-139.178.89.65:37436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:43.978900 env[1740]: time="2023-10-02T19:05:43.978829837Z" level=info msg="CreateContainer within sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669\"" Oct 2 19:05:43.980043 env[1740]: time="2023-10-02T19:05:43.979986147Z" level=info msg="StartContainer for \"f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669\"" Oct 2 19:05:44.029263 systemd[1]: Started cri-containerd-f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669.scope. Oct 2 19:05:44.045707 systemd[1]: run-containerd-runc-k8s.io-f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669-runc.zzXsre.mount: Deactivated successfully. Oct 2 19:05:44.077055 systemd[1]: cri-containerd-f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669.scope: Deactivated successfully. Oct 2 19:05:44.086147 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669-rootfs.mount: Deactivated successfully. Oct 2 19:05:44.113363 env[1740]: time="2023-10-02T19:05:44.113292452Z" level=info msg="shim disconnected" id=f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669 Oct 2 19:05:44.113853 env[1740]: time="2023-10-02T19:05:44.113805825Z" level=warning msg="cleaning up after shim disconnected" id=f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669 namespace=k8s.io Oct 2 19:05:44.113998 env[1740]: time="2023-10-02T19:05:44.113969422Z" level=info msg="cleaning up dead shim" Oct 2 19:05:44.144832 env[1740]: time="2023-10-02T19:05:44.144766272Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:05:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3682 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:05:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:05:44.145592 env[1740]: time="2023-10-02T19:05:44.145512397Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:05:44.146394 env[1740]: time="2023-10-02T19:05:44.146316243Z" level=error msg="Failed to pipe stdout of container \"f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669\"" error="reading from a closed fifo" Oct 2 19:05:44.146502 env[1740]: time="2023-10-02T19:05:44.146455251Z" level=error msg="Failed to pipe stderr of container \"f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669\"" error="reading from a closed fifo" Oct 2 19:05:44.148750 env[1740]: time="2023-10-02T19:05:44.148676624Z" level=error msg="StartContainer for \"f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:05:44.149689 kubelet[2854]: E1002 19:05:44.149053 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669" Oct 2 19:05:44.149689 kubelet[2854]: E1002 19:05:44.149185 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:05:44.149689 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:05:44.149689 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:05:44.149689 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nw9p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:05:44.149689 kubelet[2854]: E1002 19:05:44.149323 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:05:44.576700 kubelet[2854]: I1002 19:05:44.576656 2854 scope.go:117] "RemoveContainer" containerID="f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea" Oct 2 19:05:44.579222 kubelet[2854]: I1002 19:05:44.579157 2854 scope.go:117] "RemoveContainer" containerID="f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea" Oct 2 19:05:44.588345 env[1740]: time="2023-10-02T19:05:44.583936822Z" level=info msg="RemoveContainer for \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\"" Oct 2 19:05:44.588345 env[1740]: time="2023-10-02T19:05:44.585166585Z" level=info msg="RemoveContainer for \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\"" Oct 2 19:05:44.588345 env[1740]: time="2023-10-02T19:05:44.585335365Z" level=error msg="RemoveContainer for \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\" failed" error="failed to set removing state for container \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\": container is already in removing state" Oct 2 19:05:44.588642 kubelet[2854]: E1002 19:05:44.585741 2854 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\": container is already in removing state" containerID="f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea" Oct 2 19:05:44.588642 kubelet[2854]: E1002 19:05:44.585820 2854 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea": container is already in removing state; Skipping pod "cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)" Oct 2 19:05:44.588642 kubelet[2854]: E1002 19:05:44.586494 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:05:44.590316 env[1740]: time="2023-10-02T19:05:44.589786846Z" level=info msg="RemoveContainer for \"f65050ecbaa40c1b5ce5f9b030fc5d0a8c9471867c7697434e110b751dacf9ea\" returns successfully" Oct 2 19:05:45.136093 kubelet[2854]: E1002 19:05:45.136034 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:47.219217 kubelet[2854]: W1002 19:05:47.219119 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode6a649b0_dc78_4826_bd89_851dcf934b2a.slice/cri-containerd-f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669.scope WatchSource:0}: task f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669 not found: not found Oct 2 19:05:50.137537 kubelet[2854]: E1002 19:05:50.137488 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:53.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.187:22-139.178.89.65:47980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:53.964619 systemd[1]: Started sshd@24-172.31.29.187:22-139.178.89.65:47980.service. Oct 2 19:05:53.968285 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:05:53.968415 kernel: audit: type=1130 audit(1696273553.963:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.187:22-139.178.89.65:47980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:54.148000 audit[3695]: USER_ACCT pid=3695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.150169 sshd[3695]: Accepted publickey for core from 139.178.89.65 port 47980 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:05:54.161246 kernel: audit: type=1101 audit(1696273554.148:1318): pid=3695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.161000 audit[3695]: CRED_ACQ pid=3695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.168824 sshd[3695]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:54.179314 kernel: audit: type=1103 audit(1696273554.161:1319): pid=3695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.179465 kernel: audit: type=1006 audit(1696273554.161:1320): pid=3695 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:05:54.161000 audit[3695]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca7c85f0 a2=3 a3=1 items=0 ppid=1 pid=3695 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:54.190235 kernel: audit: type=1300 audit(1696273554.161:1320): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca7c85f0 a2=3 a3=1 items=0 ppid=1 pid=3695 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:54.161000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:54.195657 kernel: audit: type=1327 audit(1696273554.161:1320): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:54.201794 systemd-logind[1724]: New session 25 of user core. Oct 2 19:05:54.203673 systemd[1]: Started session-25.scope. Oct 2 19:05:54.212000 audit[3695]: USER_START pid=3695 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.228870 kernel: audit: type=1105 audit(1696273554.212:1321): pid=3695 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.229032 kernel: audit: type=1103 audit(1696273554.226:1322): pid=3697 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.226000 audit[3697]: CRED_ACQ pid=3697 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.510360 sshd[3695]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:54.511000 audit[3695]: USER_END pid=3695 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.511000 audit[3695]: CRED_DISP pid=3695 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.524989 systemd[1]: sshd@24-172.31.29.187:22-139.178.89.65:47980.service: Deactivated successfully. Oct 2 19:05:54.526653 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:05:54.533803 kernel: audit: type=1106 audit(1696273554.511:1323): pid=3695 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.533945 kernel: audit: type=1104 audit(1696273554.511:1324): pid=3695 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:05:54.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.187:22-139.178.89.65:47980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:54.535565 systemd-logind[1724]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:05:54.537887 systemd-logind[1724]: Removed session 25. Oct 2 19:05:54.935906 kubelet[2854]: E1002 19:05:54.935772 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:05:55.139607 kubelet[2854]: E1002 19:05:55.139554 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:00.141010 kubelet[2854]: E1002 19:06:00.140965 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:04.541770 systemd[1]: Started sshd@25-172.31.29.187:22-139.178.89.65:52792.service. Oct 2 19:06:04.553657 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:06:04.553769 kernel: audit: type=1130 audit(1696273564.541:1326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.187:22-139.178.89.65:52792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.187:22-139.178.89.65:52792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:04.727000 audit[3708]: USER_ACCT pid=3708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:04.729428 sshd[3708]: Accepted publickey for core from 139.178.89.65 port 52792 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:04.735308 sshd[3708]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:04.733000 audit[3708]: CRED_ACQ pid=3708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:04.748479 kernel: audit: type=1101 audit(1696273564.727:1327): pid=3708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:04.748650 kernel: audit: type=1103 audit(1696273564.733:1328): pid=3708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:04.755212 kernel: audit: type=1006 audit(1696273564.733:1329): pid=3708 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:06:04.733000 audit[3708]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff508f9f0 a2=3 a3=1 items=0 ppid=1 pid=3708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:04.765963 kernel: audit: type=1300 audit(1696273564.733:1329): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff508f9f0 a2=3 a3=1 items=0 ppid=1 pid=3708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:04.766604 systemd[1]: Started session-26.scope. Oct 2 19:06:04.767105 systemd-logind[1724]: New session 26 of user core. Oct 2 19:06:04.733000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:04.772175 kernel: audit: type=1327 audit(1696273564.733:1329): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:04.782000 audit[3708]: USER_START pid=3708 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:04.796304 kernel: audit: type=1105 audit(1696273564.782:1330): pid=3708 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:04.795000 audit[3710]: CRED_ACQ pid=3710 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:04.807249 kernel: audit: type=1103 audit(1696273564.795:1331): pid=3710 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.068563 sshd[3708]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:05.069000 audit[3708]: USER_END pid=3708 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.082785 systemd[1]: sshd@25-172.31.29.187:22-139.178.89.65:52792.service: Deactivated successfully. Oct 2 19:06:05.084185 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:06:05.071000 audit[3708]: CRED_DISP pid=3708 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.094910 kernel: audit: type=1106 audit(1696273565.069:1332): pid=3708 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.095039 kernel: audit: type=1104 audit(1696273565.071:1333): pid=3708 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:05.095418 systemd-logind[1724]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:06:05.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.187:22-139.178.89.65:52792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:05.097785 systemd-logind[1724]: Removed session 26. Oct 2 19:06:05.143641 kubelet[2854]: E1002 19:06:05.143569 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:06.935232 kubelet[2854]: E1002 19:06:06.935169 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:06:10.144529 kubelet[2854]: E1002 19:06:10.144474 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:15.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.187:22-139.178.89.65:52356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.100815 systemd[1]: Started sshd@26-172.31.29.187:22-139.178.89.65:52356.service. Oct 2 19:06:15.103257 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:06:15.103361 kernel: audit: type=1130 audit(1696273575.099:1335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.187:22-139.178.89.65:52356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.146741 kubelet[2854]: E1002 19:06:15.146694 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:15.223000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.223000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.244965 kernel: audit: type=1400 audit(1696273575.223:1336): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.245090 kernel: audit: type=1400 audit(1696273575.223:1337): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.245144 kernel: audit: type=1300 audit(1696273575.223:1336): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4003c69c20 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.223000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4003c69c20 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.268297 kernel: audit: type=1327 audit(1696273575.223:1336): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.223000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400647a040 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.281072 kernel: audit: type=1300 audit(1696273575.223:1337): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400647a040 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.292139 kernel: audit: type=1327 audit(1696273575.223:1337): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.292397 kernel: audit: type=1400 audit(1696273575.225:1338): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.225000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.302272 kernel: audit: type=1300 audit(1696273575.225:1338): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007903080 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.225000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007903080 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.225000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.325462 kernel: audit: type=1327 audit(1696273575.225:1338): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.247000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.247000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007903200 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.247000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.308000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.308000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4007903320 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.308000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.308000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:15.308000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400647a220 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:06:15.308000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:06:15.330296 sshd[3720]: Accepted publickey for core from 139.178.89.65 port 52356 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:15.328000 audit[3720]: USER_ACCT pid=3720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.331000 audit[3720]: CRED_ACQ pid=3720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.331000 audit[3720]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe5e3ca0 a2=3 a3=1 items=0 ppid=1 pid=3720 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:15.331000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:15.333745 sshd[3720]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:15.343385 systemd[1]: Started session-27.scope. Oct 2 19:06:15.345068 systemd-logind[1724]: New session 27 of user core. Oct 2 19:06:15.353000 audit[3720]: USER_START pid=3720 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.359000 audit[3722]: CRED_ACQ pid=3722 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.635317 sshd[3720]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:15.636000 audit[3720]: USER_END pid=3720 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.637000 audit[3720]: CRED_DISP pid=3720 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:15.641922 systemd[1]: sshd@26-172.31.29.187:22-139.178.89.65:52356.service: Deactivated successfully. Oct 2 19:06:15.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.187:22-139.178.89.65:52356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:15.644035 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:06:15.646069 systemd-logind[1724]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:06:15.648619 systemd-logind[1724]: Removed session 27. Oct 2 19:06:16.040000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:16.040000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:16.040000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40020a73b0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:06:16.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:16.040000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027d0de0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:06:16.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:20.149129 kubelet[2854]: E1002 19:06:20.149091 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:21.935838 kubelet[2854]: E1002 19:06:21.935677 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-zgqpx_kube-system(e6a649b0-dc78-4826-bd89-851dcf934b2a)\"" pod="kube-system/cilium-zgqpx" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" Oct 2 19:06:25.151339 kubelet[2854]: E1002 19:06:25.151303 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:25.666847 systemd[1]: Started sshd@27-172.31.29.187:22-139.178.89.65:33614.service. Oct 2 19:06:25.679011 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:06:25.679229 kernel: audit: type=1130 audit(1696273585.666:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.187:22-139.178.89.65:33614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:25.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.187:22-139.178.89.65:33614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:25.853000 audit[3734]: USER_ACCT pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:25.856464 sshd[3734]: Accepted publickey for core from 139.178.89.65 port 33614 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:25.866361 kernel: audit: type=1101 audit(1696273585.853:1353): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:25.867000 audit[3734]: CRED_ACQ pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:25.869406 sshd[3734]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:25.887662 kernel: audit: type=1103 audit(1696273585.867:1354): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:25.887805 kernel: audit: type=1006 audit(1696273585.867:1355): pid=3734 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:06:25.867000 audit[3734]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff29e95e0 a2=3 a3=1 items=0 ppid=1 pid=3734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:25.898510 kernel: audit: type=1300 audit(1696273585.867:1355): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff29e95e0 a2=3 a3=1 items=0 ppid=1 pid=3734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:25.867000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:25.902697 kernel: audit: type=1327 audit(1696273585.867:1355): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:25.906063 systemd-logind[1724]: New session 28 of user core. Oct 2 19:06:25.907031 systemd[1]: Started session-28.scope. Oct 2 19:06:25.918000 audit[3734]: USER_START pid=3734 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:25.927000 audit[3739]: CRED_ACQ pid=3739 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:25.942078 kernel: audit: type=1105 audit(1696273585.918:1356): pid=3734 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:25.942223 kernel: audit: type=1103 audit(1696273585.927:1357): pid=3739 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.190992 sshd[3734]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:26.192000 audit[3734]: USER_END pid=3734 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.206107 systemd[1]: sshd@27-172.31.29.187:22-139.178.89.65:33614.service: Deactivated successfully. Oct 2 19:06:26.192000 audit[3734]: CRED_DISP pid=3734 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.207428 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:06:26.215678 kernel: audit: type=1106 audit(1696273586.192:1358): pid=3734 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.215809 kernel: audit: type=1104 audit(1696273586.192:1359): pid=3734 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.187:22-139.178.89.65:33614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:26.217497 systemd-logind[1724]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:06:26.229061 systemd[1]: Started sshd@28-172.31.29.187:22-139.178.89.65:39550.service. Oct 2 19:06:26.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.187:22-139.178.89.65:39550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:26.232796 systemd-logind[1724]: Removed session 28. Oct 2 19:06:26.415000 audit[3749]: USER_ACCT pid=3749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.417466 sshd[3749]: Accepted publickey for core from 139.178.89.65 port 39550 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:26.419000 audit[3749]: CRED_ACQ pid=3749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.419000 audit[3749]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe27d0f00 a2=3 a3=1 items=0 ppid=1 pid=3749 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:26.419000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:26.421386 sshd[3749]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:26.431653 systemd[1]: Started session-29.scope. Oct 2 19:06:26.432467 systemd-logind[1724]: New session 29 of user core. Oct 2 19:06:26.440000 audit[3749]: USER_START pid=3749 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.447000 audit[3751]: CRED_ACQ pid=3751 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:26.805659 amazon-ssm-agent[1744]: 2023-10-02 19:06:26 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:06:26.906678 amazon-ssm-agent[1744]: 2023-10-02 19:06:26 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0b263f73dc73958d8 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0b263f73dc73958d8 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:06:26.906678 amazon-ssm-agent[1744]: status code: 400, request id: 46da9e72-e129-480f-9893-34cd619e3c26 Oct 2 19:06:29.373156 env[1740]: time="2023-10-02T19:06:29.364144984Z" level=info msg="StopPodSandbox for \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\"" Oct 2 19:06:29.373156 env[1740]: time="2023-10-02T19:06:29.364278714Z" level=info msg="Container to stop \"f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:06:29.371160 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915-shm.mount: Deactivated successfully. Oct 2 19:06:29.402665 systemd[1]: cri-containerd-1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915.scope: Deactivated successfully. Oct 2 19:06:29.401000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:06:29.407000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:06:29.421752 env[1740]: time="2023-10-02T19:06:29.421675096Z" level=info msg="StopContainer for \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\" with timeout 30 (s)" Oct 2 19:06:29.425367 env[1740]: time="2023-10-02T19:06:29.425269339Z" level=info msg="Stop container \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\" with signal terminated" Oct 2 19:06:29.456000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:06:29.457644 systemd[1]: cri-containerd-ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952.scope: Deactivated successfully. Oct 2 19:06:29.460000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:06:29.476331 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915-rootfs.mount: Deactivated successfully. Oct 2 19:06:29.505507 env[1740]: time="2023-10-02T19:06:29.505438163Z" level=info msg="shim disconnected" id=1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915 Oct 2 19:06:29.505948 env[1740]: time="2023-10-02T19:06:29.505911582Z" level=warning msg="cleaning up after shim disconnected" id=1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915 namespace=k8s.io Oct 2 19:06:29.506094 env[1740]: time="2023-10-02T19:06:29.506065376Z" level=info msg="cleaning up dead shim" Oct 2 19:06:29.536140 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952-rootfs.mount: Deactivated successfully. Oct 2 19:06:29.546671 env[1740]: time="2023-10-02T19:06:29.546599974Z" level=info msg="shim disconnected" id=ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952 Oct 2 19:06:29.547877 env[1740]: time="2023-10-02T19:06:29.546669347Z" level=warning msg="cleaning up after shim disconnected" id=ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952 namespace=k8s.io Oct 2 19:06:29.547877 env[1740]: time="2023-10-02T19:06:29.546707952Z" level=info msg="cleaning up dead shim" Oct 2 19:06:29.553149 env[1740]: time="2023-10-02T19:06:29.553091537Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3792 runtime=io.containerd.runc.v2\n" Oct 2 19:06:29.554147 env[1740]: time="2023-10-02T19:06:29.554077387Z" level=info msg="TearDown network for sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" successfully" Oct 2 19:06:29.554453 env[1740]: time="2023-10-02T19:06:29.554412768Z" level=info msg="StopPodSandbox for \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" returns successfully" Oct 2 19:06:29.582812 env[1740]: time="2023-10-02T19:06:29.582734724Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3809 runtime=io.containerd.runc.v2\n" Oct 2 19:06:29.585664 env[1740]: time="2023-10-02T19:06:29.585592996Z" level=info msg="StopContainer for \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\" returns successfully" Oct 2 19:06:29.586478 env[1740]: time="2023-10-02T19:06:29.586419915Z" level=info msg="StopPodSandbox for \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\"" Oct 2 19:06:29.586627 env[1740]: time="2023-10-02T19:06:29.586516012Z" level=info msg="Container to stop \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.590546 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-nw9p8\" (UniqueName: \"kubernetes.io/projected/e6a649b0-dc78-4826-bd89-851dcf934b2a-kube-api-access-nw9p8\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.590635 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-bpf-maps\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.590680 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-etc-cni-netd\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.590744 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-xtables-lock\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.590808 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-run\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.590852 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-host-proc-sys-net\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.590923 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cni-path\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.590993 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e6a649b0-dc78-4826-bd89-851dcf934b2a-clustermesh-secrets\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.591035 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-hostproc\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.591100 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-host-proc-sys-kernel\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.591973 kubelet[2854]: I1002 19:06:29.591182 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e6a649b0-dc78-4826-bd89-851dcf934b2a-hubble-tls\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.590802 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd-shm.mount: Deactivated successfully. Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.593633 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.593771 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.593816 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.594504 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-lib-modules\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.594737 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-cgroup\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.594823 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-config-path\") pod \"e6a649b0-dc78-4826-bd89-851dcf934b2a\" (UID: \"e6a649b0-dc78-4826-bd89-851dcf934b2a\") " Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.594912 2854 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-bpf-maps\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.594969 2854 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-etc-cni-netd\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.595132 kubelet[2854]: I1002 19:06:29.594996 2854 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-xtables-lock\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.597378 kubelet[2854]: I1002 19:06:29.597317 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-hostproc" (OuterVolumeSpecName: "hostproc") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.598064 kubelet[2854]: I1002 19:06:29.598027 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.598779 kubelet[2854]: I1002 19:06:29.591741 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.599005 kubelet[2854]: I1002 19:06:29.598958 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.599183 kubelet[2854]: I1002 19:06:29.599156 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.599401 kubelet[2854]: I1002 19:06:29.599361 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.599602 kubelet[2854]: I1002 19:06:29.599564 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cni-path" (OuterVolumeSpecName: "cni-path") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:29.611894 systemd[1]: var-lib-kubelet-pods-e6a649b0\x2ddc78\x2d4826\x2dbd89\x2d851dcf934b2a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dnw9p8.mount: Deactivated successfully. Oct 2 19:06:29.618838 kubelet[2854]: I1002 19:06:29.618785 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:06:29.621619 kubelet[2854]: I1002 19:06:29.621569 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e6a649b0-dc78-4826-bd89-851dcf934b2a-kube-api-access-nw9p8" (OuterVolumeSpecName: "kube-api-access-nw9p8") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "kube-api-access-nw9p8". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:29.629798 kubelet[2854]: I1002 19:06:29.626506 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e6a649b0-dc78-4826-bd89-851dcf934b2a-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:29.630187 kubelet[2854]: I1002 19:06:29.630143 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e6a649b0-dc78-4826-bd89-851dcf934b2a-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "e6a649b0-dc78-4826-bd89-851dcf934b2a" (UID: "e6a649b0-dc78-4826-bd89-851dcf934b2a"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:06:29.632066 systemd[1]: cri-containerd-54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd.scope: Deactivated successfully. Oct 2 19:06:29.631000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:06:29.634000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:06:29.693854 kubelet[2854]: I1002 19:06:29.693385 2854 scope.go:117] "RemoveContainer" containerID="f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669" Oct 2 19:06:29.696076 kubelet[2854]: I1002 19:06:29.696007 2854 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-cgroup\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696076 kubelet[2854]: I1002 19:06:29.696061 2854 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-config-path\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696088 2854 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-nw9p8\" (UniqueName: \"kubernetes.io/projected/e6a649b0-dc78-4826-bd89-851dcf934b2a-kube-api-access-nw9p8\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696120 2854 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cilium-run\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696147 2854 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-host-proc-sys-net\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696170 2854 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-cni-path\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696214 2854 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e6a649b0-dc78-4826-bd89-851dcf934b2a-clustermesh-secrets\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696243 2854 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-hostproc\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696267 2854 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-host-proc-sys-kernel\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696415 2854 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e6a649b0-dc78-4826-bd89-851dcf934b2a-hubble-tls\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.696448 kubelet[2854]: I1002 19:06:29.696439 2854 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e6a649b0-dc78-4826-bd89-851dcf934b2a-lib-modules\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.711375 env[1740]: time="2023-10-02T19:06:29.710351623Z" level=info msg="shim disconnected" id=54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd Oct 2 19:06:29.711375 env[1740]: time="2023-10-02T19:06:29.710693700Z" level=warning msg="cleaning up after shim disconnected" id=54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd namespace=k8s.io Oct 2 19:06:29.711375 env[1740]: time="2023-10-02T19:06:29.710718240Z" level=info msg="cleaning up dead shim" Oct 2 19:06:29.720543 env[1740]: time="2023-10-02T19:06:29.720475637Z" level=info msg="RemoveContainer for \"f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669\"" Oct 2 19:06:29.723119 systemd[1]: Removed slice kubepods-burstable-pode6a649b0_dc78_4826_bd89_851dcf934b2a.slice. Oct 2 19:06:29.729798 env[1740]: time="2023-10-02T19:06:29.729662209Z" level=info msg="RemoveContainer for \"f383d60a6f630beae7ccf6376c6a5d9f76e86bffdf5b02bf28afc971f9410669\" returns successfully" Oct 2 19:06:29.763341 env[1740]: time="2023-10-02T19:06:29.763283211Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3841 runtime=io.containerd.runc.v2\n" Oct 2 19:06:29.764207 env[1740]: time="2023-10-02T19:06:29.764147175Z" level=info msg="TearDown network for sandbox \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\" successfully" Oct 2 19:06:29.764404 env[1740]: time="2023-10-02T19:06:29.764365890Z" level=info msg="StopPodSandbox for \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\" returns successfully" Oct 2 19:06:29.797686 kubelet[2854]: I1002 19:06:29.797647 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4d7eb91f-aee1-41de-ad1e-520cec083c0e-cilium-config-path\") pod \"4d7eb91f-aee1-41de-ad1e-520cec083c0e\" (UID: \"4d7eb91f-aee1-41de-ad1e-520cec083c0e\") " Oct 2 19:06:29.798046 kubelet[2854]: I1002 19:06:29.798021 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mhhsj\" (UniqueName: \"kubernetes.io/projected/4d7eb91f-aee1-41de-ad1e-520cec083c0e-kube-api-access-mhhsj\") pod \"4d7eb91f-aee1-41de-ad1e-520cec083c0e\" (UID: \"4d7eb91f-aee1-41de-ad1e-520cec083c0e\") " Oct 2 19:06:29.805890 kubelet[2854]: I1002 19:06:29.805834 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4d7eb91f-aee1-41de-ad1e-520cec083c0e-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4d7eb91f-aee1-41de-ad1e-520cec083c0e" (UID: "4d7eb91f-aee1-41de-ad1e-520cec083c0e"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:06:29.807601 kubelet[2854]: I1002 19:06:29.807555 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4d7eb91f-aee1-41de-ad1e-520cec083c0e-kube-api-access-mhhsj" (OuterVolumeSpecName: "kube-api-access-mhhsj") pod "4d7eb91f-aee1-41de-ad1e-520cec083c0e" (UID: "4d7eb91f-aee1-41de-ad1e-520cec083c0e"). InnerVolumeSpecName "kube-api-access-mhhsj". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:29.899501 kubelet[2854]: I1002 19:06:29.898745 2854 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4d7eb91f-aee1-41de-ad1e-520cec083c0e-cilium-config-path\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.899501 kubelet[2854]: I1002 19:06:29.899420 2854 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-mhhsj\" (UniqueName: \"kubernetes.io/projected/4d7eb91f-aee1-41de-ad1e-520cec083c0e-kube-api-access-mhhsj\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:06:29.938599 kubelet[2854]: I1002 19:06:29.938545 2854 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" path="/var/lib/kubelet/pods/e6a649b0-dc78-4826-bd89-851dcf934b2a/volumes" Oct 2 19:06:29.947570 systemd[1]: Removed slice kubepods-besteffort-pod4d7eb91f_aee1_41de_ad1e_520cec083c0e.slice. Oct 2 19:06:30.153247 kubelet[2854]: E1002 19:06:30.153080 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:30.366988 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd-rootfs.mount: Deactivated successfully. Oct 2 19:06:30.367175 systemd[1]: var-lib-kubelet-pods-4d7eb91f\x2daee1\x2d41de\x2dad1e\x2d520cec083c0e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmhhsj.mount: Deactivated successfully. Oct 2 19:06:30.367342 systemd[1]: var-lib-kubelet-pods-e6a649b0\x2ddc78\x2d4826\x2dbd89\x2d851dcf934b2a-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:06:30.367510 systemd[1]: var-lib-kubelet-pods-e6a649b0\x2ddc78\x2d4826\x2dbd89\x2d851dcf934b2a-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:06:30.446000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:30.446000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018a03c0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:06:30.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:30.448000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:30.448000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001637c40 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:06:30.448000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:30.448000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:30.448000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001637c80 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:06:30.448000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:30.450000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:30.450000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018a0700 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:06:30.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:30.731121 kubelet[2854]: I1002 19:06:30.731068 2854 scope.go:117] "RemoveContainer" containerID="ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952" Oct 2 19:06:30.738300 env[1740]: time="2023-10-02T19:06:30.737859411Z" level=info msg="RemoveContainer for \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\"" Oct 2 19:06:30.743351 env[1740]: time="2023-10-02T19:06:30.743291144Z" level=info msg="RemoveContainer for \"ce10df945299c630740e9263a16677263c54d26fa340ef5112dc342ab5d74952\" returns successfully" Oct 2 19:06:31.331710 sshd[3749]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:31.332000 audit[3749]: USER_END pid=3749 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.336866 kernel: kauditd_printk_skb: 27 callbacks suppressed Oct 2 19:06:31.336980 kernel: audit: type=1106 audit(1696273591.332:1377): pid=3749 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.339782 systemd-logind[1724]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:06:31.342655 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:06:31.343000 systemd[1]: session-29.scope: Consumed 2.162s CPU time. Oct 2 19:06:31.345337 systemd-logind[1724]: Removed session 29. Oct 2 19:06:31.346612 systemd[1]: sshd@28-172.31.29.187:22-139.178.89.65:39550.service: Deactivated successfully. Oct 2 19:06:31.333000 audit[3749]: CRED_DISP pid=3749 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.358428 kernel: audit: type=1104 audit(1696273591.333:1378): pid=3749 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.187:22-139.178.89.65:39550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:31.368122 kernel: audit: type=1131 audit(1696273591.345:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.187:22-139.178.89.65:39550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:31.370720 systemd[1]: Started sshd@29-172.31.29.187:22-139.178.89.65:39562.service. Oct 2 19:06:31.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.187:22-139.178.89.65:39562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:31.383252 kernel: audit: type=1130 audit(1696273591.369:1380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.187:22-139.178.89.65:39562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:31.557000 audit[3859]: USER_ACCT pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.558867 sshd[3859]: Accepted publickey for core from 139.178.89.65 port 39562 ssh2: RSA SHA256:oIXw9t+Qat2niYWbP5cZ6aL7amVj0yI65lfudwVnqrM Oct 2 19:06:31.562794 sshd[3859]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:31.560000 audit[3859]: CRED_ACQ pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.579033 kernel: audit: type=1101 audit(1696273591.557:1381): pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.579155 kernel: audit: type=1103 audit(1696273591.560:1382): pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.588506 kernel: audit: type=1006 audit(1696273591.560:1383): pid=3859 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:06:31.588643 kernel: audit: type=1300 audit(1696273591.560:1383): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc18e8070 a2=3 a3=1 items=0 ppid=1 pid=3859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:31.560000 audit[3859]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc18e8070 a2=3 a3=1 items=0 ppid=1 pid=3859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:31.587686 systemd[1]: Started session-30.scope. Oct 2 19:06:31.590881 systemd-logind[1724]: New session 30 of user core. Oct 2 19:06:31.560000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:31.601853 kernel: audit: type=1327 audit(1696273591.560:1383): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:31.601000 audit[3859]: USER_START pid=3859 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.609000 audit[3861]: CRED_ACQ pid=3861 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.615370 kernel: audit: type=1105 audit(1696273591.601:1384): pid=3859 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:06:31.947629 kubelet[2854]: I1002 19:06:31.947523 2854 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="4d7eb91f-aee1-41de-ad1e-520cec083c0e" path="/var/lib/kubelet/pods/4d7eb91f-aee1-41de-ad1e-520cec083c0e/volumes" Oct 2 19:06:33.179451 kubelet[2854]: I1002 19:06:33.179406 2854 topology_manager.go:215] "Topology Admit Handler" podUID="0778657f-a32b-4174-aac7-d5222b122734" podNamespace="kube-system" podName="cilium-5bbcw" Oct 2 19:06:33.180125 kubelet[2854]: E1002 19:06:33.180093 2854 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.180350 kubelet[2854]: E1002 19:06:33.180326 2854 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.180474 kubelet[2854]: E1002 19:06:33.180453 2854 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.180605 kubelet[2854]: E1002 19:06:33.180585 2854 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4d7eb91f-aee1-41de-ad1e-520cec083c0e" containerName="cilium-operator" Oct 2 19:06:33.180725 kubelet[2854]: E1002 19:06:33.180705 2854 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.180843 kubelet[2854]: E1002 19:06:33.180823 2854 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.181014 kubelet[2854]: I1002 19:06:33.180992 2854 memory_manager.go:346] "RemoveStaleState removing state" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.181132 kubelet[2854]: I1002 19:06:33.181112 2854 memory_manager.go:346] "RemoveStaleState removing state" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.181261 kubelet[2854]: I1002 19:06:33.181240 2854 memory_manager.go:346] "RemoveStaleState removing state" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.181370 kubelet[2854]: I1002 19:06:33.181350 2854 memory_manager.go:346] "RemoveStaleState removing state" podUID="4d7eb91f-aee1-41de-ad1e-520cec083c0e" containerName="cilium-operator" Oct 2 19:06:33.181477 kubelet[2854]: I1002 19:06:33.181457 2854 memory_manager.go:346] "RemoveStaleState removing state" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.181634 kubelet[2854]: E1002 19:06:33.181612 2854 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.181788 kubelet[2854]: I1002 19:06:33.181765 2854 memory_manager.go:346] "RemoveStaleState removing state" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.181941 kubelet[2854]: I1002 19:06:33.181919 2854 memory_manager.go:346] "RemoveStaleState removing state" podUID="e6a649b0-dc78-4826-bd89-851dcf934b2a" containerName="mount-cgroup" Oct 2 19:06:33.194364 systemd[1]: Created slice kubepods-burstable-pod0778657f_a32b_4174_aac7_d5222b122734.slice. Oct 2 19:06:33.209764 kubelet[2854]: W1002 19:06:33.209721 2854 reflector.go:535] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-29-187" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-187' and this object Oct 2 19:06:33.210079 kubelet[2854]: E1002 19:06:33.210035 2854 reflector.go:147] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-29-187" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-187' and this object Oct 2 19:06:33.210191 kubelet[2854]: W1002 19:06:33.209766 2854 reflector.go:535] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-29-187" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-187' and this object Oct 2 19:06:33.210191 kubelet[2854]: E1002 19:06:33.210111 2854 reflector.go:147] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-29-187" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-187' and this object Oct 2 19:06:33.210191 kubelet[2854]: W1002 19:06:33.209861 2854 reflector.go:535] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-29-187" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-187' and this object Oct 2 19:06:33.210191 kubelet[2854]: E1002 19:06:33.210153 2854 reflector.go:147] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-29-187" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-187' and this object Oct 2 19:06:33.210477 kubelet[2854]: W1002 19:06:33.210238 2854 reflector.go:535] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-29-187" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-187' and this object Oct 2 19:06:33.210477 kubelet[2854]: E1002 19:06:33.210264 2854 reflector.go:147] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-29-187" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-187' and this object Oct 2 19:06:33.224316 kubelet[2854]: I1002 19:06:33.224253 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-clustermesh-secrets\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224506 kubelet[2854]: I1002 19:06:33.224344 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-hubble-tls\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224506 kubelet[2854]: I1002 19:06:33.224425 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-bpf-maps\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224506 kubelet[2854]: I1002 19:06:33.224470 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-hostproc\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224703 kubelet[2854]: I1002 19:06:33.224518 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-etc-cni-netd\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224703 kubelet[2854]: I1002 19:06:33.224560 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-lib-modules\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224703 kubelet[2854]: I1002 19:06:33.224611 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cilium-run\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224703 kubelet[2854]: I1002 19:06:33.224659 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-cilium-ipsec-secrets\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224923 kubelet[2854]: I1002 19:06:33.224709 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cilium-cgroup\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224923 kubelet[2854]: I1002 19:06:33.224754 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-xtables-lock\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224923 kubelet[2854]: I1002 19:06:33.224798 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0778657f-a32b-4174-aac7-d5222b122734-cilium-config-path\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224923 kubelet[2854]: I1002 19:06:33.224845 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cni-path\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.224923 kubelet[2854]: I1002 19:06:33.224891 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nzlqp\" (UniqueName: \"kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-kube-api-access-nzlqp\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.225270 kubelet[2854]: I1002 19:06:33.224933 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-host-proc-sys-net\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:33.225270 kubelet[2854]: I1002 19:06:33.224978 2854 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-host-proc-sys-kernel\") pod \"cilium-5bbcw\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " pod="kube-system/cilium-5bbcw" Oct 2 19:06:34.326594 kubelet[2854]: E1002 19:06:34.326551 2854 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:06:34.327184 kubelet[2854]: E1002 19:06:34.327156 2854 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-5bbcw: failed to sync secret cache: timed out waiting for the condition Oct 2 19:06:34.327482 kubelet[2854]: E1002 19:06:34.327456 2854 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-hubble-tls podName:0778657f-a32b-4174-aac7-d5222b122734 nodeName:}" failed. No retries permitted until 2023-10-02 19:06:34.827421446 +0000 UTC m=+255.289801388 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-hubble-tls") pod "cilium-5bbcw" (UID: "0778657f-a32b-4174-aac7-d5222b122734") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:06:34.327849 kubelet[2854]: E1002 19:06:34.327822 2854 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 19:06:34.328101 kubelet[2854]: E1002 19:06:34.328076 2854 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-clustermesh-secrets podName:0778657f-a32b-4174-aac7-d5222b122734 nodeName:}" failed. No retries permitted until 2023-10-02 19:06:34.828047183 +0000 UTC m=+255.290427137 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-clustermesh-secrets") pod "cilium-5bbcw" (UID: "0778657f-a32b-4174-aac7-d5222b122734") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:06:35.000240 env[1740]: time="2023-10-02T19:06:35.000149207Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-5bbcw,Uid:0778657f-a32b-4174-aac7-d5222b122734,Namespace:kube-system,Attempt:0,}" Oct 2 19:06:35.043947 env[1740]: time="2023-10-02T19:06:35.043821955Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:06:35.044130 env[1740]: time="2023-10-02T19:06:35.043926033Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:06:35.044130 env[1740]: time="2023-10-02T19:06:35.043956765Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:06:35.044381 env[1740]: time="2023-10-02T19:06:35.044290034Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539 pid=3881 runtime=io.containerd.runc.v2 Oct 2 19:06:35.079551 systemd[1]: Started cri-containerd-f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539.scope. Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.126000 audit: BPF prog-id=137 op=LOAD Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:35.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637623961356532323364663539396238396134386339656538363864 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:35.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637623961356532323364663539396238396134386339656538363864 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.128000 audit: BPF prog-id=138 op=LOAD Oct 2 19:06:35.128000 audit[3890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:35.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637623961356532323364663539396238396134386339656538363864 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit: BPF prog-id=139 op=LOAD Oct 2 19:06:35.129000 audit[3890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:35.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637623961356532323364663539396238396134386339656538363864 Oct 2 19:06:35.129000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:06:35.129000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:35.129000 audit: BPF prog-id=140 op=LOAD Oct 2 19:06:35.129000 audit[3890]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:35.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637623961356532323364663539396238396134386339656538363864 Oct 2 19:06:35.155137 kubelet[2854]: E1002 19:06:35.155086 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:35.162180 env[1740]: time="2023-10-02T19:06:35.162122193Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-5bbcw,Uid:0778657f-a32b-4174-aac7-d5222b122734,Namespace:kube-system,Attempt:0,} returns sandbox id \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\"" Oct 2 19:06:35.168831 env[1740]: time="2023-10-02T19:06:35.168764808Z" level=info msg="CreateContainer within sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:06:35.185947 env[1740]: time="2023-10-02T19:06:35.185883306Z" level=info msg="CreateContainer within sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\"" Oct 2 19:06:35.187927 env[1740]: time="2023-10-02T19:06:35.187791862Z" level=info msg="StartContainer for \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\"" Oct 2 19:06:35.241813 systemd[1]: Started cri-containerd-a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d.scope. Oct 2 19:06:35.282119 systemd[1]: cri-containerd-a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d.scope: Deactivated successfully. Oct 2 19:06:35.326186 env[1740]: time="2023-10-02T19:06:35.326104224Z" level=info msg="shim disconnected" id=a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d Oct 2 19:06:35.326615 env[1740]: time="2023-10-02T19:06:35.326578375Z" level=warning msg="cleaning up after shim disconnected" id=a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d namespace=k8s.io Oct 2 19:06:35.327327 env[1740]: time="2023-10-02T19:06:35.327293742Z" level=info msg="cleaning up dead shim" Oct 2 19:06:35.355571 env[1740]: time="2023-10-02T19:06:35.355481890Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3941 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:06:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:06:35.356140 env[1740]: time="2023-10-02T19:06:35.356048106Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:06:35.357057 env[1740]: time="2023-10-02T19:06:35.356988428Z" level=error msg="Failed to pipe stdout of container \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\"" error="reading from a closed fifo" Oct 2 19:06:35.357159 env[1740]: time="2023-10-02T19:06:35.357112522Z" level=error msg="Failed to pipe stderr of container \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\"" error="reading from a closed fifo" Oct 2 19:06:35.363020 env[1740]: time="2023-10-02T19:06:35.362939762Z" level=error msg="StartContainer for \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:06:35.363448 kubelet[2854]: E1002 19:06:35.363413 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d" Oct 2 19:06:35.365515 kubelet[2854]: E1002 19:06:35.363571 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:06:35.365515 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:06:35.365515 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:06:35.365515 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nzlqp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:06:35.365515 kubelet[2854]: E1002 19:06:35.363633 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:06:35.759487 env[1740]: time="2023-10-02T19:06:35.759417078Z" level=info msg="CreateContainer within sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:06:35.786952 env[1740]: time="2023-10-02T19:06:35.786835930Z" level=info msg="CreateContainer within sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\"" Oct 2 19:06:35.788186 env[1740]: time="2023-10-02T19:06:35.788136101Z" level=info msg="StartContainer for \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\"" Oct 2 19:06:35.837023 systemd[1]: Started cri-containerd-88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a.scope. Oct 2 19:06:35.883921 systemd[1]: cri-containerd-88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a.scope: Deactivated successfully. Oct 2 19:06:35.895176 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a-rootfs.mount: Deactivated successfully. Oct 2 19:06:35.912649 env[1740]: time="2023-10-02T19:06:35.912556011Z" level=info msg="shim disconnected" id=88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a Oct 2 19:06:35.912649 env[1740]: time="2023-10-02T19:06:35.912648040Z" level=warning msg="cleaning up after shim disconnected" id=88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a namespace=k8s.io Oct 2 19:06:35.913150 env[1740]: time="2023-10-02T19:06:35.912675976Z" level=info msg="cleaning up dead shim" Oct 2 19:06:35.944472 env[1740]: time="2023-10-02T19:06:35.944372701Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3981 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:06:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:06:35.944937 env[1740]: time="2023-10-02T19:06:35.944839568Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:06:35.945684 env[1740]: time="2023-10-02T19:06:35.945611335Z" level=error msg="Failed to pipe stdout of container \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\"" error="reading from a closed fifo" Oct 2 19:06:35.946117 env[1740]: time="2023-10-02T19:06:35.945936300Z" level=error msg="Failed to pipe stderr of container \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\"" error="reading from a closed fifo" Oct 2 19:06:35.948669 env[1740]: time="2023-10-02T19:06:35.948571528Z" level=error msg="StartContainer for \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:06:35.949608 kubelet[2854]: E1002 19:06:35.949186 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a" Oct 2 19:06:35.949608 kubelet[2854]: E1002 19:06:35.949447 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:06:35.949608 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:06:35.949608 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:06:35.949608 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nzlqp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:06:35.949608 kubelet[2854]: E1002 19:06:35.949542 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:06:36.758800 kubelet[2854]: I1002 19:06:36.758633 2854 scope.go:117] "RemoveContainer" containerID="a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d" Oct 2 19:06:36.759444 kubelet[2854]: I1002 19:06:36.759191 2854 scope.go:117] "RemoveContainer" containerID="a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d" Oct 2 19:06:36.762064 env[1740]: time="2023-10-02T19:06:36.761961549Z" level=info msg="RemoveContainer for \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\"" Oct 2 19:06:36.763965 env[1740]: time="2023-10-02T19:06:36.763912503Z" level=info msg="RemoveContainer for \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\"" Oct 2 19:06:36.764374 env[1740]: time="2023-10-02T19:06:36.764321073Z" level=error msg="RemoveContainer for \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\" failed" error="failed to set removing state for container \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\": container is already in removing state" Oct 2 19:06:36.765467 kubelet[2854]: E1002 19:06:36.764721 2854 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\": container is already in removing state" containerID="a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d" Oct 2 19:06:36.765467 kubelet[2854]: E1002 19:06:36.764861 2854 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d": container is already in removing state; Skipping pod "cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734)" Oct 2 19:06:36.765467 kubelet[2854]: E1002 19:06:36.765391 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734)\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:06:36.771229 env[1740]: time="2023-10-02T19:06:36.771133276Z" level=info msg="RemoveContainer for \"a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d\" returns successfully" Oct 2 19:06:38.430799 kubelet[2854]: W1002 19:06:38.430738 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0778657f_a32b_4174_aac7_d5222b122734.slice/cri-containerd-a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d.scope WatchSource:0}: container "a910596702412e7ad799bbcb2de7b944be1a99932b776691e2b058b0f896018d" in namespace "k8s.io": not found Oct 2 19:06:40.156852 kubelet[2854]: E1002 19:06:40.156809 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:41.540657 kubelet[2854]: W1002 19:06:41.540603 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0778657f_a32b_4174_aac7_d5222b122734.slice/cri-containerd-88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a.scope WatchSource:0}: task 88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a not found: not found Oct 2 19:06:45.158163 kubelet[2854]: E1002 19:06:45.158126 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:49.944403 env[1740]: time="2023-10-02T19:06:49.944325551Z" level=info msg="CreateContainer within sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:06:49.984304 env[1740]: time="2023-10-02T19:06:49.984191565Z" level=info msg="CreateContainer within sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\"" Oct 2 19:06:49.985502 env[1740]: time="2023-10-02T19:06:49.985429698Z" level=info msg="StartContainer for \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\"" Oct 2 19:06:50.056176 systemd[1]: run-containerd-runc-k8s.io-3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6-runc.BTRVM1.mount: Deactivated successfully. Oct 2 19:06:50.068326 systemd[1]: Started cri-containerd-3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6.scope. Oct 2 19:06:50.099737 systemd[1]: cri-containerd-3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6.scope: Deactivated successfully. Oct 2 19:06:50.124258 env[1740]: time="2023-10-02T19:06:50.124156240Z" level=info msg="shim disconnected" id=3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6 Oct 2 19:06:50.124532 env[1740]: time="2023-10-02T19:06:50.124257942Z" level=warning msg="cleaning up after shim disconnected" id=3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6 namespace=k8s.io Oct 2 19:06:50.124532 env[1740]: time="2023-10-02T19:06:50.124282470Z" level=info msg="cleaning up dead shim" Oct 2 19:06:50.151769 env[1740]: time="2023-10-02T19:06:50.151420242Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4018 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:06:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:06:50.154930 env[1740]: time="2023-10-02T19:06:50.154807745Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:06:50.155688 env[1740]: time="2023-10-02T19:06:50.155610715Z" level=error msg="Failed to pipe stdout of container \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\"" error="reading from a closed fifo" Oct 2 19:06:50.156647 env[1740]: time="2023-10-02T19:06:50.156553739Z" level=error msg="Failed to pipe stderr of container \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\"" error="reading from a closed fifo" Oct 2 19:06:50.159407 env[1740]: time="2023-10-02T19:06:50.158947456Z" level=error msg="StartContainer for \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:06:50.161713 kubelet[2854]: E1002 19:06:50.161448 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:50.161713 kubelet[2854]: E1002 19:06:50.161448 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6" Oct 2 19:06:50.161713 kubelet[2854]: E1002 19:06:50.161609 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:06:50.161713 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:06:50.161713 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:06:50.161713 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nzlqp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:06:50.161713 kubelet[2854]: E1002 19:06:50.161673 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:06:50.795784 kubelet[2854]: I1002 19:06:50.795724 2854 scope.go:117] "RemoveContainer" containerID="88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a" Oct 2 19:06:50.796723 kubelet[2854]: I1002 19:06:50.796664 2854 scope.go:117] "RemoveContainer" containerID="88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a" Oct 2 19:06:50.801582 env[1740]: time="2023-10-02T19:06:50.801505484Z" level=info msg="RemoveContainer for \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\"" Oct 2 19:06:50.802529 env[1740]: time="2023-10-02T19:06:50.802457988Z" level=info msg="RemoveContainer for \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\"" Oct 2 19:06:50.802739 env[1740]: time="2023-10-02T19:06:50.802595895Z" level=error msg="RemoveContainer for \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\" failed" error="failed to set removing state for container \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\": container is already in removing state" Oct 2 19:06:50.804554 kubelet[2854]: E1002 19:06:50.803268 2854 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\": container is already in removing state" containerID="88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a" Oct 2 19:06:50.804554 kubelet[2854]: E1002 19:06:50.803349 2854 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a": container is already in removing state; Skipping pod "cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734)" Oct 2 19:06:50.804554 kubelet[2854]: E1002 19:06:50.803988 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734)\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:06:50.812544 env[1740]: time="2023-10-02T19:06:50.812484233Z" level=info msg="RemoveContainer for \"88f829e40e541a53b5331afeeccb74742b8e0a268206835ab43359e491c3100a\" returns successfully" Oct 2 19:06:50.969403 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6-rootfs.mount: Deactivated successfully. Oct 2 19:06:53.231720 kubelet[2854]: W1002 19:06:53.231649 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0778657f_a32b_4174_aac7_d5222b122734.slice/cri-containerd-3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6.scope WatchSource:0}: task 3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6 not found: not found Oct 2 19:06:55.163362 kubelet[2854]: E1002 19:06:55.163326 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:00.165981 kubelet[2854]: E1002 19:07:00.165943 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:05.167770 kubelet[2854]: E1002 19:07:05.167700 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:05.935240 kubelet[2854]: E1002 19:07:05.935162 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734)\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:07:10.168869 kubelet[2854]: E1002 19:07:10.168832 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:15.170518 kubelet[2854]: E1002 19:07:15.170479 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:15.224000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.227351 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:07:15.227455 kernel: audit: type=1400 audit(1696273635.224:1405): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.224000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.247046 kernel: audit: type=1400 audit(1696273635.224:1404): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.247133 kernel: audit: type=1300 audit(1696273635.224:1404): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400a26d4e0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.224000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400a26d4e0 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.224000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.270161 kernel: audit: type=1327 audit(1696273635.224:1404): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.270308 kernel: audit: type=1300 audit(1696273635.224:1405): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40087f2810 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.224000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40087f2810 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.224000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.293212 kernel: audit: type=1327 audit(1696273635.224:1405): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.293326 kernel: audit: type=1400 audit(1696273635.226:1406): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.226000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.226000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40087f2870 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.315378 kernel: audit: type=1300 audit(1696273635.226:1406): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40087f2870 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.315518 kernel: audit: type=1327 audit(1696273635.226:1406): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.246000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.336246 kernel: audit: type=1400 audit(1696273635.246:1407): avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.246000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40087f2990 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.246000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.307000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.307000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400853de30 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.307000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:15.307000 audit[2619]: AVC avc: denied { watch } for pid=2619 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:15.307000 audit[2619]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a362460 a2=fc6 a3=0 items=0 ppid=2454 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c245,c277 key=(null) Oct 2 19:07:15.307000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313837002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:07:16.040000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:16.040000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40020a6d20 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:16.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:16.040000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:16.040000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027d07a0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:16.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:19.840042 env[1740]: time="2023-10-02T19:07:19.839980204Z" level=info msg="StopPodSandbox for \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\"" Oct 2 19:07:19.840651 env[1740]: time="2023-10-02T19:07:19.840130459Z" level=info msg="TearDown network for sandbox \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\" successfully" Oct 2 19:07:19.840651 env[1740]: time="2023-10-02T19:07:19.840189716Z" level=info msg="StopPodSandbox for \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\" returns successfully" Oct 2 19:07:19.840915 env[1740]: time="2023-10-02T19:07:19.840861790Z" level=info msg="RemovePodSandbox for \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\"" Oct 2 19:07:19.841006 env[1740]: time="2023-10-02T19:07:19.840923135Z" level=info msg="Forcibly stopping sandbox \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\"" Oct 2 19:07:19.841096 env[1740]: time="2023-10-02T19:07:19.841054153Z" level=info msg="TearDown network for sandbox \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\" successfully" Oct 2 19:07:19.845707 env[1740]: time="2023-10-02T19:07:19.845643071Z" level=info msg="RemovePodSandbox \"54a0fe0b98f67f4098ec6c6e6b5c3c59ec58a00ac1ccb0f5e835ed082b840cbd\" returns successfully" Oct 2 19:07:19.846630 env[1740]: time="2023-10-02T19:07:19.846563417Z" level=info msg="StopPodSandbox for \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\"" Oct 2 19:07:19.846988 env[1740]: time="2023-10-02T19:07:19.846901632Z" level=info msg="TearDown network for sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" successfully" Oct 2 19:07:19.847240 env[1740]: time="2023-10-02T19:07:19.847171710Z" level=info msg="StopPodSandbox for \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" returns successfully" Oct 2 19:07:19.848082 env[1740]: time="2023-10-02T19:07:19.848033231Z" level=info msg="RemovePodSandbox for \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\"" Oct 2 19:07:19.848257 env[1740]: time="2023-10-02T19:07:19.848089164Z" level=info msg="Forcibly stopping sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\"" Oct 2 19:07:19.848357 env[1740]: time="2023-10-02T19:07:19.848242599Z" level=info msg="TearDown network for sandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" successfully" Oct 2 19:07:19.853071 env[1740]: time="2023-10-02T19:07:19.853007896Z" level=info msg="RemovePodSandbox \"1e6e623dbe353d56e63ba7dc3b745d5d9f13954ef441e142294c42dfadff2915\" returns successfully" Oct 2 19:07:19.940130 env[1740]: time="2023-10-02T19:07:19.940059199Z" level=info msg="CreateContainer within sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:07:19.971664 env[1740]: time="2023-10-02T19:07:19.971577959Z" level=info msg="CreateContainer within sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2\"" Oct 2 19:07:19.974407 env[1740]: time="2023-10-02T19:07:19.972647900Z" level=info msg="StartContainer for \"6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2\"" Oct 2 19:07:20.038219 systemd[1]: Started cri-containerd-6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2.scope. Oct 2 19:07:20.050825 systemd[1]: run-containerd-runc-k8s.io-6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2-runc.3U1aNU.mount: Deactivated successfully. Oct 2 19:07:20.057557 kubelet[2854]: W1002 19:07:20.057526 2854 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:07:20.088801 systemd[1]: cri-containerd-6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2.scope: Deactivated successfully. Oct 2 19:07:20.097880 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2-rootfs.mount: Deactivated successfully. Oct 2 19:07:20.124672 env[1740]: time="2023-10-02T19:07:20.124601559Z" level=info msg="shim disconnected" id=6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2 Oct 2 19:07:20.125045 env[1740]: time="2023-10-02T19:07:20.125010215Z" level=warning msg="cleaning up after shim disconnected" id=6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2 namespace=k8s.io Oct 2 19:07:20.125210 env[1740]: time="2023-10-02T19:07:20.125165114Z" level=info msg="cleaning up dead shim" Oct 2 19:07:20.153041 env[1740]: time="2023-10-02T19:07:20.152972321Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4059 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:07:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:07:20.153786 env[1740]: time="2023-10-02T19:07:20.153704216Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:07:20.154344 env[1740]: time="2023-10-02T19:07:20.154286996Z" level=error msg="Failed to pipe stdout of container \"6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2\"" error="reading from a closed fifo" Oct 2 19:07:20.155245 env[1740]: time="2023-10-02T19:07:20.155134429Z" level=error msg="Failed to pipe stderr of container \"6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2\"" error="reading from a closed fifo" Oct 2 19:07:20.157741 env[1740]: time="2023-10-02T19:07:20.157674689Z" level=error msg="StartContainer for \"6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:07:20.158529 kubelet[2854]: E1002 19:07:20.158282 2854 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2" Oct 2 19:07:20.158529 kubelet[2854]: E1002 19:07:20.158434 2854 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:07:20.158529 kubelet[2854]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:07:20.158529 kubelet[2854]: rm /hostbin/cilium-mount Oct 2 19:07:20.158529 kubelet[2854]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nzlqp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:07:20.158529 kubelet[2854]: E1002 19:07:20.158491 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:07:20.172903 kubelet[2854]: E1002 19:07:20.172848 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:20.873088 kubelet[2854]: I1002 19:07:20.872858 2854 scope.go:117] "RemoveContainer" containerID="3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6" Oct 2 19:07:20.876721 kubelet[2854]: I1002 19:07:20.875266 2854 scope.go:117] "RemoveContainer" containerID="3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6" Oct 2 19:07:20.883339 env[1740]: time="2023-10-02T19:07:20.882616987Z" level=info msg="RemoveContainer for \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\"" Oct 2 19:07:20.884375 env[1740]: time="2023-10-02T19:07:20.882617695Z" level=info msg="RemoveContainer for \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\"" Oct 2 19:07:20.885044 env[1740]: time="2023-10-02T19:07:20.884945550Z" level=error msg="RemoveContainer for \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\" failed" error="failed to set removing state for container \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\": container is already in removing state" Oct 2 19:07:20.885976 kubelet[2854]: E1002 19:07:20.885930 2854 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\": container is already in removing state" containerID="3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6" Oct 2 19:07:20.886349 kubelet[2854]: E1002 19:07:20.886316 2854 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6": container is already in removing state; Skipping pod "cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734)" Oct 2 19:07:20.888028 kubelet[2854]: E1002 19:07:20.887930 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734)\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:07:20.894656 env[1740]: time="2023-10-02T19:07:20.894586955Z" level=info msg="RemoveContainer for \"3c2e7945bc272c6cd1445f64f1c2f3f04674fe73b4a646b0db3cb928461bc1f6\" returns successfully" Oct 2 19:07:23.231055 kubelet[2854]: E1002 19:07:23.230959 2854 manager.go:1106] Failed to create existing container: /kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0778657f_a32b_4174_aac7_d5222b122734.slice/cri-containerd-6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2.scope: task 6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2 not found: not found Oct 2 19:07:25.174143 kubelet[2854]: E1002 19:07:25.174106 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:26.340725 kubelet[2854]: W1002 19:07:26.340662 2854 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0778657f_a32b_4174_aac7_d5222b122734.slice/cri-containerd-6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2.scope WatchSource:0}: task 6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2 not found: not found Oct 2 19:07:30.175991 kubelet[2854]: E1002 19:07:30.175908 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:30.447000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.451228 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:07:30.451351 kernel: audit: type=1400 audit(1696273650.447:1412): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.447000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400143e6e0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:30.473810 kernel: audit: type=1300 audit(1696273650.447:1412): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400143e6e0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:30.473941 kernel: audit: type=1327 audit(1696273650.447:1412): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.449000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.494440 kernel: audit: type=1400 audit(1696273650.449:1413): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.494579 kernel: audit: type=1300 audit(1696273650.449:1413): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400143e980 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:30.449000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400143e980 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:30.449000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.517758 kernel: audit: type=1327 audit(1696273650.449:1413): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.517857 kernel: audit: type=1400 audit(1696273650.450:1414): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.450000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.450000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027054e0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:30.540257 kernel: audit: type=1300 audit(1696273650.450:1414): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027054e0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:30.540362 kernel: audit: type=1327 audit(1696273650.450:1414): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:30.451000 audit[2627]: AVC avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.561346 kernel: audit: type=1400 audit(1696273650.451:1415): avc: denied { watch } for pid=2627 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:30.451000 audit[2627]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400143ebe0 a2=fc6 a3=0 items=0 ppid=2482 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:30.451000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:33.935108 kubelet[2854]: E1002 19:07:33.935039 2854 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-5bbcw_kube-system(0778657f-a32b-4174-aac7-d5222b122734)\"" pod="kube-system/cilium-5bbcw" podUID="0778657f-a32b-4174-aac7-d5222b122734" Oct 2 19:07:34.911213 env[1740]: time="2023-10-02T19:07:34.910935945Z" level=info msg="StopPodSandbox for \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\"" Oct 2 19:07:34.911213 env[1740]: time="2023-10-02T19:07:34.911030027Z" level=info msg="Container to stop \"6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:07:34.913946 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539-shm.mount: Deactivated successfully. Oct 2 19:07:34.944458 systemd[1]: cri-containerd-f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539.scope: Deactivated successfully. Oct 2 19:07:34.943000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:07:34.947000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:07:35.006630 sshd[3859]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:35.009000 audit[3859]: USER_END pid=3859 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:35.009000 audit[3859]: CRED_DISP pid=3859 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:35.013395 systemd[1]: sshd@29-172.31.29.187:22-139.178.89.65:39562.service: Deactivated successfully. Oct 2 19:07:35.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.187:22-139.178.89.65:39562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:35.014707 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:07:35.015043 systemd[1]: session-30.scope: Consumed 2.058s CPU time. Oct 2 19:07:35.016662 systemd-logind[1724]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:07:35.024787 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539-rootfs.mount: Deactivated successfully. Oct 2 19:07:35.026435 systemd-logind[1724]: Removed session 30. Oct 2 19:07:35.052552 env[1740]: time="2023-10-02T19:07:35.052487090Z" level=info msg="shim disconnected" id=f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539 Oct 2 19:07:35.054318 env[1740]: time="2023-10-02T19:07:35.053063691Z" level=warning msg="cleaning up after shim disconnected" id=f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539 namespace=k8s.io Oct 2 19:07:35.054765 env[1740]: time="2023-10-02T19:07:35.054710990Z" level=info msg="cleaning up dead shim" Oct 2 19:07:35.081803 env[1740]: time="2023-10-02T19:07:35.081721782Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4095 runtime=io.containerd.runc.v2\n" Oct 2 19:07:35.082379 env[1740]: time="2023-10-02T19:07:35.082328155Z" level=info msg="TearDown network for sandbox \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" successfully" Oct 2 19:07:35.082547 env[1740]: time="2023-10-02T19:07:35.082380260Z" level=info msg="StopPodSandbox for \"f7b9a5e223df599b89a48c9ee868d006c2efa416b03547562d9d91941ad78539\" returns successfully" Oct 2 19:07:35.113227 kubelet[2854]: I1002 19:07:35.113123 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-host-proc-sys-net\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113255 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-clustermesh-secrets\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113329 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-cilium-ipsec-secrets\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113371 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cni-path\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113439 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-etc-cni-netd\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113512 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0778657f-a32b-4174-aac7-d5222b122734-cilium-config-path\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113609 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-xtables-lock\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113659 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-nzlqp\" (UniqueName: \"kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-kube-api-access-nzlqp\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113722 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-bpf-maps\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113785 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-hostproc\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.113832 kubelet[2854]: I1002 19:07:35.113828 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cilium-run\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.114550 kubelet[2854]: I1002 19:07:35.113895 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-hubble-tls\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.114550 kubelet[2854]: I1002 19:07:35.113961 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cilium-cgroup\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.114550 kubelet[2854]: I1002 19:07:35.114009 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-host-proc-sys-kernel\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.114550 kubelet[2854]: I1002 19:07:35.114074 2854 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-lib-modules\") pod \"0778657f-a32b-4174-aac7-d5222b122734\" (UID: \"0778657f-a32b-4174-aac7-d5222b122734\") " Oct 2 19:07:35.114550 kubelet[2854]: I1002 19:07:35.114179 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.114550 kubelet[2854]: I1002 19:07:35.114292 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.114989 kubelet[2854]: I1002 19:07:35.114768 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.114989 kubelet[2854]: I1002 19:07:35.114832 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-hostproc" (OuterVolumeSpecName: "hostproc") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.114989 kubelet[2854]: I1002 19:07:35.114898 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.117436 kubelet[2854]: I1002 19:07:35.115664 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.117436 kubelet[2854]: I1002 19:07:35.115726 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.117436 kubelet[2854]: I1002 19:07:35.116141 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.117737 kubelet[2854]: I1002 19:07:35.117533 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.117737 kubelet[2854]: I1002 19:07:35.117624 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cni-path" (OuterVolumeSpecName: "cni-path") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:35.122751 kubelet[2854]: I1002 19:07:35.122624 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/0778657f-a32b-4174-aac7-d5222b122734-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:07:35.133908 systemd[1]: var-lib-kubelet-pods-0778657f\x2da32b\x2d4174\x2daac7\x2dd5222b122734-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:07:35.142447 systemd[1]: var-lib-kubelet-pods-0778657f\x2da32b\x2d4174\x2daac7\x2dd5222b122734-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dnzlqp.mount: Deactivated successfully. Oct 2 19:07:35.144743 kubelet[2854]: I1002 19:07:35.144694 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:07:35.144963 kubelet[2854]: I1002 19:07:35.144694 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-kube-api-access-nzlqp" (OuterVolumeSpecName: "kube-api-access-nzlqp") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "kube-api-access-nzlqp". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:07:35.148576 kubelet[2854]: I1002 19:07:35.147056 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:07:35.148949 kubelet[2854]: I1002 19:07:35.148905 2854 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "0778657f-a32b-4174-aac7-d5222b122734" (UID: "0778657f-a32b-4174-aac7-d5222b122734"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:07:35.149075 systemd[1]: var-lib-kubelet-pods-0778657f\x2da32b\x2d4174\x2daac7\x2dd5222b122734-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:07:35.149306 systemd[1]: var-lib-kubelet-pods-0778657f\x2da32b\x2d4174\x2daac7\x2dd5222b122734-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:07:35.177621 kubelet[2854]: E1002 19:07:35.177444 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:35.215215 kubelet[2854]: I1002 19:07:35.215127 2854 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-xtables-lock\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215215 kubelet[2854]: I1002 19:07:35.215190 2854 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-nzlqp\" (UniqueName: \"kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-kube-api-access-nzlqp\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215247 2854 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-bpf-maps\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215272 2854 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-hostproc\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215297 2854 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cilium-run\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215320 2854 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0778657f-a32b-4174-aac7-d5222b122734-hubble-tls\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215344 2854 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cilium-cgroup\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215372 2854 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-host-proc-sys-kernel\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215394 2854 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-lib-modules\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215417 2854 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-host-proc-sys-net\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215440 2854 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-clustermesh-secrets\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.215472 kubelet[2854]: I1002 19:07:35.215463 2854 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/0778657f-a32b-4174-aac7-d5222b122734-cilium-ipsec-secrets\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.216076 kubelet[2854]: I1002 19:07:35.215487 2854 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-cni-path\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.216076 kubelet[2854]: I1002 19:07:35.215541 2854 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0778657f-a32b-4174-aac7-d5222b122734-etc-cni-netd\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.216076 kubelet[2854]: I1002 19:07:35.215566 2854 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0778657f-a32b-4174-aac7-d5222b122734-cilium-config-path\") on node \"ip-172-31-29-187\" DevicePath \"\"" Oct 2 19:07:35.917310 kubelet[2854]: I1002 19:07:35.914854 2854 scope.go:117] "RemoveContainer" containerID="6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2" Oct 2 19:07:35.920124 env[1740]: time="2023-10-02T19:07:35.920030647Z" level=info msg="RemoveContainer for \"6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2\"" Oct 2 19:07:35.925865 env[1740]: time="2023-10-02T19:07:35.925799626Z" level=info msg="RemoveContainer for \"6f84c3b8155713e1ba86a44aba57d3b07c007bfcd43ab732af5922e9f296add2\" returns successfully" Oct 2 19:07:35.930922 systemd[1]: Removed slice kubepods-burstable-pod0778657f_a32b_4174_aac7_d5222b122734.slice. Oct 2 19:07:37.939327 kubelet[2854]: I1002 19:07:37.939290 2854 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="0778657f-a32b-4174-aac7-d5222b122734" path="/var/lib/kubelet/pods/0778657f-a32b-4174-aac7-d5222b122734/volumes" Oct 2 19:07:40.179181 kubelet[2854]: E1002 19:07:40.179147 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:45.180715 kubelet[2854]: E1002 19:07:45.180654 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:50.182918 kubelet[2854]: E1002 19:07:50.182861 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:50.282975 systemd[1]: cri-containerd-0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c.scope: Deactivated successfully. Oct 2 19:07:50.283551 systemd[1]: cri-containerd-0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c.scope: Consumed 7.736s CPU time. Oct 2 19:07:50.290230 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:07:50.290398 kernel: audit: type=1334 audit(1696273670.287:1421): prog-id=92 op=UNLOAD Oct 2 19:07:50.287000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:07:50.287000 audit: BPF prog-id=104 op=UNLOAD Oct 2 19:07:50.295707 kernel: audit: type=1334 audit(1696273670.287:1422): prog-id=104 op=UNLOAD Oct 2 19:07:50.343562 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c-rootfs.mount: Deactivated successfully. Oct 2 19:07:50.363130 env[1740]: time="2023-10-02T19:07:50.363067403Z" level=info msg="shim disconnected" id=0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c Oct 2 19:07:50.363958 env[1740]: time="2023-10-02T19:07:50.363916062Z" level=warning msg="cleaning up after shim disconnected" id=0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c namespace=k8s.io Oct 2 19:07:50.364088 env[1740]: time="2023-10-02T19:07:50.364059309Z" level=info msg="cleaning up dead shim" Oct 2 19:07:50.391684 env[1740]: time="2023-10-02T19:07:50.391627093Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4127 runtime=io.containerd.runc.v2\n" Oct 2 19:07:50.950367 kubelet[2854]: I1002 19:07:50.950259 2854 scope.go:117] "RemoveContainer" containerID="0df7b51d36693aa88806d865e8ca255eb69e8680dec3b2367da1afdb5464e52c" Oct 2 19:07:50.955003 env[1740]: time="2023-10-02T19:07:50.954945679Z" level=info msg="CreateContainer within sandbox \"1691b3d988fee413b24b4f4585c8456270ce52a9dc2c1dcf1df1ef2cb075bd8e\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:07:50.974365 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount804075738.mount: Deactivated successfully. Oct 2 19:07:50.985686 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount707127839.mount: Deactivated successfully. Oct 2 19:07:50.996966 env[1740]: time="2023-10-02T19:07:50.996881660Z" level=info msg="CreateContainer within sandbox \"1691b3d988fee413b24b4f4585c8456270ce52a9dc2c1dcf1df1ef2cb075bd8e\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"15141e0b6485a0b60312f51c7cea4f3b844f664bb7a39c3232aae4c112603199\"" Oct 2 19:07:50.997667 env[1740]: time="2023-10-02T19:07:50.997625196Z" level=info msg="StartContainer for \"15141e0b6485a0b60312f51c7cea4f3b844f664bb7a39c3232aae4c112603199\"" Oct 2 19:07:51.048250 systemd[1]: Started cri-containerd-15141e0b6485a0b60312f51c7cea4f3b844f664bb7a39c3232aae4c112603199.scope. Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111530 kernel: audit: type=1400 audit(1696273671.095:1423): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111687 kernel: audit: type=1400 audit(1696273671.095:1424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111744 kernel: audit: type=1400 audit(1696273671.095:1425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.127135 kernel: audit: type=1400 audit(1696273671.095:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.141265 kernel: audit: type=1400 audit(1696273671.095:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.165040 kernel: audit: type=1400 audit(1696273671.095:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.165138 kernel: audit: type=1400 audit(1696273671.095:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.165224 kernel: audit: type=1400 audit(1696273671.095:1430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit: BPF prog-id=141 op=LOAD Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2482 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135313431653062363438356130623630333132663531633763656134 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2482 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135313431653062363438356130623630333132663531633763656134 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.103000 audit: BPF prog-id=142 op=LOAD Oct 2 19:07:51.103000 audit[4149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2482 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135313431653062363438356130623630333132663531633763656134 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.111000 audit: BPF prog-id=143 op=LOAD Oct 2 19:07:51.111000 audit[4149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2482 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135313431653062363438356130623630333132663531633763656134 Oct 2 19:07:51.119000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:07:51.119000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { perfmon } for pid=4149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit[4149]: AVC avc: denied { bpf } for pid=4149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:51.119000 audit: BPF prog-id=144 op=LOAD Oct 2 19:07:51.119000 audit[4149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2482 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:51.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135313431653062363438356130623630333132663531633763656134 Oct 2 19:07:51.209280 env[1740]: time="2023-10-02T19:07:51.209121267Z" level=info msg="StartContainer for \"15141e0b6485a0b60312f51c7cea4f3b844f664bb7a39c3232aae4c112603199\" returns successfully" Oct 2 19:07:54.347000 audit[4160]: AVC avc: denied { watch } for pid=4160 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:54.347000 audit[4160]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003af180 a2=fc6 a3=0 items=0 ppid=2482 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:54.347000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:54.348000 audit[4160]: AVC avc: denied { watch } for pid=4160 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:54.348000 audit[4160]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40009497d0 a2=fc6 a3=0 items=0 ppid=2482 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c171,c349 key=(null) Oct 2 19:07:54.348000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:55.184305 kubelet[2854]: E1002 19:07:55.184247 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:55.336465 systemd[1]: cri-containerd-be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b.scope: Deactivated successfully. Oct 2 19:07:55.337031 systemd[1]: cri-containerd-be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b.scope: Consumed 5.079s CPU time. Oct 2 19:07:55.346161 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 19:07:55.346432 kernel: audit: type=1334 audit(1696273675.339:1443): prog-id=96 op=UNLOAD Oct 2 19:07:55.339000 audit: BPF prog-id=96 op=UNLOAD Oct 2 19:07:55.349390 kernel: audit: type=1334 audit(1696273675.339:1444): prog-id=110 op=UNLOAD Oct 2 19:07:55.339000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:07:55.389976 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b-rootfs.mount: Deactivated successfully. Oct 2 19:07:55.421289 env[1740]: time="2023-10-02T19:07:55.421182179Z" level=info msg="shim disconnected" id=be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b Oct 2 19:07:55.422024 env[1740]: time="2023-10-02T19:07:55.421983305Z" level=warning msg="cleaning up after shim disconnected" id=be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b namespace=k8s.io Oct 2 19:07:55.422150 env[1740]: time="2023-10-02T19:07:55.422121044Z" level=info msg="cleaning up dead shim" Oct 2 19:07:55.449280 env[1740]: time="2023-10-02T19:07:55.449093573Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4189 runtime=io.containerd.runc.v2\n" Oct 2 19:07:55.966638 kubelet[2854]: I1002 19:07:55.966596 2854 scope.go:117] "RemoveContainer" containerID="be3a59ffa2f73af66d83b08459196cdec8a74a98871f54eaaf015162ac1af21b" Oct 2 19:07:55.970034 env[1740]: time="2023-10-02T19:07:55.969971335Z" level=info msg="CreateContainer within sandbox \"1e42a4700c3d3801f33c22e8e62d2d1c84ca01e75c62abd0d78ddac6b365fad2\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:07:55.990864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1942438079.mount: Deactivated successfully. Oct 2 19:07:55.999881 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1126961798.mount: Deactivated successfully. Oct 2 19:07:56.005376 env[1740]: time="2023-10-02T19:07:56.005315277Z" level=info msg="CreateContainer within sandbox \"1e42a4700c3d3801f33c22e8e62d2d1c84ca01e75c62abd0d78ddac6b365fad2\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"11ff8d42aa4bb6147d64d74a2801028a13251eb582de38b39bdcd527e69bfec0\"" Oct 2 19:07:56.006316 env[1740]: time="2023-10-02T19:07:56.006272011Z" level=info msg="StartContainer for \"11ff8d42aa4bb6147d64d74a2801028a13251eb582de38b39bdcd527e69bfec0\"" Oct 2 19:07:56.049481 systemd[1]: Started cri-containerd-11ff8d42aa4bb6147d64d74a2801028a13251eb582de38b39bdcd527e69bfec0.scope. Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.109416 kernel: audit: type=1400 audit(1696273676.092:1445): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.109624 kernel: audit: type=1400 audit(1696273676.092:1446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.117918 kernel: audit: type=1400 audit(1696273676.092:1447): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.126373 kernel: audit: type=1400 audit(1696273676.092:1448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.142641 kernel: audit: type=1400 audit(1696273676.092:1449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.142778 kernel: audit: type=1400 audit(1696273676.092:1450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.150946 kernel: audit: type=1400 audit(1696273676.092:1451): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.159251 kernel: audit: type=1400 audit(1696273676.092:1452): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.099000 audit: BPF prog-id=145 op=LOAD Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2458 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:56.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666638643432616134626236313437643634643734613238303130 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2458 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:56.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666638643432616134626236313437643634643734613238303130 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.103000 audit: BPF prog-id=146 op=LOAD Oct 2 19:07:56.103000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2458 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:56.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666638643432616134626236313437643634643734613238303130 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit: BPF prog-id=147 op=LOAD Oct 2 19:07:56.108000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2458 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:56.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666638643432616134626236313437643634643734613238303130 Oct 2 19:07:56.108000 audit: BPF prog-id=147 op=UNLOAD Oct 2 19:07:56.108000 audit: BPF prog-id=146 op=UNLOAD Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:56.108000 audit: BPF prog-id=148 op=LOAD Oct 2 19:07:56.108000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2458 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:56.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131666638643432616134626236313437643634643734613238303130 Oct 2 19:07:56.204907 env[1740]: time="2023-10-02T19:07:56.204844416Z" level=info msg="StartContainer for \"11ff8d42aa4bb6147d64d74a2801028a13251eb582de38b39bdcd527e69bfec0\" returns successfully" Oct 2 19:07:57.192073 kubelet[2854]: E1002 19:07:57.192023 2854 controller.go:193] "Failed to update lease" err="Put \"https://172.31.29.187:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-187?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:08:00.185679 kubelet[2854]: E1002 19:08:00.185620 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:08:05.187498 kubelet[2854]: E1002 19:08:05.187463 2854 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:08:05.753687 kubelet[2854]: E1002 19:08:05.753286 2854 kubelet_node_status.go:540] "Error updating node status, will retry" err="failed to patch status \"{\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"type\\\":\\\"DiskPressure\\\"},{\\\"type\\\":\\\"PIDPressure\\\"},{\\\"type\\\":\\\"Ready\\\"}],\\\"conditions\\\":[{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:07:55Z\\\",\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:07:55Z\\\",\\\"type\\\":\\\"DiskPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:07:55Z\\\",\\\"type\\\":\\\"PIDPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:07:55Z\\\",\\\"type\\\":\\\"Ready\\\"}]}}\" for node \"ip-172-31-29-187\": Patch \"https://172.31.29.187:6443/api/v1/nodes/ip-172-31-29-187/status?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:08:07.193838 kubelet[2854]: E1002 19:08:07.193800 2854 controller.go:193] "Failed to update lease" err="Put \"https://172.31.29.187:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-187?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"