Oct 2 19:13:13.177882 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:13:13.177918 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:13:13.177941 kernel: efi: EFI v2.70 by EDK II Oct 2 19:13:13.177956 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:13:13.177970 kernel: ACPI: Early table checksum verification disabled Oct 2 19:13:13.177983 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:13:13.178022 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:13:13.184485 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:13:13.184519 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:13:13.184535 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:13:13.184559 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:13:13.184573 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:13:13.184587 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:13:13.184601 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:13:13.184618 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:13:13.184637 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:13:13.184651 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:13:13.184666 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:13:13.184680 kernel: printk: bootconsole [uart0] enabled Oct 2 19:13:13.184694 kernel: NUMA: Failed to initialise from firmware Oct 2 19:13:13.184710 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:13:13.184725 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:13:13.184740 kernel: Zone ranges: Oct 2 19:13:13.184754 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:13:13.184769 kernel: DMA32 empty Oct 2 19:13:13.184783 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:13:13.184801 kernel: Movable zone start for each node Oct 2 19:13:13.184816 kernel: Early memory node ranges Oct 2 19:13:13.184831 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:13:13.184845 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:13:13.184859 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:13:13.184873 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:13:13.184888 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:13:13.184902 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:13:13.184916 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:13:13.184931 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:13:13.184945 kernel: psci: probing for conduit method from ACPI. Oct 2 19:13:13.184960 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:13:13.184978 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:13:13.185052 kernel: psci: Trusted OS migration not required Oct 2 19:13:13.185077 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:13:13.185094 kernel: ACPI: SRAT not present Oct 2 19:13:13.185110 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:13:13.185129 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:13:13.185144 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:13:13.185160 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:13:13.185193 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:13:13.185209 kernel: CPU features: detected: Spectre-v2 Oct 2 19:13:13.185224 kernel: CPU features: detected: Spectre-v3a Oct 2 19:13:13.185239 kernel: CPU features: detected: Spectre-BHB Oct 2 19:13:13.185254 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:13:13.185269 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:13:13.185284 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:13:13.185299 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:13:13.185319 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:13:13.185334 kernel: Policy zone: Normal Oct 2 19:13:13.185352 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:13:13.185369 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:13:13.185384 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:13:13.185399 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:13:13.185415 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:13:13.185430 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:13:13.185446 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:13:13.185462 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:13:13.185481 kernel: trace event string verifier disabled Oct 2 19:13:13.185497 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:13:13.185513 kernel: rcu: RCU event tracing is enabled. Oct 2 19:13:13.185528 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:13:13.185544 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:13:13.185559 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:13:13.185574 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:13:13.185590 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:13:13.185605 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:13:13.185620 kernel: GICv3: 96 SPIs implemented Oct 2 19:13:13.185635 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:13:13.185650 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:13:13.185669 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:13:13.185684 kernel: GICv3: 16 PPIs implemented Oct 2 19:13:13.185699 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:13:13.185714 kernel: ACPI: SRAT not present Oct 2 19:13:13.185728 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:13:13.185744 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:13:13.185759 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:13:13.185774 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:13:13.185789 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:13:13.185804 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:13:13.185819 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:13:13.185838 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:13:13.185854 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:13:13.185869 kernel: Console: colour dummy device 80x25 Oct 2 19:13:13.185885 kernel: printk: console [tty1] enabled Oct 2 19:13:13.185900 kernel: ACPI: Core revision 20210730 Oct 2 19:13:13.185916 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:13:13.185932 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:13:13.185948 kernel: LSM: Security Framework initializing Oct 2 19:13:13.185963 kernel: SELinux: Initializing. Oct 2 19:13:13.185979 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.186016 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.186034 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:13:13.186050 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:13:13.186065 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:13:13.186081 kernel: Remapping and enabling EFI services. Oct 2 19:13:13.186096 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:13:13.186112 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:13:13.186127 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:13:13.186143 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:13:13.186163 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:13:13.186178 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:13:13.186194 kernel: SMP: Total of 2 processors activated. Oct 2 19:13:13.186209 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:13:13.186224 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:13:13.186240 kernel: CPU features: detected: CRC32 instructions Oct 2 19:13:13.186255 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:13:13.186271 kernel: alternatives: patching kernel code Oct 2 19:13:13.186286 kernel: devtmpfs: initialized Oct 2 19:13:13.186306 kernel: KASLR disabled due to lack of seed Oct 2 19:13:13.186322 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:13:13.186338 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:13:13.186364 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:13:13.186384 kernel: SMBIOS 3.0.0 present. Oct 2 19:13:13.186400 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:13:13.186415 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:13:13.186431 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:13:13.186448 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:13:13.186464 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:13:13.186480 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:13:13.186496 kernel: audit: type=2000 audit(0.247:1): state=initialized audit_enabled=0 res=1 Oct 2 19:13:13.186516 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:13:13.186532 kernel: cpuidle: using governor menu Oct 2 19:13:13.186548 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:13:13.186564 kernel: ASID allocator initialised with 32768 entries Oct 2 19:13:13.186580 kernel: ACPI: bus type PCI registered Oct 2 19:13:13.186600 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:13:13.186617 kernel: Serial: AMBA PL011 UART driver Oct 2 19:13:13.186633 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:13:13.186649 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:13:13.186665 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:13:13.186682 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:13:13.186698 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:13:13.186714 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:13:13.186730 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:13:13.186750 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:13:13.186766 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:13:13.186782 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:13:13.186798 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:13:13.186814 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:13:13.186830 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:13:13.186847 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:13:13.186863 kernel: ACPI: Interpreter enabled Oct 2 19:13:13.186879 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:13:13.186898 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:13:13.186915 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:13:13.187339 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:13:13.187541 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:13:13.187733 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:13:13.187922 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:13:13.188137 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:13:13.188166 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:13:13.188183 kernel: acpiphp: Slot [1] registered Oct 2 19:13:13.188200 kernel: acpiphp: Slot [2] registered Oct 2 19:13:13.188216 kernel: acpiphp: Slot [3] registered Oct 2 19:13:13.188232 kernel: acpiphp: Slot [4] registered Oct 2 19:13:13.188248 kernel: acpiphp: Slot [5] registered Oct 2 19:13:13.188264 kernel: acpiphp: Slot [6] registered Oct 2 19:13:13.188280 kernel: acpiphp: Slot [7] registered Oct 2 19:13:13.188296 kernel: acpiphp: Slot [8] registered Oct 2 19:13:13.188316 kernel: acpiphp: Slot [9] registered Oct 2 19:13:13.188332 kernel: acpiphp: Slot [10] registered Oct 2 19:13:13.188348 kernel: acpiphp: Slot [11] registered Oct 2 19:13:13.188364 kernel: acpiphp: Slot [12] registered Oct 2 19:13:13.188380 kernel: acpiphp: Slot [13] registered Oct 2 19:13:13.188396 kernel: acpiphp: Slot [14] registered Oct 2 19:13:13.188412 kernel: acpiphp: Slot [15] registered Oct 2 19:13:13.188428 kernel: acpiphp: Slot [16] registered Oct 2 19:13:13.188444 kernel: acpiphp: Slot [17] registered Oct 2 19:13:13.188459 kernel: acpiphp: Slot [18] registered Oct 2 19:13:13.188479 kernel: acpiphp: Slot [19] registered Oct 2 19:13:13.188495 kernel: acpiphp: Slot [20] registered Oct 2 19:13:13.188511 kernel: acpiphp: Slot [21] registered Oct 2 19:13:13.188527 kernel: acpiphp: Slot [22] registered Oct 2 19:13:13.188543 kernel: acpiphp: Slot [23] registered Oct 2 19:13:13.188559 kernel: acpiphp: Slot [24] registered Oct 2 19:13:13.188575 kernel: acpiphp: Slot [25] registered Oct 2 19:13:13.188590 kernel: acpiphp: Slot [26] registered Oct 2 19:13:13.188607 kernel: acpiphp: Slot [27] registered Oct 2 19:13:13.188627 kernel: acpiphp: Slot [28] registered Oct 2 19:13:13.188643 kernel: acpiphp: Slot [29] registered Oct 2 19:13:13.188659 kernel: acpiphp: Slot [30] registered Oct 2 19:13:13.188675 kernel: acpiphp: Slot [31] registered Oct 2 19:13:13.188691 kernel: PCI host bridge to bus 0000:00 Oct 2 19:13:13.188882 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:13:13.189081 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:13:13.189278 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:13:13.189502 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:13:13.189721 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:13:13.189931 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:13:13.208511 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:13:13.208748 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:13:13.208946 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:13:13.209191 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:13:13.209411 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:13:13.209609 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:13:13.209804 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:13:13.210015 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:13:13.210228 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:13:13.210422 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:13:13.210621 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:13:13.210815 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:13:13.211035 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:13:13.211244 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:13:13.211428 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:13:13.211606 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:13:13.211778 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:13:13.211806 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:13:13.211824 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:13:13.211842 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:13:13.211858 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:13:13.211875 kernel: iommu: Default domain type: Translated Oct 2 19:13:13.211891 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:13:13.211907 kernel: vgaarb: loaded Oct 2 19:13:13.211923 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:13:13.211939 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:13:13.211959 kernel: PTP clock support registered Oct 2 19:13:13.211976 kernel: Registered efivars operations Oct 2 19:13:13.212009 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:13:13.212030 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:13:13.212047 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:13:13.212063 kernel: pnp: PnP ACPI init Oct 2 19:13:13.212281 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:13:13.212306 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:13:13.212323 kernel: NET: Registered PF_INET protocol family Oct 2 19:13:13.212345 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:13:13.212362 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:13:13.212379 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:13:13.212395 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:13:13.212411 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:13:13.212427 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:13:13.212444 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.212460 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.212476 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:13:13.212496 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:13:13.212512 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:13:13.212528 kernel: kvm [1]: HYP mode not available Oct 2 19:13:13.212545 kernel: Initialise system trusted keyrings Oct 2 19:13:13.212561 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:13:13.212577 kernel: Key type asymmetric registered Oct 2 19:13:13.212594 kernel: Asymmetric key parser 'x509' registered Oct 2 19:13:13.212610 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:13:13.212626 kernel: io scheduler mq-deadline registered Oct 2 19:13:13.212646 kernel: io scheduler kyber registered Oct 2 19:13:13.212662 kernel: io scheduler bfq registered Oct 2 19:13:13.212861 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:13:13.212886 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:13:13.212903 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:13:13.212919 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:13:13.212936 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:13:13.216963 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:13:13.217031 kernel: printk: console [ttyS0] disabled Oct 2 19:13:13.217051 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:13:13.217068 kernel: printk: console [ttyS0] enabled Oct 2 19:13:13.217084 kernel: printk: bootconsole [uart0] disabled Oct 2 19:13:13.217100 kernel: thunder_xcv, ver 1.0 Oct 2 19:13:13.217116 kernel: thunder_bgx, ver 1.0 Oct 2 19:13:13.217133 kernel: nicpf, ver 1.0 Oct 2 19:13:13.217149 kernel: nicvf, ver 1.0 Oct 2 19:13:13.217381 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:13:13.217575 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:13:12 UTC (1696273992) Oct 2 19:13:13.217599 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:13:13.217615 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:13:13.217632 kernel: Segment Routing with IPv6 Oct 2 19:13:13.217648 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:13:13.217664 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:13:13.217680 kernel: Key type dns_resolver registered Oct 2 19:13:13.217697 kernel: registered taskstats version 1 Oct 2 19:13:13.217717 kernel: Loading compiled-in X.509 certificates Oct 2 19:13:13.217734 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:13:13.217750 kernel: Key type .fscrypt registered Oct 2 19:13:13.217767 kernel: Key type fscrypt-provisioning registered Oct 2 19:13:13.217782 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:13:13.217799 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:13:13.217815 kernel: ima: No architecture policies found Oct 2 19:13:13.217831 kernel: Freeing unused kernel memory: 34560K Oct 2 19:13:13.217847 kernel: Run /init as init process Oct 2 19:13:13.217870 kernel: with arguments: Oct 2 19:13:13.217889 kernel: /init Oct 2 19:13:13.217905 kernel: with environment: Oct 2 19:13:13.217921 kernel: HOME=/ Oct 2 19:13:13.217937 kernel: TERM=linux Oct 2 19:13:13.217953 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:13:13.217976 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:13:13.218056 systemd[1]: Detected virtualization amazon. Oct 2 19:13:13.218085 systemd[1]: Detected architecture arm64. Oct 2 19:13:13.218103 systemd[1]: Running in initrd. Oct 2 19:13:13.218121 systemd[1]: No hostname configured, using default hostname. Oct 2 19:13:13.218138 systemd[1]: Hostname set to . Oct 2 19:13:13.218156 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:13:13.218174 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:13:13.218191 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:13:13.218209 systemd[1]: Reached target cryptsetup.target. Oct 2 19:13:13.218230 systemd[1]: Reached target paths.target. Oct 2 19:13:13.218247 systemd[1]: Reached target slices.target. Oct 2 19:13:13.218264 systemd[1]: Reached target swap.target. Oct 2 19:13:13.218282 systemd[1]: Reached target timers.target. Oct 2 19:13:13.218300 systemd[1]: Listening on iscsid.socket. Oct 2 19:13:13.218318 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:13:13.218335 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:13:13.218353 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:13:13.218375 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:13:13.218393 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:13:13.218411 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:13:13.218429 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:13:13.218446 systemd[1]: Reached target sockets.target. Oct 2 19:13:13.218464 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:13:13.218482 systemd[1]: Finished network-cleanup.service. Oct 2 19:13:13.218500 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:13:13.218517 systemd[1]: Starting systemd-journald.service... Oct 2 19:13:13.218539 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:13:13.218557 systemd[1]: Starting systemd-resolved.service... Oct 2 19:13:13.218574 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:13:13.218592 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:13:13.218609 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:13:13.218627 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:13:13.218645 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:13:13.218663 kernel: audit: type=1130 audit(1696273993.151:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.218685 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:13:13.218703 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:13:13.218720 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:13:13.218737 kernel: audit: type=1130 audit(1696273993.191:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.218754 kernel: Bridge firewalling registered Oct 2 19:13:13.218775 systemd-journald[308]: Journal started Oct 2 19:13:13.218865 systemd-journald[308]: Runtime Journal (/run/log/journal/ec2ac61a3e1f3d0f1d1e8f9fc5a1cf98) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:13:13.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.138172 systemd-modules-load[309]: Inserted module 'overlay' Oct 2 19:13:13.202243 systemd-modules-load[309]: Inserted module 'br_netfilter' Oct 2 19:13:13.224405 systemd[1]: Started systemd-journald.service. Oct 2 19:13:13.243040 kernel: audit: type=1130 audit(1696273993.228:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.243119 kernel: SCSI subsystem initialized Oct 2 19:13:13.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.248351 systemd-resolved[310]: Positive Trust Anchors: Oct 2 19:13:13.248377 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:13:13.248430 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:13:13.272094 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:13:13.272160 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:13:13.275420 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:13:13.286242 systemd-modules-load[309]: Inserted module 'dm_multipath' Oct 2 19:13:13.290320 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:13:13.313355 kernel: audit: type=1130 audit(1696273993.292:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.293556 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:13:13.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.322016 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:13:13.330007 kernel: audit: type=1130 audit(1696273993.319:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.337270 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:13:13.373475 dracut-cmdline[328]: dracut-dracut-053 Oct 2 19:13:13.383918 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:13:13.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.398140 dracut-cmdline[328]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:13:13.424068 kernel: audit: type=1130 audit(1696273993.389:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.644036 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:13:13.658024 kernel: iscsi: registered transport (tcp) Oct 2 19:13:13.684148 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:13:13.684228 kernel: QLogic iSCSI HBA Driver Oct 2 19:13:13.838016 kernel: random: crng init done Oct 2 19:13:13.837986 systemd-resolved[310]: Defaulting to hostname 'linux'. Oct 2 19:13:13.841541 systemd[1]: Started systemd-resolved.service. Oct 2 19:13:13.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.844791 systemd[1]: Reached target nss-lookup.target. Oct 2 19:13:13.855123 kernel: audit: type=1130 audit(1696273993.843:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.904467 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:13:13.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.908535 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:13:13.918454 kernel: audit: type=1130 audit(1696273993.902:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.002035 kernel: raid6: neonx8 gen() 6379 MB/s Oct 2 19:13:14.020015 kernel: raid6: neonx8 xor() 4654 MB/s Oct 2 19:13:14.038027 kernel: raid6: neonx4 gen() 6458 MB/s Oct 2 19:13:14.056015 kernel: raid6: neonx4 xor() 4809 MB/s Oct 2 19:13:14.074025 kernel: raid6: neonx2 gen() 5709 MB/s Oct 2 19:13:14.092022 kernel: raid6: neonx2 xor() 4442 MB/s Oct 2 19:13:14.110024 kernel: raid6: neonx1 gen() 4454 MB/s Oct 2 19:13:14.128022 kernel: raid6: neonx1 xor() 3628 MB/s Oct 2 19:13:14.146022 kernel: raid6: int64x8 gen() 3395 MB/s Oct 2 19:13:14.164022 kernel: raid6: int64x8 xor() 2089 MB/s Oct 2 19:13:14.182022 kernel: raid6: int64x4 gen() 3774 MB/s Oct 2 19:13:14.200023 kernel: raid6: int64x4 xor() 2187 MB/s Oct 2 19:13:14.218023 kernel: raid6: int64x2 gen() 3565 MB/s Oct 2 19:13:14.236023 kernel: raid6: int64x2 xor() 1946 MB/s Oct 2 19:13:14.254023 kernel: raid6: int64x1 gen() 2770 MB/s Oct 2 19:13:14.273578 kernel: raid6: int64x1 xor() 1450 MB/s Oct 2 19:13:14.273608 kernel: raid6: using algorithm neonx4 gen() 6458 MB/s Oct 2 19:13:14.273631 kernel: raid6: .... xor() 4809 MB/s, rmw enabled Oct 2 19:13:14.275424 kernel: raid6: using neon recovery algorithm Oct 2 19:13:14.294032 kernel: xor: measuring software checksum speed Oct 2 19:13:14.297024 kernel: 8regs : 9349 MB/sec Oct 2 19:13:14.299023 kernel: 32regs : 11107 MB/sec Oct 2 19:13:14.303425 kernel: arm64_neon : 9354 MB/sec Oct 2 19:13:14.303458 kernel: xor: using function: 32regs (11107 MB/sec) Oct 2 19:13:14.393041 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:13:14.431681 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:13:14.442307 kernel: audit: type=1130 audit(1696273994.432:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.441000 audit: BPF prog-id=7 op=LOAD Oct 2 19:13:14.441000 audit: BPF prog-id=8 op=LOAD Oct 2 19:13:14.443717 systemd[1]: Starting systemd-udevd.service... Oct 2 19:13:14.480577 systemd-udevd[508]: Using default interface naming scheme 'v252'. Oct 2 19:13:14.491344 systemd[1]: Started systemd-udevd.service. Oct 2 19:13:14.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.499433 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:13:14.563465 dracut-pre-trigger[522]: rd.md=0: removing MD RAID activation Oct 2 19:13:14.673258 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:13:14.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.678031 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:13:14.792451 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:13:14.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.913655 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:13:14.913715 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:13:14.925085 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:13:14.925434 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:13:14.933027 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:11:87:a0:79:2f Oct 2 19:13:14.935082 (udev-worker)[563]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:14.965753 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:13:14.965820 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:13:14.976023 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:13:14.982529 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:13:14.982577 kernel: GPT:9289727 != 16777215 Oct 2 19:13:14.982600 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:13:14.984784 kernel: GPT:9289727 != 16777215 Oct 2 19:13:14.986136 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:13:14.988049 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:15.073021 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (572) Oct 2 19:13:15.147440 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:13:15.242660 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:13:15.247524 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:13:15.259575 systemd[1]: Starting disk-uuid.service... Oct 2 19:13:15.295087 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:13:15.303536 disk-uuid[671]: Primary Header is updated. Oct 2 19:13:15.303536 disk-uuid[671]: Secondary Entries is updated. Oct 2 19:13:15.303536 disk-uuid[671]: Secondary Header is updated. Oct 2 19:13:15.333207 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:13:16.316027 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:16.316185 disk-uuid[672]: The operation has completed successfully. Oct 2 19:13:16.613669 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:13:16.616149 systemd[1]: Finished disk-uuid.service. Oct 2 19:13:16.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.620817 systemd[1]: Starting verity-setup.service... Oct 2 19:13:16.675038 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:13:16.775551 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:13:16.780546 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:13:16.795572 systemd[1]: Finished verity-setup.service. Oct 2 19:13:16.807963 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:13:16.808066 kernel: audit: type=1130 audit(1696273996.796:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.885054 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:13:16.886365 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:13:16.889435 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:13:16.891198 systemd[1]: Starting ignition-setup.service... Oct 2 19:13:16.903844 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:13:16.935065 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:16.935138 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:16.935163 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:16.960633 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:16.993367 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:13:17.033390 systemd[1]: Finished ignition-setup.service. Oct 2 19:13:17.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.045555 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:13:17.055042 kernel: audit: type=1130 audit(1696273997.034:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.260880 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:13:17.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.271000 audit: BPF prog-id=9 op=LOAD Oct 2 19:13:17.274759 kernel: audit: type=1130 audit(1696273997.260:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.274822 kernel: audit: type=1334 audit(1696273997.271:21): prog-id=9 op=LOAD Oct 2 19:13:17.273115 systemd[1]: Starting systemd-networkd.service... Oct 2 19:13:17.336036 systemd-networkd[1112]: lo: Link UP Oct 2 19:13:17.337813 systemd-networkd[1112]: lo: Gained carrier Oct 2 19:13:17.340253 systemd-networkd[1112]: Enumeration completed Oct 2 19:13:17.340410 systemd[1]: Started systemd-networkd.service. Oct 2 19:13:17.342356 systemd[1]: Reached target network.target. Oct 2 19:13:17.348163 systemd-networkd[1112]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:13:17.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.348868 systemd[1]: Starting iscsiuio.service... Oct 2 19:13:17.364973 kernel: audit: type=1130 audit(1696273997.341:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.366325 systemd-networkd[1112]: eth0: Link UP Oct 2 19:13:17.366334 systemd-networkd[1112]: eth0: Gained carrier Oct 2 19:13:17.382063 systemd[1]: Started iscsiuio.service. Oct 2 19:13:17.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.386418 systemd[1]: Starting iscsid.service... Oct 2 19:13:17.394980 systemd-networkd[1112]: eth0: DHCPv4 address 172.31.22.247/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:13:17.402328 kernel: audit: type=1130 audit(1696273997.384:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.413198 iscsid[1117]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:13:17.427335 iscsid[1117]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:13:17.427335 iscsid[1117]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:13:17.427335 iscsid[1117]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:13:17.427335 iscsid[1117]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:13:17.427335 iscsid[1117]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:13:17.437823 systemd[1]: Started iscsid.service. Oct 2 19:13:17.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.450641 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:13:17.463476 kernel: audit: type=1130 audit(1696273997.448:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.494753 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:13:17.545325 kernel: audit: type=1130 audit(1696273997.498:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.500384 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:13:17.527271 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:13:17.529105 systemd[1]: Reached target remote-fs.target. Oct 2 19:13:17.548203 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:13:17.583187 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:13:17.594563 kernel: audit: type=1130 audit(1696273997.584:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.705214 ignition[1034]: Ignition 2.14.0 Oct 2 19:13:17.705243 ignition[1034]: Stage: fetch-offline Oct 2 19:13:17.705666 ignition[1034]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.705808 ignition[1034]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.724278 ignition[1034]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.727121 ignition[1034]: Ignition finished successfully Oct 2 19:13:17.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.730322 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:13:17.733670 systemd[1]: Starting ignition-fetch.service... Oct 2 19:13:17.754039 kernel: audit: type=1130 audit(1696273997.731:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.772863 ignition[1136]: Ignition 2.14.0 Oct 2 19:13:17.772892 ignition[1136]: Stage: fetch Oct 2 19:13:17.773280 ignition[1136]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.773334 ignition[1136]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.787447 ignition[1136]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.790077 ignition[1136]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.806411 ignition[1136]: INFO : PUT result: OK Oct 2 19:13:17.809738 ignition[1136]: DEBUG : parsed url from cmdline: "" Oct 2 19:13:17.811548 ignition[1136]: INFO : no config URL provided Oct 2 19:13:17.811548 ignition[1136]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:13:17.811548 ignition[1136]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:13:17.811548 ignition[1136]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.820491 ignition[1136]: INFO : PUT result: OK Oct 2 19:13:17.822197 ignition[1136]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:13:17.825212 ignition[1136]: INFO : GET result: OK Oct 2 19:13:17.834561 ignition[1136]: DEBUG : parsing config with SHA512: d741c0f7a8d3beddbde864400e86cc45965e41a6345eb7f7ec5fc1867d139c950842cbfa38b2541e4af8293920dd8aa725f7befdde8fb21bf21be542e0bca024 Oct 2 19:13:17.868804 unknown[1136]: fetched base config from "system" Oct 2 19:13:17.868833 unknown[1136]: fetched base config from "system" Oct 2 19:13:17.868849 unknown[1136]: fetched user config from "aws" Oct 2 19:13:17.875852 ignition[1136]: fetch: fetch complete Oct 2 19:13:17.875884 ignition[1136]: fetch: fetch passed Oct 2 19:13:17.876067 ignition[1136]: Ignition finished successfully Oct 2 19:13:17.882741 systemd[1]: Finished ignition-fetch.service. Oct 2 19:13:17.885897 systemd[1]: Starting ignition-kargs.service... Oct 2 19:13:17.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.923892 ignition[1142]: Ignition 2.14.0 Oct 2 19:13:17.923921 ignition[1142]: Stage: kargs Oct 2 19:13:17.924293 ignition[1142]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.924353 ignition[1142]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.938933 ignition[1142]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.941539 ignition[1142]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.945193 ignition[1142]: INFO : PUT result: OK Oct 2 19:13:17.952787 ignition[1142]: kargs: kargs passed Oct 2 19:13:17.952915 ignition[1142]: Ignition finished successfully Oct 2 19:13:17.956508 systemd[1]: Finished ignition-kargs.service. Oct 2 19:13:17.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.960967 systemd[1]: Starting ignition-disks.service... Oct 2 19:13:17.990690 ignition[1148]: Ignition 2.14.0 Oct 2 19:13:17.990720 ignition[1148]: Stage: disks Oct 2 19:13:17.991096 ignition[1148]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.991155 ignition[1148]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.007755 ignition[1148]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.010697 ignition[1148]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.013943 ignition[1148]: INFO : PUT result: OK Oct 2 19:13:18.018973 ignition[1148]: disks: disks passed Oct 2 19:13:18.020583 ignition[1148]: Ignition finished successfully Oct 2 19:13:18.023806 systemd[1]: Finished ignition-disks.service. Oct 2 19:13:18.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.026854 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:13:18.029481 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:13:18.031242 systemd[1]: Reached target local-fs.target. Oct 2 19:13:18.032918 systemd[1]: Reached target sysinit.target. Oct 2 19:13:18.034577 systemd[1]: Reached target basic.target. Oct 2 19:13:18.037602 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:13:18.102349 systemd-fsck[1156]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:13:18.111939 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:13:18.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.117503 systemd[1]: Mounting sysroot.mount... Oct 2 19:13:18.146049 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:13:18.150110 systemd[1]: Mounted sysroot.mount. Oct 2 19:13:18.152978 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:13:18.167245 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:13:18.181130 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:13:18.181216 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:13:18.181271 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:13:18.199046 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:13:18.217409 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:13:18.227682 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:13:18.247049 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1173) Oct 2 19:13:18.255466 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:18.255533 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:18.257875 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:18.266017 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:18.266203 initrd-setup-root[1178]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:13:18.272887 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:13:18.303273 initrd-setup-root[1204]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:13:18.322647 initrd-setup-root[1212]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:13:18.341698 initrd-setup-root[1220]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:13:18.558351 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:13:18.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.562987 systemd[1]: Starting ignition-mount.service... Oct 2 19:13:18.582905 systemd[1]: Starting sysroot-boot.service... Oct 2 19:13:18.598197 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:13:18.598368 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:13:18.637403 systemd[1]: Finished sysroot-boot.service. Oct 2 19:13:18.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.651469 ignition[1239]: INFO : Ignition 2.14.0 Oct 2 19:13:18.651469 ignition[1239]: INFO : Stage: mount Oct 2 19:13:18.654883 ignition[1239]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:18.654883 ignition[1239]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.671854 ignition[1239]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.674490 ignition[1239]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.677956 ignition[1239]: INFO : PUT result: OK Oct 2 19:13:18.682942 ignition[1239]: INFO : mount: mount passed Oct 2 19:13:18.684938 ignition[1239]: INFO : Ignition finished successfully Oct 2 19:13:18.687901 systemd[1]: Finished ignition-mount.service. Oct 2 19:13:18.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.692432 systemd[1]: Starting ignition-files.service... Oct 2 19:13:18.715234 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:13:18.739291 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1248) Oct 2 19:13:18.744875 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:18.744911 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:18.747113 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:18.754010 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:18.759309 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:13:18.792394 ignition[1267]: INFO : Ignition 2.14.0 Oct 2 19:13:18.792394 ignition[1267]: INFO : Stage: files Oct 2 19:13:18.795961 ignition[1267]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:18.795961 ignition[1267]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.812257 ignition[1267]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.815107 ignition[1267]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.818686 ignition[1267]: INFO : PUT result: OK Oct 2 19:13:18.824129 ignition[1267]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:13:18.827569 ignition[1267]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:13:18.827569 ignition[1267]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:13:18.865827 ignition[1267]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:13:18.868724 ignition[1267]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:13:18.872592 unknown[1267]: wrote ssh authorized keys file for user: core Oct 2 19:13:18.874856 ignition[1267]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:13:18.878705 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:13:18.882694 ignition[1267]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 19:13:19.266257 ignition[1267]: INFO : GET result: OK Oct 2 19:13:19.384144 systemd-networkd[1112]: eth0: Gained IPv6LL Oct 2 19:13:19.715380 ignition[1267]: DEBUG : file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 19:13:19.720135 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:13:19.720135 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:13:19.720135 ignition[1267]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:13:19.957589 ignition[1267]: INFO : GET result: OK Oct 2 19:13:20.233652 ignition[1267]: DEBUG : file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 19:13:20.238440 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:13:20.238440 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:13:20.246077 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:13:20.249669 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:13:20.253325 ignition[1267]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:20.265064 ignition[1267]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem381912338" Oct 2 19:13:20.273089 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1269) Oct 2 19:13:20.273141 ignition[1267]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem381912338": device or resource busy Oct 2 19:13:20.273141 ignition[1267]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem381912338", trying btrfs: device or resource busy Oct 2 19:13:20.273141 ignition[1267]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem381912338" Oct 2 19:13:20.286652 ignition[1267]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem381912338" Oct 2 19:13:20.294972 ignition[1267]: INFO : op(3): [started] unmounting "/mnt/oem381912338" Oct 2 19:13:20.310072 ignition[1267]: INFO : op(3): [finished] unmounting "/mnt/oem381912338" Oct 2 19:13:20.312498 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:13:20.312498 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:13:20.312498 ignition[1267]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:13:20.324076 systemd[1]: mnt-oem381912338.mount: Deactivated successfully. Oct 2 19:13:20.390773 ignition[1267]: INFO : GET result: OK Oct 2 19:13:21.003205 ignition[1267]: DEBUG : file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 19:13:21.008616 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:13:21.008616 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:13:21.008616 ignition[1267]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:13:21.060767 ignition[1267]: INFO : GET result: OK Oct 2 19:13:22.956868 ignition[1267]: DEBUG : file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 19:13:22.962055 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:13:22.962055 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:13:22.962055 ignition[1267]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:13:23.016359 ignition[1267]: INFO : GET result: OK Oct 2 19:13:23.885710 ignition[1267]: DEBUG : file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 19:13:23.890383 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:13:23.890383 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:13:23.897389 ignition[1267]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:13:24.129270 ignition[1267]: INFO : GET result: OK Oct 2 19:13:24.272048 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:13:24.275701 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:13:24.279508 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:13:24.283048 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:13:24.286769 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:13:24.293210 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:13:24.297095 ignition[1267]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:24.308560 ignition[1267]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2049033444" Oct 2 19:13:24.311497 ignition[1267]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2049033444": device or resource busy Oct 2 19:13:24.311497 ignition[1267]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2049033444", trying btrfs: device or resource busy Oct 2 19:13:24.311497 ignition[1267]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2049033444" Oct 2 19:13:24.321195 ignition[1267]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2049033444" Oct 2 19:13:24.324755 ignition[1267]: INFO : op(6): [started] unmounting "/mnt/oem2049033444" Oct 2 19:13:24.327601 ignition[1267]: INFO : op(6): [finished] unmounting "/mnt/oem2049033444" Oct 2 19:13:24.327601 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:13:24.327601 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:13:24.327601 ignition[1267]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:24.346777 systemd[1]: mnt-oem2049033444.mount: Deactivated successfully. Oct 2 19:13:24.367946 ignition[1267]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem16677889" Oct 2 19:13:24.374088 ignition[1267]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem16677889": device or resource busy Oct 2 19:13:24.374088 ignition[1267]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem16677889", trying btrfs: device or resource busy Oct 2 19:13:24.374088 ignition[1267]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem16677889" Oct 2 19:13:24.384031 ignition[1267]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem16677889" Oct 2 19:13:24.384031 ignition[1267]: INFO : op(9): [started] unmounting "/mnt/oem16677889" Oct 2 19:13:24.389492 ignition[1267]: INFO : op(9): [finished] unmounting "/mnt/oem16677889" Oct 2 19:13:24.389492 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:13:24.389492 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:13:24.389492 ignition[1267]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:24.415096 ignition[1267]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2699012127" Oct 2 19:13:24.418077 ignition[1267]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2699012127": device or resource busy Oct 2 19:13:24.418077 ignition[1267]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2699012127", trying btrfs: device or resource busy Oct 2 19:13:24.418077 ignition[1267]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2699012127" Oct 2 19:13:24.438684 ignition[1267]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2699012127" Oct 2 19:13:24.441622 ignition[1267]: INFO : op(c): [started] unmounting "/mnt/oem2699012127" Oct 2 19:13:24.441622 ignition[1267]: INFO : op(c): [finished] unmounting "/mnt/oem2699012127" Oct 2 19:13:24.448114 ignition[1267]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:13:24.444541 systemd[1]: mnt-oem2699012127.mount: Deactivated successfully. Oct 2 19:13:24.453979 ignition[1267]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:13:24.456899 ignition[1267]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:13:24.456899 ignition[1267]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:13:24.456899 ignition[1267]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:13:24.466787 ignition[1267]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:13:24.466787 ignition[1267]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:13:24.466787 ignition[1267]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:13:24.466787 ignition[1267]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:13:24.466787 ignition[1267]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:13:24.481122 ignition[1267]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:13:24.485953 ignition[1267]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:13:24.485953 ignition[1267]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:13:24.485953 ignition[1267]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:13:24.485953 ignition[1267]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:13:24.485953 ignition[1267]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:13:24.485953 ignition[1267]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:13:24.506361 ignition[1267]: INFO : files: op(18): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:13:24.506361 ignition[1267]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:13:24.506361 ignition[1267]: INFO : files: op(19): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:13:24.515520 ignition[1267]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:13:24.515520 ignition[1267]: INFO : files: op(1a): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:13:24.515520 ignition[1267]: INFO : files: op(1a): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:13:24.515520 ignition[1267]: INFO : files: op(1b): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:13:24.527986 ignition[1267]: INFO : files: op(1b): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:13:24.531109 ignition[1267]: INFO : files: op(1c): [started] setting preset to enabled for "nvidia.service" Oct 2 19:13:24.531109 ignition[1267]: INFO : files: op(1c): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:13:24.544202 ignition[1267]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:13:24.548076 ignition[1267]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:13:24.551651 ignition[1267]: INFO : files: files passed Oct 2 19:13:24.553440 ignition[1267]: INFO : Ignition finished successfully Oct 2 19:13:24.557191 systemd[1]: Finished ignition-files.service. Oct 2 19:13:24.572942 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:13:24.572979 kernel: audit: type=1130 audit(1696274004.556:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.579342 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:13:24.581403 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:13:24.584325 systemd[1]: Starting ignition-quench.service... Oct 2 19:13:24.612427 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:13:24.613089 systemd[1]: Finished ignition-quench.service. Oct 2 19:13:24.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.642903 kernel: audit: type=1130 audit(1696274004.615:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.642957 kernel: audit: type=1131 audit(1696274004.615:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.650011 initrd-setup-root-after-ignition[1292]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:13:24.655477 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:13:24.657743 systemd[1]: Reached target ignition-complete.target. Oct 2 19:13:24.660818 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:13:24.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.683030 kernel: audit: type=1130 audit(1696274004.656:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.711309 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:13:24.713385 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:13:24.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.717901 systemd[1]: Reached target initrd-fs.target. Oct 2 19:13:24.736545 kernel: audit: type=1130 audit(1696274004.716:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.736582 kernel: audit: type=1131 audit(1696274004.716:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.736810 systemd[1]: Reached target initrd.target. Oct 2 19:13:24.739858 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:13:24.743970 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:13:24.790178 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:13:24.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.794823 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:13:24.804561 kernel: audit: type=1130 audit(1696274004.792:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.823775 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:13:24.827340 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:13:24.831134 systemd[1]: Stopped target timers.target. Oct 2 19:13:24.834354 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:13:24.834690 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:13:24.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.847881 systemd[1]: Stopped target initrd.target. Oct 2 19:13:24.849380 kernel: audit: type=1131 audit(1696274004.838:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.851196 systemd[1]: Stopped target basic.target. Oct 2 19:13:24.854379 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:13:24.858163 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:13:24.861803 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:13:24.865544 systemd[1]: Stopped target remote-fs.target. Oct 2 19:13:24.868946 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:13:24.872564 systemd[1]: Stopped target sysinit.target. Oct 2 19:13:24.875889 systemd[1]: Stopped target local-fs.target. Oct 2 19:13:24.879292 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:13:24.882725 systemd[1]: Stopped target swap.target. Oct 2 19:13:24.885824 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:13:24.886166 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:13:24.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.891216 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:13:24.932187 kernel: audit: type=1131 audit(1696274004.890:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.932228 kernel: audit: type=1131 audit(1696274004.901:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.900220 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:13:24.900426 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:13:24.902396 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:13:24.902604 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:13:24.912128 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:13:24.912346 systemd[1]: Stopped ignition-files.service. Oct 2 19:13:24.929661 systemd[1]: Stopping ignition-mount.service... Oct 2 19:13:24.951415 systemd[1]: Stopping iscsiuio.service... Oct 2 19:13:24.952913 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:13:24.955755 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:13:24.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.961973 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:13:24.965939 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:13:24.966489 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:13:24.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.972249 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:13:24.972671 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:13:24.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.983368 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:13:24.985565 systemd[1]: Stopped iscsiuio.service. Oct 2 19:13:24.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.993365 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:13:24.995742 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:13:24.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:24.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.017984 ignition[1305]: INFO : Ignition 2.14.0 Oct 2 19:13:25.020044 ignition[1305]: INFO : Stage: umount Oct 2 19:13:25.021699 ignition[1305]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:25.024216 ignition[1305]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:25.037506 ignition[1305]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:25.040700 ignition[1305]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:25.043837 ignition[1305]: INFO : PUT result: OK Oct 2 19:13:25.050531 ignition[1305]: INFO : umount: umount passed Oct 2 19:13:25.052469 ignition[1305]: INFO : Ignition finished successfully Oct 2 19:13:25.056599 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:13:25.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.056790 systemd[1]: Stopped ignition-mount.service. Oct 2 19:13:25.058701 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:13:25.058788 systemd[1]: Stopped ignition-disks.service. Oct 2 19:13:25.060970 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:13:25.062044 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:13:25.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.072616 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:13:25.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.072701 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:13:25.074448 systemd[1]: Stopped target network.target. Oct 2 19:13:25.076080 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:13:25.076162 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:13:25.078079 systemd[1]: Stopped target paths.target. Oct 2 19:13:25.090087 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:13:25.094076 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:13:25.096055 systemd[1]: Stopped target slices.target. Oct 2 19:13:25.097613 systemd[1]: Stopped target sockets.target. Oct 2 19:13:25.100845 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:13:25.100903 systemd[1]: Closed iscsid.socket. Oct 2 19:13:25.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.103802 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:13:25.103874 systemd[1]: Closed iscsiuio.socket. Oct 2 19:13:25.106813 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:13:25.106897 systemd[1]: Stopped ignition-setup.service. Oct 2 19:13:25.110696 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:13:25.112452 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:13:25.115720 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:13:25.115910 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:13:25.116057 systemd-networkd[1112]: eth0: DHCPv6 lease lost Oct 2 19:13:25.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.133269 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:13:25.137629 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:13:25.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.141576 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:13:25.143751 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:13:25.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.147639 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:13:25.147730 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:13:25.150000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:13:25.150000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:13:25.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.151279 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:13:25.151372 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:13:25.155870 systemd[1]: Stopping network-cleanup.service... Oct 2 19:13:25.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.159454 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:13:25.159598 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:13:25.165837 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:13:25.165951 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:13:25.167935 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:13:25.168054 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:13:25.185925 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:13:25.190101 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:13:25.192282 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:13:25.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.196835 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:13:25.196953 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:13:25.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.207379 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:13:25.207461 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:13:25.210918 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:13:25.211020 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:13:25.212787 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:13:25.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.212865 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:13:25.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.214580 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:13:25.214657 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:13:25.217701 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:13:25.219394 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:13:25.219526 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:13:25.227866 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:13:25.246962 systemd[1]: Stopped network-cleanup.service. Oct 2 19:13:25.250767 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:13:25.261264 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:13:25.264864 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:13:25.268198 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:13:25.295371 systemd[1]: Switching root. Oct 2 19:13:25.327154 iscsid[1117]: iscsid shutting down. Oct 2 19:13:25.328802 systemd-journald[308]: Received SIGTERM from PID 1 (systemd). Oct 2 19:13:25.328875 systemd-journald[308]: Journal stopped Oct 2 19:13:31.380554 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:13:31.381148 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:13:31.381185 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:13:31.381283 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:13:31.381318 kernel: SELinux: policy capability open_perms=1 Oct 2 19:13:31.381351 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:13:31.381383 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:13:31.381414 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:13:31.381446 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:13:31.381482 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:13:31.381510 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:13:31.381545 systemd[1]: Successfully loaded SELinux policy in 85.613ms. Oct 2 19:13:31.381824 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 23.237ms. Oct 2 19:13:31.381864 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:13:31.381898 systemd[1]: Detected virtualization amazon. Oct 2 19:13:31.381929 systemd[1]: Detected architecture arm64. Oct 2 19:13:31.381965 systemd[1]: Detected first boot. Oct 2 19:13:31.401088 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:13:31.401145 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:13:31.401183 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:13:31.401221 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:13:31.401256 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:13:31.401357 kernel: kauditd_printk_skb: 38 callbacks suppressed Oct 2 19:13:31.401392 kernel: audit: type=1334 audit(1696274010.868:83): prog-id=12 op=LOAD Oct 2 19:13:31.401431 kernel: audit: type=1334 audit(1696274010.868:84): prog-id=3 op=UNLOAD Oct 2 19:13:31.401463 kernel: audit: type=1334 audit(1696274010.870:85): prog-id=13 op=LOAD Oct 2 19:13:31.401494 kernel: audit: type=1334 audit(1696274010.872:86): prog-id=14 op=LOAD Oct 2 19:13:31.401523 kernel: audit: type=1334 audit(1696274010.872:87): prog-id=4 op=UNLOAD Oct 2 19:13:31.401553 kernel: audit: type=1334 audit(1696274010.872:88): prog-id=5 op=UNLOAD Oct 2 19:13:31.401581 kernel: audit: type=1334 audit(1696274010.875:89): prog-id=15 op=LOAD Oct 2 19:13:31.401609 kernel: audit: type=1334 audit(1696274010.875:90): prog-id=12 op=UNLOAD Oct 2 19:13:31.401641 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:13:31.401672 kernel: audit: type=1334 audit(1696274010.878:91): prog-id=16 op=LOAD Oct 2 19:13:31.401706 systemd[1]: Stopped iscsid.service. Oct 2 19:13:31.401735 kernel: audit: type=1334 audit(1696274010.880:92): prog-id=17 op=LOAD Oct 2 19:13:31.401764 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:13:31.401798 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:13:31.401828 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:13:31.401861 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:13:31.401892 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:13:31.401925 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:13:31.401961 systemd[1]: Created slice system-getty.slice. Oct 2 19:13:31.402024 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:13:31.402061 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:13:31.402093 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:13:31.402125 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:13:31.402155 systemd[1]: Created slice user.slice. Oct 2 19:13:31.402185 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:13:31.402214 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:13:31.402247 systemd[1]: Set up automount boot.automount. Oct 2 19:13:31.402281 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:13:31.402314 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:13:31.402346 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:13:31.402391 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:13:31.402429 systemd[1]: Reached target integritysetup.target. Oct 2 19:13:31.402459 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:13:31.402493 systemd[1]: Reached target remote-fs.target. Oct 2 19:13:31.402522 systemd[1]: Reached target slices.target. Oct 2 19:13:31.402553 systemd[1]: Reached target swap.target. Oct 2 19:13:31.402588 systemd[1]: Reached target torcx.target. Oct 2 19:13:31.402620 systemd[1]: Reached target veritysetup.target. Oct 2 19:13:31.402650 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:13:31.402681 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:13:31.402712 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:13:31.402743 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:13:31.402773 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:13:31.402802 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:13:31.402833 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:13:31.402867 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:13:31.402897 systemd[1]: Mounting media.mount... Oct 2 19:13:31.402928 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:13:31.402962 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:13:31.403018 systemd[1]: Mounting tmp.mount... Oct 2 19:13:31.403053 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:13:31.403084 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:13:31.403113 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:13:31.403144 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:13:31.403179 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:13:31.403214 systemd[1]: Starting modprobe@drm.service... Oct 2 19:13:31.403280 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:13:31.403317 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:13:31.403347 systemd[1]: Starting modprobe@loop.service... Oct 2 19:13:31.403380 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:13:31.403411 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:13:31.403451 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:13:31.403491 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:13:31.403526 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:13:31.403560 systemd[1]: Stopped systemd-journald.service. Oct 2 19:13:31.403593 systemd[1]: Starting systemd-journald.service... Oct 2 19:13:31.403628 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:13:31.403661 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:13:31.403691 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:13:31.403723 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:13:31.403754 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:13:31.403784 systemd[1]: Stopped verity-setup.service. Oct 2 19:13:31.403818 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:13:31.403849 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:13:31.403878 systemd[1]: Mounted media.mount. Oct 2 19:13:31.403976 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:13:31.404047 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:13:31.404079 systemd[1]: Mounted tmp.mount. Oct 2 19:13:31.404112 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:13:31.404144 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:13:31.404176 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:13:31.404211 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:13:31.404241 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:13:31.404270 kernel: loop: module loaded Oct 2 19:13:31.404299 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:13:31.404328 systemd[1]: Finished modprobe@drm.service. Oct 2 19:13:31.404361 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:13:31.404393 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:13:31.404422 systemd[1]: Finished modprobe@loop.service. Oct 2 19:13:31.404454 systemd[1]: Reached target network-pre.target. Oct 2 19:13:31.404486 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:13:31.404523 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:13:31.404552 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:13:31.404581 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:13:31.404613 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:13:31.404648 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:13:31.404679 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:13:31.404711 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:13:31.404750 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:13:31.404787 systemd-journald[1416]: Journal started Oct 2 19:13:31.404957 systemd-journald[1416]: Runtime Journal (/run/log/journal/ec2ac61a3e1f3d0f1d1e8f9fc5a1cf98) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:13:31.416934 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:13:26.113000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:13:26.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:13:26.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:13:26.310000 audit: BPF prog-id=10 op=LOAD Oct 2 19:13:26.310000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:13:26.310000 audit: BPF prog-id=11 op=LOAD Oct 2 19:13:26.310000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:13:30.868000 audit: BPF prog-id=12 op=LOAD Oct 2 19:13:30.868000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:13:30.870000 audit: BPF prog-id=13 op=LOAD Oct 2 19:13:30.872000 audit: BPF prog-id=14 op=LOAD Oct 2 19:13:30.872000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:13:30.872000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:13:30.875000 audit: BPF prog-id=15 op=LOAD Oct 2 19:13:30.875000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:13:30.878000 audit: BPF prog-id=16 op=LOAD Oct 2 19:13:30.880000 audit: BPF prog-id=17 op=LOAD Oct 2 19:13:30.880000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:13:30.880000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:13:30.883000 audit: BPF prog-id=18 op=LOAD Oct 2 19:13:30.883000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:13:30.886000 audit: BPF prog-id=19 op=LOAD Oct 2 19:13:30.888000 audit: BPF prog-id=20 op=LOAD Oct 2 19:13:30.888000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:13:30.888000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:13:30.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:30.901000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:13:30.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:30.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:30.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.428072 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:13:31.428128 systemd[1]: Started systemd-journald.service. Oct 2 19:13:31.428168 kernel: fuse: init (API version 7.34) Oct 2 19:13:31.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.196000 audit: BPF prog-id=21 op=LOAD Oct 2 19:13:31.197000 audit: BPF prog-id=22 op=LOAD Oct 2 19:13:31.197000 audit: BPF prog-id=23 op=LOAD Oct 2 19:13:31.197000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:13:31.197000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:13:31.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.334000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.370000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:13:31.370000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffffea80a0 a2=4000 a3=1 items=0 ppid=1 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:31.370000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:13:31.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.503885 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:13:30.866595 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:13:26.516054 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:13:30.891244 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:13:26.516108 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:13:31.430278 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:13:26.516174 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:13:31.434386 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:13:26.516200 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:13:31.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.516265 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:13:31.446542 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:13:26.516297 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:13:31.446891 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:13:26.516708 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:13:31.451290 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:13:26.516787 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:13:26.516822 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:13:26.517660 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:13:26.517738 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:13:26.517783 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:13:26.517822 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:13:26.517867 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:13:26.517905 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:26Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:13:31.469114 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:13:29.955291 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:29Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:29.955822 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:29Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:31.489826 systemd-journald[1416]: Time spent on flushing to /var/log/journal/ec2ac61a3e1f3d0f1d1e8f9fc5a1cf98 is 55.314ms for 1147 entries. Oct 2 19:13:31.489826 systemd-journald[1416]: System Journal (/var/log/journal/ec2ac61a3e1f3d0f1d1e8f9fc5a1cf98) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:13:31.583275 systemd-journald[1416]: Received client request to flush runtime journal. Oct 2 19:13:31.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:29.956086 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:29Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:31.509546 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:13:29.956569 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:29Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:31.511700 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:13:31.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:29.956677 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:29Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:13:31.544897 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:13:29.956814 /usr/lib/systemd/system-generators/torcx-generator[1338]: time="2023-10-02T19:13:29Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:13:31.585746 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:13:31.630543 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:13:31.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.634636 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:13:31.656442 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:13:31.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:31.660637 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:13:31.696752 udevadm[1457]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:13:31.788869 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:13:31.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.431570 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:13:32.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.436000 audit: BPF prog-id=24 op=LOAD Oct 2 19:13:32.436000 audit: BPF prog-id=25 op=LOAD Oct 2 19:13:32.436000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:13:32.436000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:13:32.438650 systemd[1]: Starting systemd-udevd.service... Oct 2 19:13:32.484159 systemd-udevd[1458]: Using default interface naming scheme 'v252'. Oct 2 19:13:32.555377 systemd[1]: Started systemd-udevd.service. Oct 2 19:13:32.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.558000 audit: BPF prog-id=26 op=LOAD Oct 2 19:13:32.562557 systemd[1]: Starting systemd-networkd.service... Oct 2 19:13:32.571000 audit: BPF prog-id=27 op=LOAD Oct 2 19:13:32.571000 audit: BPF prog-id=28 op=LOAD Oct 2 19:13:32.571000 audit: BPF prog-id=29 op=LOAD Oct 2 19:13:32.573597 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:13:32.704914 systemd[1]: Started systemd-userdbd.service. Oct 2 19:13:32.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.741918 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:13:32.759326 (udev-worker)[1462]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:32.910348 systemd-networkd[1464]: lo: Link UP Oct 2 19:13:32.910374 systemd-networkd[1464]: lo: Gained carrier Oct 2 19:13:32.911295 systemd-networkd[1464]: Enumeration completed Oct 2 19:13:32.911481 systemd[1]: Started systemd-networkd.service. Oct 2 19:13:32.911567 systemd-networkd[1464]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:13:32.918285 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:13:32.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.918007 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:13:32.925532 systemd-networkd[1464]: eth0: Link UP Oct 2 19:13:32.925827 systemd-networkd[1464]: eth0: Gained carrier Oct 2 19:13:32.937293 systemd-networkd[1464]: eth0: DHCPv4 address 172.31.22.247/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:13:33.024037 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1462) Oct 2 19:13:33.229556 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:13:33.232538 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:13:33.236773 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:13:33.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.289918 lvm[1577]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:13:33.323916 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:13:33.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.326144 systemd[1]: Reached target cryptsetup.target. Oct 2 19:13:33.330087 systemd[1]: Starting lvm2-activation.service... Oct 2 19:13:33.344911 lvm[1578]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:13:33.383079 systemd[1]: Finished lvm2-activation.service. Oct 2 19:13:33.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.385291 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:13:33.387327 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:13:33.387538 systemd[1]: Reached target local-fs.target. Oct 2 19:13:33.389434 systemd[1]: Reached target machines.target. Oct 2 19:13:33.394227 systemd[1]: Starting ldconfig.service... Oct 2 19:13:33.396712 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:13:33.397088 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:33.399646 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:13:33.404463 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:13:33.409006 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:13:33.411083 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:13:33.411226 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:13:33.413617 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:13:33.438139 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1580 (bootctl) Oct 2 19:13:33.440344 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:13:33.505878 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:13:33.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.511636 systemd-tmpfiles[1583]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:13:33.540827 systemd-tmpfiles[1583]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:13:33.561552 systemd-tmpfiles[1583]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:13:33.594502 systemd-fsck[1589]: fsck.fat 4.2 (2021-01-31) Oct 2 19:13:33.594502 systemd-fsck[1589]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:13:33.603555 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:13:33.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.608349 systemd[1]: Mounting boot.mount... Oct 2 19:13:33.646348 systemd[1]: Mounted boot.mount. Oct 2 19:13:33.677496 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:13:33.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.871343 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:13:33.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.875796 systemd[1]: Starting audit-rules.service... Oct 2 19:13:33.879919 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:13:33.890364 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:13:33.893000 audit: BPF prog-id=30 op=LOAD Oct 2 19:13:33.895692 systemd[1]: Starting systemd-resolved.service... Oct 2 19:13:33.899000 audit: BPF prog-id=31 op=LOAD Oct 2 19:13:33.903325 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:13:33.909381 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:13:33.944069 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:13:33.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.946341 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:13:33.954000 audit[1608]: SYSTEM_BOOT pid=1608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.968440 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:13:33.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.026050 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:13:34.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.099438 systemd-resolved[1606]: Positive Trust Anchors: Oct 2 19:13:34.099949 systemd-resolved[1606]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:13:34.100159 systemd-resolved[1606]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:13:34.117000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:13:34.117000 audit[1623]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffccf3dec0 a2=420 a3=0 items=0 ppid=1603 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:34.117000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:13:34.119383 augenrules[1623]: No rules Oct 2 19:13:34.120600 systemd[1]: Finished audit-rules.service. Oct 2 19:13:34.128540 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:13:34.131271 systemd[1]: Reached target time-set.target. Oct 2 19:13:34.151061 systemd-resolved[1606]: Defaulting to hostname 'linux'. Oct 2 19:13:34.154888 systemd[1]: Started systemd-resolved.service. Oct 2 19:13:34.156789 systemd[1]: Reached target network.target. Oct 2 19:13:34.158502 systemd[1]: Reached target nss-lookup.target. Oct 2 19:13:34.183241 systemd-timesyncd[1607]: Contacted time server 152.70.159.102:123 (0.flatcar.pool.ntp.org). Oct 2 19:13:34.183465 systemd-timesyncd[1607]: Initial clock synchronization to Mon 2023-10-02 19:13:34.206417 UTC. Oct 2 19:13:34.424191 systemd-networkd[1464]: eth0: Gained IPv6LL Oct 2 19:13:34.430459 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:13:34.432878 systemd[1]: Reached target network-online.target. Oct 2 19:13:35.454351 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:13:35.456077 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:13:35.486373 ldconfig[1579]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:13:35.494547 systemd[1]: Finished ldconfig.service. Oct 2 19:13:35.498530 systemd[1]: Starting systemd-update-done.service... Oct 2 19:13:35.520814 systemd[1]: Finished systemd-update-done.service. Oct 2 19:13:35.523114 systemd[1]: Reached target sysinit.target. Oct 2 19:13:35.525238 systemd[1]: Started motdgen.path. Oct 2 19:13:35.526774 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:13:35.529511 systemd[1]: Started logrotate.timer. Oct 2 19:13:35.531308 systemd[1]: Started mdadm.timer. Oct 2 19:13:35.532747 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:13:35.534530 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:13:35.534591 systemd[1]: Reached target paths.target. Oct 2 19:13:35.536102 systemd[1]: Reached target timers.target. Oct 2 19:13:35.538510 systemd[1]: Listening on dbus.socket. Oct 2 19:13:35.542251 systemd[1]: Starting docker.socket... Oct 2 19:13:35.551048 systemd[1]: Listening on sshd.socket. Oct 2 19:13:35.553110 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:35.554151 systemd[1]: Listening on docker.socket. Oct 2 19:13:35.556179 systemd[1]: Reached target sockets.target. Oct 2 19:13:35.558099 systemd[1]: Reached target basic.target. Oct 2 19:13:35.559922 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:13:35.560144 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:13:35.574111 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:13:35.578908 systemd[1]: Starting containerd.service... Oct 2 19:13:35.586021 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:13:35.595339 systemd[1]: Starting dbus.service... Oct 2 19:13:35.605416 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:13:35.609681 systemd[1]: Starting extend-filesystems.service... Oct 2 19:13:35.611829 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:13:35.619573 systemd[1]: Starting motdgen.service... Oct 2 19:13:35.624337 systemd[1]: Started nvidia.service. Oct 2 19:13:35.629452 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:13:35.634282 systemd[1]: Starting prepare-critools.service... Oct 2 19:13:35.638490 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:13:35.642652 systemd[1]: Starting sshd-keygen.service... Oct 2 19:13:35.650844 systemd[1]: Starting systemd-logind.service... Oct 2 19:13:35.652476 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:35.652597 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:13:35.653520 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:13:35.663636 systemd[1]: Starting update-engine.service... Oct 2 19:13:35.669041 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:13:35.718740 jq[1654]: true Oct 2 19:13:35.752782 jq[1644]: false Oct 2 19:13:35.778093 tar[1656]: ./ Oct 2 19:13:35.778093 tar[1656]: ./macvlan Oct 2 19:13:35.786400 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:13:35.786766 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:13:35.813082 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:13:35.813420 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:13:35.841279 tar[1660]: crictl Oct 2 19:13:35.917701 jq[1658]: true Oct 2 19:13:35.945121 dbus-daemon[1643]: [system] SELinux support is enabled Oct 2 19:13:35.945939 systemd[1]: Started dbus.service. Oct 2 19:13:35.950845 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:13:35.950905 systemd[1]: Reached target system-config.target. Oct 2 19:13:35.952808 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:13:35.952853 systemd[1]: Reached target user-config.target. Oct 2 19:13:35.970380 dbus-daemon[1643]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1464 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:13:35.971944 extend-filesystems[1645]: Found nvme0n1 Oct 2 19:13:35.974137 extend-filesystems[1645]: Found nvme0n1p1 Oct 2 19:13:35.975807 extend-filesystems[1645]: Found nvme0n1p2 Oct 2 19:13:35.977472 extend-filesystems[1645]: Found nvme0n1p3 Oct 2 19:13:35.980465 extend-filesystems[1645]: Found usr Oct 2 19:13:35.986187 extend-filesystems[1645]: Found nvme0n1p4 Oct 2 19:13:35.993777 extend-filesystems[1645]: Found nvme0n1p6 Oct 2 19:13:36.000186 extend-filesystems[1645]: Found nvme0n1p7 Oct 2 19:13:36.004733 dbus-daemon[1643]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:13:36.005546 extend-filesystems[1645]: Found nvme0n1p9 Oct 2 19:13:36.007358 extend-filesystems[1645]: Checking size of /dev/nvme0n1p9 Oct 2 19:13:36.025905 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:13:36.150285 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:13:36.150671 systemd[1]: Finished motdgen.service. Oct 2 19:13:36.165540 update_engine[1653]: I1002 19:13:36.165063 1653 main.cc:92] Flatcar Update Engine starting Oct 2 19:13:36.175172 tar[1656]: ./static Oct 2 19:13:36.179501 systemd[1]: Started update-engine.service. Oct 2 19:13:36.183495 update_engine[1653]: I1002 19:13:36.183454 1653 update_check_scheduler.cc:74] Next update check in 5m59s Oct 2 19:13:36.184307 systemd[1]: Started locksmithd.service. Oct 2 19:13:36.193151 extend-filesystems[1645]: Resized partition /dev/nvme0n1p9 Oct 2 19:13:36.207851 amazon-ssm-agent[1640]: 2023/10/02 19:13:36 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:13:36.216274 amazon-ssm-agent[1640]: Initializing new seelog logger Oct 2 19:13:36.219423 extend-filesystems[1710]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:13:36.237641 amazon-ssm-agent[1640]: New Seelog Logger Creation Complete Oct 2 19:13:36.244293 amazon-ssm-agent[1640]: 2023/10/02 19:13:36 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:13:36.244467 amazon-ssm-agent[1640]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:13:36.245287 amazon-ssm-agent[1640]: 2023/10/02 19:13:36 processing appconfig overrides Oct 2 19:13:36.245920 systemd-logind[1652]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:13:36.253044 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:13:36.253441 systemd-logind[1652]: New seat seat0. Oct 2 19:13:36.262545 systemd[1]: Started systemd-logind.service. Oct 2 19:13:36.318031 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:13:36.349107 extend-filesystems[1710]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:13:36.349107 extend-filesystems[1710]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:13:36.349107 extend-filesystems[1710]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:13:36.363587 extend-filesystems[1645]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:13:36.365536 bash[1717]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:13:36.357969 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:13:36.358353 systemd[1]: Finished extend-filesystems.service. Oct 2 19:13:36.368198 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:13:36.403873 env[1657]: time="2023-10-02T19:13:36.403798893Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:13:36.412352 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:13:36.415761 tar[1656]: ./vlan Oct 2 19:13:36.566885 env[1657]: time="2023-10-02T19:13:36.566704182Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:13:36.569198 env[1657]: time="2023-10-02T19:13:36.569129991Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.600221828Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.600287895Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.600660215Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.600698511Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.600735330Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.600762439Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.600925828Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.601583611Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.601801927Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:36.602076 env[1657]: time="2023-10-02T19:13:36.601835045Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:13:36.602638 env[1657]: time="2023-10-02T19:13:36.601936344Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:13:36.602638 env[1657]: time="2023-10-02T19:13:36.601964943Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:13:36.612832 env[1657]: time="2023-10-02T19:13:36.612756008Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:13:36.613102 env[1657]: time="2023-10-02T19:13:36.613054342Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:13:36.613239 env[1657]: time="2023-10-02T19:13:36.613208754Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:13:36.613620 env[1657]: time="2023-10-02T19:13:36.613395058Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.613698 env[1657]: time="2023-10-02T19:13:36.613630521Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.613698 env[1657]: time="2023-10-02T19:13:36.613668962Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.613826 env[1657]: time="2023-10-02T19:13:36.613702884Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.614321 env[1657]: time="2023-10-02T19:13:36.614263274Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.614419 env[1657]: time="2023-10-02T19:13:36.614324390Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.614419 env[1657]: time="2023-10-02T19:13:36.614363071Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.614419 env[1657]: time="2023-10-02T19:13:36.614394086Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.614589 env[1657]: time="2023-10-02T19:13:36.614424247Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:13:36.614707 env[1657]: time="2023-10-02T19:13:36.614662078Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:13:36.614900 env[1657]: time="2023-10-02T19:13:36.614860242Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:13:36.615473 env[1657]: time="2023-10-02T19:13:36.615424273Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:13:36.615556 env[1657]: time="2023-10-02T19:13:36.615487396Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.615556 env[1657]: time="2023-10-02T19:13:36.615522352Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:13:36.615728 env[1657]: time="2023-10-02T19:13:36.615686546Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.615840 env[1657]: time="2023-10-02T19:13:36.615730887Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.615840 env[1657]: time="2023-10-02T19:13:36.615767152Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.615840 env[1657]: time="2023-10-02T19:13:36.615798419Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.615840 env[1657]: time="2023-10-02T19:13:36.615828376Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.616050 env[1657]: time="2023-10-02T19:13:36.615858922Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.616050 env[1657]: time="2023-10-02T19:13:36.615887510Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.616050 env[1657]: time="2023-10-02T19:13:36.615916325Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.616050 env[1657]: time="2023-10-02T19:13:36.615948878Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:13:36.620890 tar[1656]: ./portmap Oct 2 19:13:36.625702 env[1657]: time="2023-10-02T19:13:36.625635097Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.625702 env[1657]: time="2023-10-02T19:13:36.625703170Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.625923 env[1657]: time="2023-10-02T19:13:36.625738511Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.625923 env[1657]: time="2023-10-02T19:13:36.625770258Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:13:36.625923 env[1657]: time="2023-10-02T19:13:36.625805875Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:13:36.625923 env[1657]: time="2023-10-02T19:13:36.625833754Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:13:36.625923 env[1657]: time="2023-10-02T19:13:36.625871810Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:13:36.626222 env[1657]: time="2023-10-02T19:13:36.625939259Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:13:36.627619 env[1657]: time="2023-10-02T19:13:36.627470715Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:13:36.627619 env[1657]: time="2023-10-02T19:13:36.627603365Z" level=info msg="Connect containerd service" Oct 2 19:13:36.628936 env[1657]: time="2023-10-02T19:13:36.627668506Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:13:36.639854 env[1657]: time="2023-10-02T19:13:36.639781231Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:13:36.649734 env[1657]: time="2023-10-02T19:13:36.649654498Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:13:36.651262 env[1657]: time="2023-10-02T19:13:36.649788675Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:13:36.651262 env[1657]: time="2023-10-02T19:13:36.649888568Z" level=info msg="containerd successfully booted in 0.257170s" Oct 2 19:13:36.650036 systemd[1]: Started containerd.service. Oct 2 19:13:36.656213 env[1657]: time="2023-10-02T19:13:36.656108132Z" level=info msg="Start subscribing containerd event" Oct 2 19:13:36.657109 env[1657]: time="2023-10-02T19:13:36.657046573Z" level=info msg="Start recovering state" Oct 2 19:13:36.657220 env[1657]: time="2023-10-02T19:13:36.657201791Z" level=info msg="Start event monitor" Oct 2 19:13:36.657308 env[1657]: time="2023-10-02T19:13:36.657231063Z" level=info msg="Start snapshots syncer" Oct 2 19:13:36.657308 env[1657]: time="2023-10-02T19:13:36.657257764Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:13:36.657308 env[1657]: time="2023-10-02T19:13:36.657278889Z" level=info msg="Start streaming server" Oct 2 19:13:36.658717 dbus-daemon[1643]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:13:36.659004 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:13:36.665648 dbus-daemon[1643]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1687 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:13:36.671968 systemd[1]: Starting polkit.service... Oct 2 19:13:36.747680 polkitd[1739]: Started polkitd version 121 Oct 2 19:13:36.785308 tar[1656]: ./host-local Oct 2 19:13:36.792301 polkitd[1739]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:13:36.792425 polkitd[1739]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:13:36.813068 polkitd[1739]: Finished loading, compiling and executing 2 rules Oct 2 19:13:36.815224 dbus-daemon[1643]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:13:36.815508 systemd[1]: Started polkit.service. Oct 2 19:13:36.818111 polkitd[1739]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:13:36.856339 systemd-hostnamed[1687]: Hostname set to (transient) Oct 2 19:13:36.856500 systemd-resolved[1606]: System hostname changed to 'ip-172-31-22-247'. Oct 2 19:13:36.927017 tar[1656]: ./vrf Oct 2 19:13:36.986823 coreos-metadata[1642]: Oct 02 19:13:36.986 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:13:36.990470 coreos-metadata[1642]: Oct 02 19:13:36.990 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:13:36.995018 coreos-metadata[1642]: Oct 02 19:13:36.994 INFO Fetch successful Oct 2 19:13:36.995178 coreos-metadata[1642]: Oct 02 19:13:36.995 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:13:36.996695 coreos-metadata[1642]: Oct 02 19:13:36.996 INFO Fetch successful Oct 2 19:13:36.999409 unknown[1642]: wrote ssh authorized keys file for user: core Oct 2 19:13:37.012466 amazon-ssm-agent[1640]: 2023-10-02 19:13:37 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0e18676b10d6f4350 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0e18676b10d6f4350 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:13:37.012466 amazon-ssm-agent[1640]: status code: 400, request id: f7bae33d-0e97-4a60-960c-c9669b57fb9e Oct 2 19:13:37.012466 amazon-ssm-agent[1640]: 2023-10-02 19:13:37 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:13:37.032698 update-ssh-keys[1777]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:13:37.033908 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:13:37.054049 tar[1656]: ./bridge Oct 2 19:13:37.141389 tar[1656]: ./tuning Oct 2 19:13:37.228441 tar[1656]: ./firewall Oct 2 19:13:37.362328 tar[1656]: ./host-device Oct 2 19:13:37.475858 tar[1656]: ./sbr Oct 2 19:13:37.574637 tar[1656]: ./loopback Oct 2 19:13:37.674829 tar[1656]: ./dhcp Oct 2 19:13:37.819755 tar[1656]: ./ptp Oct 2 19:13:37.940699 tar[1656]: ./ipvlan Oct 2 19:13:38.029611 tar[1656]: ./bandwidth Oct 2 19:13:38.068843 systemd[1]: Finished prepare-critools.service. Oct 2 19:13:38.125757 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:13:38.244485 locksmithd[1709]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:13:38.793361 sshd_keygen[1676]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:13:38.850925 systemd[1]: Finished sshd-keygen.service. Oct 2 19:13:38.855647 systemd[1]: Starting issuegen.service... Oct 2 19:13:38.874905 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:13:38.875280 systemd[1]: Finished issuegen.service. Oct 2 19:13:38.880379 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:13:38.902860 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:13:38.907962 systemd[1]: Started getty@tty1.service. Oct 2 19:13:38.912620 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:13:38.914885 systemd[1]: Reached target getty.target. Oct 2 19:13:38.916706 systemd[1]: Reached target multi-user.target. Oct 2 19:13:38.921353 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:13:38.945241 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:13:38.945580 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:13:38.947974 systemd[1]: Startup finished in 1.183s (kernel) + 13.384s (initrd) + 12.962s (userspace) = 27.530s. Oct 2 19:13:44.918642 systemd[1]: Created slice system-sshd.slice. Oct 2 19:13:44.920910 systemd[1]: Started sshd@0-172.31.22.247:22-139.178.89.65:41654.service. Oct 2 19:13:45.145096 sshd[1850]: Accepted publickey for core from 139.178.89.65 port 41654 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:45.150289 sshd[1850]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.168584 systemd[1]: Created slice user-500.slice. Oct 2 19:13:45.171888 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:13:45.179037 systemd-logind[1652]: New session 1 of user core. Oct 2 19:13:45.197040 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:13:45.200323 systemd[1]: Starting user@500.service... Oct 2 19:13:45.210969 (systemd)[1853]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.412282 systemd[1853]: Queued start job for default target default.target. Oct 2 19:13:45.413323 systemd[1853]: Reached target paths.target. Oct 2 19:13:45.413375 systemd[1853]: Reached target sockets.target. Oct 2 19:13:45.413407 systemd[1853]: Reached target timers.target. Oct 2 19:13:45.413437 systemd[1853]: Reached target basic.target. Oct 2 19:13:45.413530 systemd[1853]: Reached target default.target. Oct 2 19:13:45.413595 systemd[1853]: Startup finished in 184ms. Oct 2 19:13:45.414547 systemd[1]: Started user@500.service. Oct 2 19:13:45.416531 systemd[1]: Started session-1.scope. Oct 2 19:13:45.571709 systemd[1]: Started sshd@1-172.31.22.247:22-139.178.89.65:41668.service. Oct 2 19:13:45.754702 sshd[1862]: Accepted publickey for core from 139.178.89.65 port 41668 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:45.758451 sshd[1862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.766489 systemd-logind[1652]: New session 2 of user core. Oct 2 19:13:45.767429 systemd[1]: Started session-2.scope. Oct 2 19:13:45.916511 sshd[1862]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:45.922878 systemd-logind[1652]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:13:45.923195 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:13:45.924731 systemd[1]: sshd@1-172.31.22.247:22-139.178.89.65:41668.service: Deactivated successfully. Oct 2 19:13:45.927203 systemd-logind[1652]: Removed session 2. Oct 2 19:13:45.946508 systemd[1]: Started sshd@2-172.31.22.247:22-139.178.89.65:39084.service. Oct 2 19:13:46.123206 sshd[1868]: Accepted publickey for core from 139.178.89.65 port 39084 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.126469 sshd[1868]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.136068 systemd[1]: Started session-3.scope. Oct 2 19:13:46.136321 systemd-logind[1652]: New session 3 of user core. Oct 2 19:13:46.268418 sshd[1868]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:46.275466 systemd[1]: sshd@2-172.31.22.247:22-139.178.89.65:39084.service: Deactivated successfully. Oct 2 19:13:46.276703 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:13:46.278375 systemd-logind[1652]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:13:46.280804 systemd-logind[1652]: Removed session 3. Oct 2 19:13:46.301955 systemd[1]: Started sshd@3-172.31.22.247:22-139.178.89.65:39088.service. Oct 2 19:13:46.484389 sshd[1874]: Accepted publickey for core from 139.178.89.65 port 39088 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.487557 sshd[1874]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.496229 systemd-logind[1652]: New session 4 of user core. Oct 2 19:13:46.496714 systemd[1]: Started session-4.scope. Oct 2 19:13:46.645761 sshd[1874]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:46.652859 systemd[1]: sshd@3-172.31.22.247:22-139.178.89.65:39088.service: Deactivated successfully. Oct 2 19:13:46.653323 systemd-logind[1652]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:13:46.654075 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:13:46.655751 systemd-logind[1652]: Removed session 4. Oct 2 19:13:46.677748 systemd[1]: Started sshd@4-172.31.22.247:22-139.178.89.65:39098.service. Oct 2 19:13:46.861935 sshd[1880]: Accepted publickey for core from 139.178.89.65 port 39098 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.865203 sshd[1880]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.874235 systemd[1]: Started session-5.scope. Oct 2 19:13:46.875024 systemd-logind[1652]: New session 5 of user core. Oct 2 19:13:47.013206 sudo[1883]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:13:47.014203 sudo[1883]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.027245 dbus-daemon[1643]: avc: received setenforce notice (enforcing=1) Oct 2 19:13:47.031543 sudo[1883]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.057322 sshd[1880]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:47.063119 systemd[1]: sshd@4-172.31.22.247:22-139.178.89.65:39098.service: Deactivated successfully. Oct 2 19:13:47.064524 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:13:47.065718 systemd-logind[1652]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:13:47.067568 systemd-logind[1652]: Removed session 5. Oct 2 19:13:47.088610 systemd[1]: Started sshd@5-172.31.22.247:22-139.178.89.65:39112.service. Oct 2 19:13:47.271822 sshd[1887]: Accepted publickey for core from 139.178.89.65 port 39112 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:47.275535 sshd[1887]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:47.284014 systemd-logind[1652]: New session 6 of user core. Oct 2 19:13:47.284877 systemd[1]: Started session-6.scope. Oct 2 19:13:47.407478 sudo[1891]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:13:47.407975 sudo[1891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.417086 sudo[1891]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.430819 sudo[1890]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:13:47.431340 sudo[1890]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.455176 systemd[1]: Stopping audit-rules.service... Oct 2 19:13:47.459000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:13:47.462271 kernel: kauditd_printk_skb: 77 callbacks suppressed Oct 2 19:13:47.462334 kernel: audit: type=1305 audit(1696274027.459:166): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:13:47.459000 audit[1894]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe7170b10 a2=420 a3=0 items=0 ppid=1 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.467739 auditctl[1894]: No rules Oct 2 19:13:47.468483 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:13:47.468817 systemd[1]: Stopped audit-rules.service. Oct 2 19:13:47.477150 systemd[1]: Starting audit-rules.service... Oct 2 19:13:47.459000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:13:47.483869 kernel: audit: type=1300 audit(1696274027.459:166): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe7170b10 a2=420 a3=0 items=0 ppid=1 pid=1894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.483948 kernel: audit: type=1327 audit(1696274027.459:166): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:13:47.494904 kernel: audit: type=1131 audit(1696274027.467:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.538705 augenrules[1911]: No rules Oct 2 19:13:47.540908 systemd[1]: Finished audit-rules.service. Oct 2 19:13:47.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.544062 sudo[1890]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.542000 audit[1890]: USER_END pid=1890 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.560331 kernel: audit: type=1130 audit(1696274027.540:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.560424 kernel: audit: type=1106 audit(1696274027.542:169): pid=1890 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.560468 kernel: audit: type=1104 audit(1696274027.542:170): pid=1890 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.542000 audit[1890]: CRED_DISP pid=1890 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.574382 sshd[1887]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:47.575000 audit[1887]: USER_END pid=1887 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.579810 systemd-logind[1652]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:13:47.581191 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:13:47.582290 systemd[1]: sshd@5-172.31.22.247:22-139.178.89.65:39112.service: Deactivated successfully. Oct 2 19:13:47.585275 systemd-logind[1652]: Removed session 6. Oct 2 19:13:47.575000 audit[1887]: CRED_DISP pid=1887 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.598703 kernel: audit: type=1106 audit(1696274027.575:171): pid=1887 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.602557 kernel: audit: type=1104 audit(1696274027.575:172): pid=1887 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.602638 kernel: audit: type=1131 audit(1696274027.577:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.22.247:22-139.178.89.65:39112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.22.247:22-139.178.89.65:39112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.22.247:22-139.178.89.65:39124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.608383 systemd[1]: Started sshd@6-172.31.22.247:22-139.178.89.65:39124.service. Oct 2 19:13:47.788000 audit[1917]: USER_ACCT pid=1917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.789878 sshd[1917]: Accepted publickey for core from 139.178.89.65 port 39124 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:47.792000 audit[1917]: CRED_ACQ pid=1917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.792000 audit[1917]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1af85d0 a2=3 a3=1 items=0 ppid=1 pid=1917 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.792000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:47.793929 sshd[1917]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:47.801724 systemd-logind[1652]: New session 7 of user core. Oct 2 19:13:47.802714 systemd[1]: Started session-7.scope. Oct 2 19:13:47.810000 audit[1917]: USER_START pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.817000 audit[1919]: CRED_ACQ pid=1919 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.922000 audit[1920]: USER_ACCT pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.923454 sudo[1920]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:13:47.923000 audit[1920]: CRED_REFR pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.924510 sudo[1920]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.927000 audit[1920]: USER_START pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.655856 systemd[1]: Starting docker.service... Oct 2 19:13:48.764841 env[1935]: time="2023-10-02T19:13:48.764747606Z" level=info msg="Starting up" Oct 2 19:13:48.767833 env[1935]: time="2023-10-02T19:13:48.767787620Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:13:48.768078 env[1935]: time="2023-10-02T19:13:48.768047753Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:13:48.768210 env[1935]: time="2023-10-02T19:13:48.768177087Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:13:48.768315 env[1935]: time="2023-10-02T19:13:48.768288602Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:13:48.773259 env[1935]: time="2023-10-02T19:13:48.773215192Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:13:48.773439 env[1935]: time="2023-10-02T19:13:48.773411120Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:13:48.773586 env[1935]: time="2023-10-02T19:13:48.773555848Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:13:48.773698 env[1935]: time="2023-10-02T19:13:48.773669212Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:13:48.833863 env[1935]: time="2023-10-02T19:13:48.833807138Z" level=info msg="Loading containers: start." Oct 2 19:13:48.940000 audit[1965]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.940000 audit[1965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffffdd68600 a2=0 a3=1 items=0 ppid=1935 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.940000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:13:48.947000 audit[1967]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1967 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.947000 audit[1967]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff0bf8200 a2=0 a3=1 items=0 ppid=1935 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.947000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:13:48.954000 audit[1969]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.954000 audit[1969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffcb725f70 a2=0 a3=1 items=0 ppid=1935 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.954000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:13:48.961000 audit[1971]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1971 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.961000 audit[1971]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd2cdf970 a2=0 a3=1 items=0 ppid=1935 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.961000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:13:48.970000 audit[1973]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1973 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:48.970000 audit[1973]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc8f1bc50 a2=0 a3=1 items=0 ppid=1935 pid=1973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:48.970000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:13:49.007000 audit[1978]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.007000 audit[1978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff5817d30 a2=0 a3=1 items=0 ppid=1935 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.007000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:13:49.023000 audit[1980]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.023000 audit[1980]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc6988610 a2=0 a3=1 items=0 ppid=1935 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:13:49.030000 audit[1982]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.030000 audit[1982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff6bb5550 a2=0 a3=1 items=0 ppid=1935 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.030000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:13:49.037000 audit[1984]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.037000 audit[1984]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffc1e34840 a2=0 a3=1 items=0 ppid=1935 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.037000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.059000 audit[1988]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.059000 audit[1988]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd19dd240 a2=0 a3=1 items=0 ppid=1935 pid=1988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.059000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.063000 audit[1989]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.063000 audit[1989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc2e2ddb0 a2=0 a3=1 items=0 ppid=1935 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.063000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.077050 kernel: Initializing XFRM netlink socket Oct 2 19:13:49.122016 env[1935]: time="2023-10-02T19:13:49.121921036Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:13:49.125553 (udev-worker)[1945]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:49.157000 audit[1998]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1998 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.157000 audit[1998]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff5241450 a2=0 a3=1 items=0 ppid=1935 pid=1998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.157000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:13:49.179000 audit[2001]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.179000 audit[2001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc2292740 a2=0 a3=1 items=0 ppid=1935 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.179000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:13:49.189000 audit[2004]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.189000 audit[2004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc5071aa0 a2=0 a3=1 items=0 ppid=1935 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.189000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:13:49.197000 audit[2006]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2006 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.197000 audit[2006]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff4cf5b20 a2=0 a3=1 items=0 ppid=1935 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.197000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:13:49.206000 audit[2008]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2008 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.206000 audit[2008]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc2f9aed0 a2=0 a3=1 items=0 ppid=1935 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.206000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:13:49.215000 audit[2010]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2010 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.215000 audit[2010]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd61286c0 a2=0 a3=1 items=0 ppid=1935 pid=2010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.215000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:13:49.223000 audit[2012]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2012 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.223000 audit[2012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffa438340 a2=0 a3=1 items=0 ppid=1935 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.223000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:13:49.241000 audit[2015]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2015 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.241000 audit[2015]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff932bfc0 a2=0 a3=1 items=0 ppid=1935 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.241000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:13:49.249000 audit[2017]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2017 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.249000 audit[2017]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffec7f9420 a2=0 a3=1 items=0 ppid=1935 pid=2017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.249000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:13:49.256000 audit[2019]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2019 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.256000 audit[2019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffcf86cf30 a2=0 a3=1 items=0 ppid=1935 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.256000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:13:49.263000 audit[2021]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.263000 audit[2021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff65c0f50 a2=0 a3=1 items=0 ppid=1935 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.263000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:13:49.264882 systemd-networkd[1464]: docker0: Link UP Oct 2 19:13:49.287000 audit[2025]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.287000 audit[2025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffebb795f0 a2=0 a3=1 items=0 ppid=1935 pid=2025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.287000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.291000 audit[2026]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2026 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.291000 audit[2026]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff8473500 a2=0 a3=1 items=0 ppid=1935 pid=2026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.291000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.292875 env[1935]: time="2023-10-02T19:13:49.292815342Z" level=info msg="Loading containers: done." Oct 2 19:13:49.322809 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2257521196-merged.mount: Deactivated successfully. Oct 2 19:13:49.338034 env[1935]: time="2023-10-02T19:13:49.337934754Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:13:49.338711 env[1935]: time="2023-10-02T19:13:49.338679316Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:13:49.339113 env[1935]: time="2023-10-02T19:13:49.339064349Z" level=info msg="Daemon has completed initialization" Oct 2 19:13:49.376471 systemd[1]: Started docker.service. Oct 2 19:13:49.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:49.386190 env[1935]: time="2023-10-02T19:13:49.386112538Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:13:49.438225 systemd[1]: Reloading. Oct 2 19:13:49.630344 /usr/lib/systemd/system-generators/torcx-generator[2076]: time="2023-10-02T19:13:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:13:49.630403 /usr/lib/systemd/system-generators/torcx-generator[2076]: time="2023-10-02T19:13:49Z" level=info msg="torcx already run" Oct 2 19:13:49.868372 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:13:49.868853 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:13:49.906612 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:13:50.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit: BPF prog-id=40 op=LOAD Oct 2 19:13:50.067000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit: BPF prog-id=41 op=LOAD Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.069000 audit: BPF prog-id=42 op=LOAD Oct 2 19:13:50.069000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:13:50.069000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.073000 audit: BPF prog-id=43 op=LOAD Oct 2 19:13:50.073000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.076000 audit: BPF prog-id=44 op=LOAD Oct 2 19:13:50.077000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:13:50.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit: BPF prog-id=45 op=LOAD Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.079000 audit: BPF prog-id=46 op=LOAD Oct 2 19:13:50.079000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:13:50.079000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:13:50.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.081000 audit: BPF prog-id=47 op=LOAD Oct 2 19:13:50.081000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit: BPF prog-id=48 op=LOAD Oct 2 19:13:50.082000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit: BPF prog-id=49 op=LOAD Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.082000 audit: BPF prog-id=50 op=LOAD Oct 2 19:13:50.082000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:13:50.082000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:13:50.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.084000 audit: BPF prog-id=51 op=LOAD Oct 2 19:13:50.084000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.087000 audit: BPF prog-id=52 op=LOAD Oct 2 19:13:50.087000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.089000 audit: BPF prog-id=53 op=LOAD Oct 2 19:13:50.089000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit: BPF prog-id=54 op=LOAD Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.090000 audit: BPF prog-id=55 op=LOAD Oct 2 19:13:50.090000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:13:50.090000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.099000 audit: BPF prog-id=56 op=LOAD Oct 2 19:13:50.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.100000 audit: BPF prog-id=57 op=LOAD Oct 2 19:13:50.100000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:13:50.100000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:13:50.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:50.144449 systemd[1]: Started kubelet.service. Oct 2 19:13:50.352556 kubelet[2128]: E1002 19:13:50.352474 2128 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:13:50.356813 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:13:50.357172 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:13:50.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:13:50.771821 env[1657]: time="2023-10-02T19:13:50.771761222Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:13:51.397776 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1945700293.mount: Deactivated successfully. Oct 2 19:13:54.234596 env[1657]: time="2023-10-02T19:13:54.234513359Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.238219 env[1657]: time="2023-10-02T19:13:54.238159076Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.242253 env[1657]: time="2023-10-02T19:13:54.242191635Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.245776 env[1657]: time="2023-10-02T19:13:54.245713615Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.247617 env[1657]: time="2023-10-02T19:13:54.247567321Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 19:13:54.277420 env[1657]: time="2023-10-02T19:13:54.277351935Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:13:57.597205 env[1657]: time="2023-10-02T19:13:57.597142922Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.600055 env[1657]: time="2023-10-02T19:13:57.599975399Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.603218 env[1657]: time="2023-10-02T19:13:57.603153718Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.606608 env[1657]: time="2023-10-02T19:13:57.606544344Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.608244 env[1657]: time="2023-10-02T19:13:57.608200031Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 19:13:57.639338 env[1657]: time="2023-10-02T19:13:57.639257805Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:13:59.669588 env[1657]: time="2023-10-02T19:13:59.669519442Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.672465 env[1657]: time="2023-10-02T19:13:59.672403461Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.675742 env[1657]: time="2023-10-02T19:13:59.675690002Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.678967 env[1657]: time="2023-10-02T19:13:59.678908049Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.680747 env[1657]: time="2023-10-02T19:13:59.680683342Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 19:13:59.709469 env[1657]: time="2023-10-02T19:13:59.709390242Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:14:00.572022 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:14:00.572166 kernel: audit: type=1130 audit(1696274040.558:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.558699 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:14:00.559066 systemd[1]: Stopped kubelet.service. Oct 2 19:14:00.571359 systemd[1]: Started kubelet.service. Oct 2 19:14:00.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.583133 kernel: audit: type=1131 audit(1696274040.558:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.593859 kernel: audit: type=1130 audit(1696274040.570:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.740128 kubelet[2162]: E1002 19:14:00.740046 2162 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:14:00.748528 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:14:00.748841 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:14:00.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:00.759179 kernel: audit: type=1131 audit(1696274040.748:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:01.039650 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2684854671.mount: Deactivated successfully. Oct 2 19:14:01.725819 env[1657]: time="2023-10-02T19:14:01.725734673Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.728900 env[1657]: time="2023-10-02T19:14:01.728840331Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.731760 env[1657]: time="2023-10-02T19:14:01.731709477Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.734422 env[1657]: time="2023-10-02T19:14:01.734361760Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.735511 env[1657]: time="2023-10-02T19:14:01.735463494Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 19:14:01.765810 env[1657]: time="2023-10-02T19:14:01.765717986Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:14:02.269870 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount88020407.mount: Deactivated successfully. Oct 2 19:14:02.279238 env[1657]: time="2023-10-02T19:14:02.279165692Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.283394 env[1657]: time="2023-10-02T19:14:02.283329034Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.285380 env[1657]: time="2023-10-02T19:14:02.285334725Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.287928 env[1657]: time="2023-10-02T19:14:02.287869620Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.289132 env[1657]: time="2023-10-02T19:14:02.289083348Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:14:02.319018 env[1657]: time="2023-10-02T19:14:02.318941220Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:14:03.609188 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1481950190.mount: Deactivated successfully. Oct 2 19:14:06.549121 env[1657]: time="2023-10-02T19:14:06.549038134Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:06.552553 env[1657]: time="2023-10-02T19:14:06.552487354Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:06.555846 env[1657]: time="2023-10-02T19:14:06.555793098Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:06.558927 env[1657]: time="2023-10-02T19:14:06.558864459Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:06.560511 env[1657]: time="2023-10-02T19:14:06.560443001Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:14:06.590491 env[1657]: time="2023-10-02T19:14:06.590411627Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:14:06.868268 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:14:06.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:06.879362 kernel: audit: type=1131 audit(1696274046.867:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:06.894000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:14:06.894000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:14:06.900372 kernel: audit: type=1334 audit(1696274046.894:421): prog-id=46 op=UNLOAD Oct 2 19:14:06.900445 kernel: audit: type=1334 audit(1696274046.894:422): prog-id=45 op=UNLOAD Oct 2 19:14:06.900496 kernel: audit: type=1334 audit(1696274046.894:423): prog-id=44 op=UNLOAD Oct 2 19:14:06.894000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:14:07.175300 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3717914436.mount: Deactivated successfully. Oct 2 19:14:08.351583 env[1657]: time="2023-10-02T19:14:08.351524950Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:08.435665 env[1657]: time="2023-10-02T19:14:08.435583985Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:08.476428 env[1657]: time="2023-10-02T19:14:08.476349503Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:08.500374 env[1657]: time="2023-10-02T19:14:08.500317406Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:08.501464 env[1657]: time="2023-10-02T19:14:08.501406956Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:14:10.808700 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:14:10.809083 systemd[1]: Stopped kubelet.service. Oct 2 19:14:10.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.833651 kernel: audit: type=1130 audit(1696274050.808:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.833777 kernel: audit: type=1131 audit(1696274050.808:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.825299 systemd[1]: Started kubelet.service. Oct 2 19:14:10.848807 kernel: audit: type=1130 audit(1696274050.824:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.996692 kubelet[2244]: E1002 19:14:10.996621 2244 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:14:11.000942 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:14:11.001286 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:14:11.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:11.011034 kernel: audit: type=1131 audit(1696274051.000:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:15.369230 systemd[1]: Stopped kubelet.service. Oct 2 19:14:15.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.387465 kernel: audit: type=1130 audit(1696274055.368:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.387593 kernel: audit: type=1131 audit(1696274055.368:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.415661 systemd[1]: Reloading. Oct 2 19:14:15.603781 /usr/lib/systemd/system-generators/torcx-generator[2273]: time="2023-10-02T19:14:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:14:15.604122 /usr/lib/systemd/system-generators/torcx-generator[2273]: time="2023-10-02T19:14:15Z" level=info msg="torcx already run" Oct 2 19:14:15.843481 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:14:15.843522 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:14:15.881518 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054400 kernel: audit: type=1400 audit(1696274056.034:430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054539 kernel: audit: type=1400 audit(1696274056.034:431): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.064805 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:14:16.064902 kernel: audit: type=1400 audit(1696274056.034:432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.064955 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.074673 kernel: audit: type=1400 audit(1696274056.034:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.074731 kernel: audit: backlog limit exceeded Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.083641 kernel: audit: type=1400 audit(1696274056.034:434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.041000 audit: BPF prog-id=58 op=LOAD Oct 2 19:14:16.041000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:14:16.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit: BPF prog-id=59 op=LOAD Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.042000 audit: BPF prog-id=60 op=LOAD Oct 2 19:14:16.042000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:14:16.042000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.045000 audit: BPF prog-id=61 op=LOAD Oct 2 19:14:16.045000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.053000 audit: BPF prog-id=62 op=LOAD Oct 2 19:14:16.053000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.075000 audit: BPF prog-id=63 op=LOAD Oct 2 19:14:16.075000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:14:16.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.082000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.084000 audit: BPF prog-id=66 op=LOAD Oct 2 19:14:16.084000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.087000 audit: BPF prog-id=67 op=LOAD Oct 2 19:14:16.087000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.089000 audit: BPF prog-id=68 op=LOAD Oct 2 19:14:16.089000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit: BPF prog-id=69 op=LOAD Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.090000 audit: BPF prog-id=70 op=LOAD Oct 2 19:14:16.090000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:14:16.090000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit: BPF prog-id=71 op=LOAD Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:16.100000 audit: BPF prog-id=72 op=LOAD Oct 2 19:14:16.100000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:14:16.100000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:14:16.135712 systemd[1]: Started kubelet.service. Oct 2 19:14:16.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.282372 kubelet[2329]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:14:16.282372 kubelet[2329]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:16.282972 kubelet[2329]: I1002 19:14:16.282644 2329 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:14:16.284958 kubelet[2329]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:14:16.284958 kubelet[2329]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:17.165879 kubelet[2329]: I1002 19:14:17.165818 2329 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:14:17.165879 kubelet[2329]: I1002 19:14:17.165866 2329 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:14:17.166265 kubelet[2329]: I1002 19:14:17.166229 2329 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:14:17.173567 kubelet[2329]: E1002 19:14:17.173529 2329 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.22.247:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.173848 kubelet[2329]: I1002 19:14:17.173820 2329 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:14:17.177198 kubelet[2329]: W1002 19:14:17.177161 2329 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:14:17.178479 kubelet[2329]: I1002 19:14:17.178439 2329 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:14:17.179214 kubelet[2329]: I1002 19:14:17.179186 2329 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:14:17.179346 kubelet[2329]: I1002 19:14:17.179317 2329 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:14:17.179528 kubelet[2329]: I1002 19:14:17.179417 2329 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:14:17.179528 kubelet[2329]: I1002 19:14:17.179448 2329 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:14:17.179718 kubelet[2329]: I1002 19:14:17.179691 2329 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:17.186637 kubelet[2329]: I1002 19:14:17.186581 2329 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:14:17.186637 kubelet[2329]: I1002 19:14:17.186634 2329 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:14:17.186864 kubelet[2329]: I1002 19:14:17.186751 2329 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:14:17.186864 kubelet[2329]: I1002 19:14:17.186776 2329 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:14:17.188767 kubelet[2329]: W1002 19:14:17.188704 2329 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.22.247:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-22-247&limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.188963 kubelet[2329]: E1002 19:14:17.188941 2329 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.22.247:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-22-247&limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.189354 kubelet[2329]: I1002 19:14:17.189329 2329 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:14:17.190748 kubelet[2329]: W1002 19:14:17.190717 2329 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:14:17.191803 kubelet[2329]: I1002 19:14:17.191769 2329 server.go:1186] "Started kubelet" Oct 2 19:14:17.194000 audit[2329]: AVC avc: denied { mac_admin } for pid=2329 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:17.194000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:17.194000 audit[2329]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b916e0 a1=4000adf278 a2=4000b916b0 a3=25 items=0 ppid=1 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.194000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:17.196259 kubelet[2329]: I1002 19:14:17.196219 2329 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:14:17.195000 audit[2329]: AVC avc: denied { mac_admin } for pid=2329 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:17.195000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:17.195000 audit[2329]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ac3d80 a1=4000adf290 a2=4000b91770 a3=25 items=0 ppid=1 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.195000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:17.196823 kubelet[2329]: I1002 19:14:17.196794 2329 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:14:17.197119 kubelet[2329]: I1002 19:14:17.197094 2329 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:14:17.198452 kubelet[2329]: I1002 19:14:17.198409 2329 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:14:17.198743 kubelet[2329]: E1002 19:14:17.198539 2329 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-22-247.178a60448c9fbe9f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-22-247", UID:"ip-172-31-22-247", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-22-247"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 14, 17, 191734943, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 14, 17, 191734943, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.22.247:6443/api/v1/namespaces/default/events": dial tcp 172.31.22.247:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:14:17.204442 kubelet[2329]: I1002 19:14:17.204392 2329 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:14:17.209460 kubelet[2329]: E1002 19:14:17.209419 2329 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:14:17.209707 kubelet[2329]: E1002 19:14:17.209683 2329 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:14:17.211000 audit[2339]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.211000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd042e5a0 a2=0 a3=1 items=0 ppid=2329 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.211000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:14:17.214498 kubelet[2329]: I1002 19:14:17.214457 2329 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:14:17.216056 kubelet[2329]: I1002 19:14:17.215970 2329 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:14:17.216550 kubelet[2329]: W1002 19:14:17.216492 2329 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.22.247:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.216709 kubelet[2329]: E1002 19:14:17.216683 2329 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.22.247:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.220610 kubelet[2329]: W1002 19:14:17.220539 2329 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.22.247:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.220898 kubelet[2329]: E1002 19:14:17.220875 2329 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.22.247:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.221166 kubelet[2329]: E1002 19:14:17.221136 2329 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.22.247:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-247?timeout=10s": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.222000 audit[2341]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.222000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9f857e0 a2=0 a3=1 items=0 ppid=2329 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.222000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:14:17.237000 audit[2343]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.237000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffec0b43e0 a2=0 a3=1 items=0 ppid=2329 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.237000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:17.263784 kubelet[2329]: I1002 19:14:17.263732 2329 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:14:17.263784 kubelet[2329]: I1002 19:14:17.263769 2329 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:14:17.264043 kubelet[2329]: I1002 19:14:17.263801 2329 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:17.264000 audit[2346]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.264000 audit[2346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff1fe2da0 a2=0 a3=1 items=0 ppid=2329 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.264000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:17.266893 kubelet[2329]: I1002 19:14:17.266858 2329 policy_none.go:49] "None policy: Start" Oct 2 19:14:17.268113 kubelet[2329]: I1002 19:14:17.268084 2329 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:14:17.268315 kubelet[2329]: I1002 19:14:17.268293 2329 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:14:17.281164 systemd[1]: Created slice kubepods.slice. Oct 2 19:14:17.290760 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:14:17.301944 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:14:17.303000 audit[2352]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.303000 audit[2352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc474e0f0 a2=0 a3=1 items=0 ppid=2329 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.303000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:14:17.308000 audit[2353]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.308000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc581c050 a2=0 a3=1 items=0 ppid=2329 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:14:17.313382 kubelet[2329]: I1002 19:14:17.313332 2329 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:14:17.312000 audit[2329]: AVC avc: denied { mac_admin } for pid=2329 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:17.312000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:17.312000 audit[2329]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d0acf0 a1=4000d091e8 a2=4000d0acc0 a3=25 items=0 ppid=1 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.312000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:17.314313 kubelet[2329]: I1002 19:14:17.313495 2329 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:14:17.314313 kubelet[2329]: I1002 19:14:17.313783 2329 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:14:17.319565 kubelet[2329]: E1002 19:14:17.319528 2329 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-22-247\" not found" Oct 2 19:14:17.320193 kubelet[2329]: I1002 19:14:17.320153 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-247" Oct 2 19:14:17.322118 kubelet[2329]: E1002 19:14:17.322085 2329 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.247:6443/api/v1/nodes\": dial tcp 172.31.22.247:6443: connect: connection refused" node="ip-172-31-22-247" Oct 2 19:14:17.333000 audit[2356]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.333000 audit[2356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffccc9ff20 a2=0 a3=1 items=0 ppid=2329 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.333000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:14:17.347000 audit[2359]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.347000 audit[2359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=fffff3ad8c10 a2=0 a3=1 items=0 ppid=2329 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:14:17.351000 audit[2360]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.351000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffde52bc80 a2=0 a3=1 items=0 ppid=2329 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.351000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:14:17.355000 audit[2361]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.355000 audit[2361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd958d470 a2=0 a3=1 items=0 ppid=2329 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.355000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:14:17.363000 audit[2363]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.363000 audit[2363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc1404d00 a2=0 a3=1 items=0 ppid=2329 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.363000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:14:17.371000 audit[2365]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.371000 audit[2365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd062fb60 a2=0 a3=1 items=0 ppid=2329 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.371000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:14:17.379000 audit[2367]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.379000 audit[2367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=fffffa39a830 a2=0 a3=1 items=0 ppid=2329 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.379000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:14:17.388000 audit[2369]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.388000 audit[2369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffeb7b87a0 a2=0 a3=1 items=0 ppid=2329 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.388000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:14:17.396000 audit[2371]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.396000 audit[2371]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=ffffe21d7db0 a2=0 a3=1 items=0 ppid=2329 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.396000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:14:17.398768 kubelet[2329]: I1002 19:14:17.398721 2329 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:14:17.400000 audit[2372]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.400000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcc3a8150 a2=0 a3=1 items=0 ppid=2329 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.400000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:14:17.401000 audit[2373]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2373 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.401000 audit[2373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdb1df8a0 a2=0 a3=1 items=0 ppid=2329 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.401000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:14:17.404000 audit[2374]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=2374 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.404000 audit[2374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffea9793c0 a2=0 a3=1 items=0 ppid=2329 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.404000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:14:17.405000 audit[2375]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.405000 audit[2375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffa68860 a2=0 a3=1 items=0 ppid=2329 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.405000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:14:17.408000 audit[2377]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:17.408000 audit[2377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff4b4c430 a2=0 a3=1 items=0 ppid=2329 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.408000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:14:17.411000 audit[2378]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.411000 audit[2378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffebb47670 a2=0 a3=1 items=0 ppid=2329 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.411000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:14:17.415000 audit[2379]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.415000 audit[2379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffc5fdcbe0 a2=0 a3=1 items=0 ppid=2329 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.415000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:14:17.422411 kubelet[2329]: E1002 19:14:17.422363 2329 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.22.247:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-247?timeout=10s": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.425000 audit[2381]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2381 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.425000 audit[2381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffe471f0f0 a2=0 a3=1 items=0 ppid=2329 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:14:17.429000 audit[2382]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.429000 audit[2382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdbadf540 a2=0 a3=1 items=0 ppid=2329 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.429000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:14:17.432000 audit[2383]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.432000 audit[2383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc7d989b0 a2=0 a3=1 items=0 ppid=2329 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:14:17.441000 audit[2385]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.441000 audit[2385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff7bd3b20 a2=0 a3=1 items=0 ppid=2329 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:14:17.449000 audit[2387]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2387 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.449000 audit[2387]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc997fa30 a2=0 a3=1 items=0 ppid=2329 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.449000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:14:17.456000 audit[2389]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2389 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.456000 audit[2389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffe3f6ce80 a2=0 a3=1 items=0 ppid=2329 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.456000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:14:17.465000 audit[2391]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.465000 audit[2391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffe3c5bb00 a2=0 a3=1 items=0 ppid=2329 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.465000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:14:17.476000 audit[2393]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.476000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffccf52bc0 a2=0 a3=1 items=0 ppid=2329 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.476000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:14:17.478208 kubelet[2329]: I1002 19:14:17.478167 2329 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:14:17.478321 kubelet[2329]: I1002 19:14:17.478246 2329 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:14:17.478321 kubelet[2329]: I1002 19:14:17.478279 2329 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:14:17.478616 kubelet[2329]: E1002 19:14:17.478574 2329 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:14:17.479805 kubelet[2329]: W1002 19:14:17.479730 2329 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.22.247:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.479962 kubelet[2329]: E1002 19:14:17.479830 2329 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.22.247:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.482000 audit[2394]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2394 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.482000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc8e8f280 a2=0 a3=1 items=0 ppid=2329 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.482000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:14:17.486000 audit[2395]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2395 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.486000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef156f40 a2=0 a3=1 items=0 ppid=2329 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.486000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:14:17.489000 audit[2396]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2396 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:17.489000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe3e03260 a2=0 a3=1 items=0 ppid=2329 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:17.489000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:14:17.525224 kubelet[2329]: I1002 19:14:17.525191 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-247" Oct 2 19:14:17.525841 kubelet[2329]: E1002 19:14:17.525815 2329 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.247:6443/api/v1/nodes\": dial tcp 172.31.22.247:6443: connect: connection refused" node="ip-172-31-22-247" Oct 2 19:14:17.578967 kubelet[2329]: I1002 19:14:17.578926 2329 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:17.581375 kubelet[2329]: I1002 19:14:17.581330 2329 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:17.583069 kubelet[2329]: I1002 19:14:17.583020 2329 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:17.586396 kubelet[2329]: I1002 19:14:17.586029 2329 status_manager.go:698] "Failed to get status for pod" podUID=0383d64010f7e21ab02956c4461732c0 pod="kube-system/kube-apiserver-ip-172-31-22-247" err="Get \"https://172.31.22.247:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-22-247\": dial tcp 172.31.22.247:6443: connect: connection refused" Oct 2 19:14:17.587618 kubelet[2329]: I1002 19:14:17.587586 2329 status_manager.go:698] "Failed to get status for pod" podUID=d2065a7aadd973de4dafbd5542404ab3 pod="kube-system/kube-controller-manager-ip-172-31-22-247" err="Get \"https://172.31.22.247:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-22-247\": dial tcp 172.31.22.247:6443: connect: connection refused" Oct 2 19:14:17.589409 kubelet[2329]: I1002 19:14:17.589372 2329 status_manager.go:698] "Failed to get status for pod" podUID=4805a4a50f749254122a6bbaa22c3fde pod="kube-system/kube-scheduler-ip-172-31-22-247" err="Get \"https://172.31.22.247:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-22-247\": dial tcp 172.31.22.247:6443: connect: connection refused" Oct 2 19:14:17.595247 systemd[1]: Created slice kubepods-burstable-pod0383d64010f7e21ab02956c4461732c0.slice. Oct 2 19:14:17.617098 systemd[1]: Created slice kubepods-burstable-podd2065a7aadd973de4dafbd5542404ab3.slice. Oct 2 19:14:17.619029 kubelet[2329]: I1002 19:14:17.618953 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:17.619149 kubelet[2329]: I1002 19:14:17.619050 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0383d64010f7e21ab02956c4461732c0-k8s-certs\") pod \"kube-apiserver-ip-172-31-22-247\" (UID: \"0383d64010f7e21ab02956c4461732c0\") " pod="kube-system/kube-apiserver-ip-172-31-22-247" Oct 2 19:14:17.619149 kubelet[2329]: I1002 19:14:17.619101 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0383d64010f7e21ab02956c4461732c0-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-22-247\" (UID: \"0383d64010f7e21ab02956c4461732c0\") " pod="kube-system/kube-apiserver-ip-172-31-22-247" Oct 2 19:14:17.619149 kubelet[2329]: I1002 19:14:17.619145 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-ca-certs\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:17.619355 kubelet[2329]: I1002 19:14:17.619187 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-k8s-certs\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:17.619355 kubelet[2329]: I1002 19:14:17.619231 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-kubeconfig\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:17.619355 kubelet[2329]: I1002 19:14:17.619275 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:17.619355 kubelet[2329]: I1002 19:14:17.619334 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4805a4a50f749254122a6bbaa22c3fde-kubeconfig\") pod \"kube-scheduler-ip-172-31-22-247\" (UID: \"4805a4a50f749254122a6bbaa22c3fde\") " pod="kube-system/kube-scheduler-ip-172-31-22-247" Oct 2 19:14:17.619583 kubelet[2329]: I1002 19:14:17.619377 2329 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0383d64010f7e21ab02956c4461732c0-ca-certs\") pod \"kube-apiserver-ip-172-31-22-247\" (UID: \"0383d64010f7e21ab02956c4461732c0\") " pod="kube-system/kube-apiserver-ip-172-31-22-247" Oct 2 19:14:17.628688 systemd[1]: Created slice kubepods-burstable-pod4805a4a50f749254122a6bbaa22c3fde.slice. Oct 2 19:14:17.824164 kubelet[2329]: E1002 19:14:17.824111 2329 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.22.247:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-247?timeout=10s": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:17.911210 env[1657]: time="2023-10-02T19:14:17.911144584Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-22-247,Uid:0383d64010f7e21ab02956c4461732c0,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:17.925921 env[1657]: time="2023-10-02T19:14:17.925538584Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-22-247,Uid:d2065a7aadd973de4dafbd5542404ab3,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:17.928231 kubelet[2329]: I1002 19:14:17.928038 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-247" Oct 2 19:14:17.928944 kubelet[2329]: E1002 19:14:17.928888 2329 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.247:6443/api/v1/nodes\": dial tcp 172.31.22.247:6443: connect: connection refused" node="ip-172-31-22-247" Oct 2 19:14:17.933791 env[1657]: time="2023-10-02T19:14:17.933715810Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-22-247,Uid:4805a4a50f749254122a6bbaa22c3fde,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:18.276893 kubelet[2329]: W1002 19:14:18.276730 2329 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.22.247:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-22-247&limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:18.276893 kubelet[2329]: E1002 19:14:18.276839 2329 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.22.247:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-22-247&limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:18.364862 kubelet[2329]: W1002 19:14:18.364809 2329 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.22.247:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:18.365455 kubelet[2329]: E1002 19:14:18.364874 2329 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.22.247:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:18.471079 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3662711039.mount: Deactivated successfully. Oct 2 19:14:18.480302 env[1657]: time="2023-10-02T19:14:18.480241989Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.488594 env[1657]: time="2023-10-02T19:14:18.488522518Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.490264 env[1657]: time="2023-10-02T19:14:18.490197691Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.493807 env[1657]: time="2023-10-02T19:14:18.493729003Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.495949 env[1657]: time="2023-10-02T19:14:18.495879287Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.498437 env[1657]: time="2023-10-02T19:14:18.498359914Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.506389 env[1657]: time="2023-10-02T19:14:18.506333840Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.512717 env[1657]: time="2023-10-02T19:14:18.512663326Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.514335 env[1657]: time="2023-10-02T19:14:18.514289715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.515980 env[1657]: time="2023-10-02T19:14:18.515938114Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.517705 env[1657]: time="2023-10-02T19:14:18.517654847Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.519722 env[1657]: time="2023-10-02T19:14:18.519672844Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:18.592975 env[1657]: time="2023-10-02T19:14:18.592822967Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:18.592975 env[1657]: time="2023-10-02T19:14:18.592899666Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:18.592975 env[1657]: time="2023-10-02T19:14:18.592926572Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:18.594118 env[1657]: time="2023-10-02T19:14:18.594008471Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/12cd30c8c90f0437e65e394dc4b0d23559d43521130746bc4de077573e2ba4ec pid=2410 runtime=io.containerd.runc.v2 Oct 2 19:14:18.611974 env[1657]: time="2023-10-02T19:14:18.611770216Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:18.612147 env[1657]: time="2023-10-02T19:14:18.611969914Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:18.612147 env[1657]: time="2023-10-02T19:14:18.612062311Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:18.613008 env[1657]: time="2023-10-02T19:14:18.612826697Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9202b85507a938e36dcaa5a5f0b165549457d2d1ebfafcca80bec3e3567a2b83 pid=2430 runtime=io.containerd.runc.v2 Oct 2 19:14:18.615081 env[1657]: time="2023-10-02T19:14:18.614877012Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:18.615220 env[1657]: time="2023-10-02T19:14:18.615121907Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:18.615285 env[1657]: time="2023-10-02T19:14:18.615195989Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:18.616597 env[1657]: time="2023-10-02T19:14:18.616465982Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3edf69593a0480f7071fdb00c8d4ee8399c8481dbed783beef0f8824d3eddedf pid=2424 runtime=io.containerd.runc.v2 Oct 2 19:14:18.625544 kubelet[2329]: E1002 19:14:18.625472 2329 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.22.247:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-247?timeout=10s": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:18.648294 systemd[1]: Started cri-containerd-12cd30c8c90f0437e65e394dc4b0d23559d43521130746bc4de077573e2ba4ec.scope. Oct 2 19:14:18.669333 kubelet[2329]: E1002 19:14:18.669142 2329 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-22-247.178a60448c9fbe9f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-22-247", UID:"ip-172-31-22-247", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-22-247"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 14, 17, 191734943, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 14, 17, 191734943, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.22.247:6443/api/v1/namespaces/default/events": dial tcp 172.31.22.247:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:14:18.685633 systemd[1]: Started cri-containerd-9202b85507a938e36dcaa5a5f0b165549457d2d1ebfafcca80bec3e3567a2b83.scope. Oct 2 19:14:18.706768 systemd[1]: Started cri-containerd-3edf69593a0480f7071fdb00c8d4ee8399c8481dbed783beef0f8824d3eddedf.scope. Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.748000 audit: BPF prog-id=73 op=LOAD Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2430 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303262383535303761393338653336646361613561356630623136 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2430 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303262383535303761393338653336646361613561356630623136 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.750000 audit: BPF prog-id=74 op=LOAD Oct 2 19:14:18.750000 audit[2458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2430 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303262383535303761393338653336646361613561356630623136 Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.756166 kubelet[2329]: I1002 19:14:18.755986 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-247" Oct 2 19:14:18.756853 kubelet[2329]: W1002 19:14:18.756758 2329 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.22.247:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:18.757028 kubelet[2329]: E1002 19:14:18.756862 2329 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.22.247:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:18.758219 kubelet[2329]: E1002 19:14:18.758157 2329 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.247:6443/api/v1/nodes\": dial tcp 172.31.22.247:6443: connect: connection refused" node="ip-172-31-22-247" Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.752000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.752000 audit: BPF prog-id=75 op=LOAD Oct 2 19:14:18.752000 audit[2458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2430 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303262383535303761393338653336646361613561356630623136 Oct 2 19:14:18.761000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:14:18.761000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.762000 audit: BPF prog-id=76 op=LOAD Oct 2 19:14:18.762000 audit[2458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2430 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303262383535303761393338653336646361613561356630623136 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.775000 audit: BPF prog-id=77 op=LOAD Oct 2 19:14:18.776000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.776000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2410 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636433306338633930663034333765363565333934646334623064 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2410 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636433306338633930663034333765363565333934646334623064 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.777000 audit: BPF prog-id=78 op=LOAD Oct 2 19:14:18.777000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2410 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636433306338633930663034333765363565333934646334623064 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.779000 audit: BPF prog-id=79 op=LOAD Oct 2 19:14:18.779000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2410 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636433306338633930663034333765363565333934646334623064 Oct 2 19:14:18.782000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:14:18.782000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { perfmon } for pid=2438 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit[2438]: AVC avc: denied { bpf } for pid=2438 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.782000 audit: BPF prog-id=80 op=LOAD Oct 2 19:14:18.782000 audit[2438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2410 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132636433306338633930663034333765363565333934646334623064 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.803000 audit: BPF prog-id=81 op=LOAD Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2424 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365646636393539336130343830663730373166646230306338643465 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2424 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365646636393539336130343830663730373166646230306338643465 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.804000 audit: BPF prog-id=82 op=LOAD Oct 2 19:14:18.804000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2424 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365646636393539336130343830663730373166646230306338643465 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.806000 audit: BPF prog-id=83 op=LOAD Oct 2 19:14:18.806000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2424 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365646636393539336130343830663730373166646230306338643465 Oct 2 19:14:18.810000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:14:18.810000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:18.810000 audit: BPF prog-id=84 op=LOAD Oct 2 19:14:18.810000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2424 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365646636393539336130343830663730373166646230306338643465 Oct 2 19:14:18.870854 env[1657]: time="2023-10-02T19:14:18.862176517Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-22-247,Uid:0383d64010f7e21ab02956c4461732c0,Namespace:kube-system,Attempt:0,} returns sandbox id \"9202b85507a938e36dcaa5a5f0b165549457d2d1ebfafcca80bec3e3567a2b83\"" Oct 2 19:14:18.879376 env[1657]: time="2023-10-02T19:14:18.879286615Z" level=info msg="CreateContainer within sandbox \"9202b85507a938e36dcaa5a5f0b165549457d2d1ebfafcca80bec3e3567a2b83\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:14:18.895668 env[1657]: time="2023-10-02T19:14:18.895595350Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-22-247,Uid:d2065a7aadd973de4dafbd5542404ab3,Namespace:kube-system,Attempt:0,} returns sandbox id \"12cd30c8c90f0437e65e394dc4b0d23559d43521130746bc4de077573e2ba4ec\"" Oct 2 19:14:18.903433 env[1657]: time="2023-10-02T19:14:18.903268252Z" level=info msg="CreateContainer within sandbox \"12cd30c8c90f0437e65e394dc4b0d23559d43521130746bc4de077573e2ba4ec\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:14:18.925247 env[1657]: time="2023-10-02T19:14:18.925188197Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-22-247,Uid:4805a4a50f749254122a6bbaa22c3fde,Namespace:kube-system,Attempt:0,} returns sandbox id \"3edf69593a0480f7071fdb00c8d4ee8399c8481dbed783beef0f8824d3eddedf\"" Oct 2 19:14:18.931530 env[1657]: time="2023-10-02T19:14:18.931445606Z" level=info msg="CreateContainer within sandbox \"9202b85507a938e36dcaa5a5f0b165549457d2d1ebfafcca80bec3e3567a2b83\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"6579ad9ea92f3272c1b648848da0ce60ea12e79b76852ff3c0dfe829c390522b\"" Oct 2 19:14:18.935310 env[1657]: time="2023-10-02T19:14:18.935231244Z" level=info msg="CreateContainer within sandbox \"3edf69593a0480f7071fdb00c8d4ee8399c8481dbed783beef0f8824d3eddedf\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:14:18.936448 env[1657]: time="2023-10-02T19:14:18.936361495Z" level=info msg="StartContainer for \"6579ad9ea92f3272c1b648848da0ce60ea12e79b76852ff3c0dfe829c390522b\"" Oct 2 19:14:18.940832 env[1657]: time="2023-10-02T19:14:18.940766954Z" level=info msg="CreateContainer within sandbox \"12cd30c8c90f0437e65e394dc4b0d23559d43521130746bc4de077573e2ba4ec\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"32a4828965acb5e04bcb72d727f976a0874cbc7c0086607d8d3ab97249511c9c\"" Oct 2 19:14:18.942086 env[1657]: time="2023-10-02T19:14:18.942020757Z" level=info msg="StartContainer for \"32a4828965acb5e04bcb72d727f976a0874cbc7c0086607d8d3ab97249511c9c\"" Oct 2 19:14:18.959467 env[1657]: time="2023-10-02T19:14:18.959400435Z" level=info msg="CreateContainer within sandbox \"3edf69593a0480f7071fdb00c8d4ee8399c8481dbed783beef0f8824d3eddedf\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"63b602716a7bbdea0a895cf93e344afe4926ab9ad93ca93d8c4c881ba884ab5e\"" Oct 2 19:14:18.960398 env[1657]: time="2023-10-02T19:14:18.960350550Z" level=info msg="StartContainer for \"63b602716a7bbdea0a895cf93e344afe4926ab9ad93ca93d8c4c881ba884ab5e\"" Oct 2 19:14:19.007596 kubelet[2329]: W1002 19:14:19.007500 2329 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.22.247:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:19.007750 kubelet[2329]: E1002 19:14:19.007610 2329 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.22.247:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:19.019063 systemd[1]: Started cri-containerd-32a4828965acb5e04bcb72d727f976a0874cbc7c0086607d8d3ab97249511c9c.scope. Oct 2 19:14:19.026187 systemd[1]: Started cri-containerd-6579ad9ea92f3272c1b648848da0ce60ea12e79b76852ff3c0dfe829c390522b.scope. Oct 2 19:14:19.059744 systemd[1]: Started cri-containerd-63b602716a7bbdea0a895cf93e344afe4926ab9ad93ca93d8c4c881ba884ab5e.scope. Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.098000 audit: BPF prog-id=85 op=LOAD Oct 2 19:14:19.099000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.099000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2410 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613438323839363561636235653034626362373264373237663937 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2410 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613438323839363561636235653034626362373264373237663937 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.100000 audit: BPF prog-id=86 op=LOAD Oct 2 19:14:19.100000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2410 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613438323839363561636235653034626362373264373237663937 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.102000 audit: BPF prog-id=87 op=LOAD Oct 2 19:14:19.102000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2410 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613438323839363561636235653034626362373264373237663937 Oct 2 19:14:19.104000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:14:19.104000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.104000 audit: BPF prog-id=88 op=LOAD Oct 2 19:14:19.104000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2410 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613438323839363561636235653034626362373264373237663937 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.113000 audit: BPF prog-id=89 op=LOAD Oct 2 19:14:19.114000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.114000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2430 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373961643965613932663332373263316236343838343864613063 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2430 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373961643965613932663332373263316236343838343864613063 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.115000 audit: BPF prog-id=90 op=LOAD Oct 2 19:14:19.115000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2430 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373961643965613932663332373263316236343838343864613063 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.117000 audit: BPF prog-id=91 op=LOAD Oct 2 19:14:19.117000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2430 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373961643965613932663332373263316236343838343864613063 Oct 2 19:14:19.119000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:14:19.119000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.119000 audit: BPF prog-id=92 op=LOAD Oct 2 19:14:19.119000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2430 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373961643965613932663332373263316236343838343864613063 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.177000 audit: BPF prog-id=93 op=LOAD Oct 2 19:14:19.179000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.179000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2424 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623630323731366137626264656130613839356366393365333434 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2424 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623630323731366137626264656130613839356366393365333434 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.180000 audit: BPF prog-id=94 op=LOAD Oct 2 19:14:19.180000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2424 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623630323731366137626264656130613839356366393365333434 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.183000 audit: BPF prog-id=95 op=LOAD Oct 2 19:14:19.183000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2424 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623630323731366137626264656130613839356366393365333434 Oct 2 19:14:19.184000 audit: BPF prog-id=95 op=UNLOAD Oct 2 19:14:19.184000 audit: BPF prog-id=94 op=UNLOAD Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.185000 audit: BPF prog-id=96 op=LOAD Oct 2 19:14:19.185000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2424 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:19.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633623630323731366137626264656130613839356366393365333434 Oct 2 19:14:19.230619 env[1657]: time="2023-10-02T19:14:19.230526735Z" level=info msg="StartContainer for \"32a4828965acb5e04bcb72d727f976a0874cbc7c0086607d8d3ab97249511c9c\" returns successfully" Oct 2 19:14:19.237942 kubelet[2329]: E1002 19:14:19.237882 2329 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.22.247:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.22.247:6443: connect: connection refused Oct 2 19:14:19.244095 env[1657]: time="2023-10-02T19:14:19.244022085Z" level=info msg="StartContainer for \"6579ad9ea92f3272c1b648848da0ce60ea12e79b76852ff3c0dfe829c390522b\" returns successfully" Oct 2 19:14:19.272340 env[1657]: time="2023-10-02T19:14:19.272248457Z" level=info msg="StartContainer for \"63b602716a7bbdea0a895cf93e344afe4926ab9ad93ca93d8c4c881ba884ab5e\" returns successfully" Oct 2 19:14:20.360270 kubelet[2329]: I1002 19:14:20.360223 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-247" Oct 2 19:14:21.419655 update_engine[1653]: I1002 19:14:21.419066 1653 update_attempter.cc:505] Updating boot flags... Oct 2 19:14:23.219169 kernel: kauditd_printk_skb: 660 callbacks suppressed Oct 2 19:14:23.219338 kernel: audit: type=1400 audit(1696274063.206:726): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.206000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.206000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.233680 kernel: audit: type=1400 audit(1696274063.206:727): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:23.206000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000948a40 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:23.250609 kernel: audit: type=1300 audit(1696274063.206:727): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000948a40 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:23.206000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:23.261343 kernel: audit: type=1327 audit(1696274063.206:727): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:23.206000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40002f7020 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:23.274121 kernel: audit: type=1300 audit(1696274063.206:726): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40002f7020 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:23.206000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:23.284930 kernel: audit: type=1327 audit(1696274063.206:726): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:24.881000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:24.881000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4003e26000 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:14:24.906365 kernel: audit: type=1400 audit(1696274064.881:728): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:24.906506 kernel: audit: type=1300 audit(1696274064.881:728): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4003e26000 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:14:24.881000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:24.917593 kernel: audit: type=1327 audit(1696274064.881:728): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:24.886000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:24.886000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4002b1f2c0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:14:24.940039 kernel: audit: type=1400 audit(1696274064.886:729): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:24.886000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:24.894000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:24.894000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4003d95a70 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:14:24.894000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:24.903000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:24.903000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003d95f50 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:14:24.903000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:24.940000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:24.940000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=40026c1640 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:14:24.940000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:24.946000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:24.946000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=40029d6e10 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:14:24.946000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:25.206037 kubelet[2329]: I1002 19:14:25.205856 2329 apiserver.go:52] "Watching apiserver" Oct 2 19:14:25.232063 kubelet[2329]: E1002 19:14:25.232010 2329 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-22-247\" not found" node="ip-172-31-22-247" Oct 2 19:14:25.258253 kubelet[2329]: I1002 19:14:25.258189 2329 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-22-247" Oct 2 19:14:25.316891 kubelet[2329]: I1002 19:14:25.316833 2329 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:14:25.395344 kubelet[2329]: I1002 19:14:25.395275 2329 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:14:27.808825 systemd[1]: Reloading. Oct 2 19:14:27.985974 /usr/lib/systemd/system-generators/torcx-generator[2922]: time="2023-10-02T19:14:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:14:27.995156 /usr/lib/systemd/system-generators/torcx-generator[2922]: time="2023-10-02T19:14:27Z" level=info msg="torcx already run" Oct 2 19:14:28.278666 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:14:28.278703 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:14:28.324298 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:14:28.564580 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:14:28.564706 kernel: audit: type=1400 audit(1696274068.554:734): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575692 kernel: audit: type=1400 audit(1696274068.554:735): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.584046 kernel: audit: type=1400 audit(1696274068.554:736): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.591958 kernel: audit: type=1400 audit(1696274068.554:737): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.592058 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.601545 kernel: audit: type=1400 audit(1696274068.554:738): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.601608 kernel: audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.611666 kernel: audit: type=1400 audit(1696274068.554:739): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.611745 kernel: audit: backlog limit exceeded Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.626723 kernel: audit: type=1400 audit(1696274068.554:740): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit: BPF prog-id=97 op=LOAD Oct 2 19:14:28.556000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit: BPF prog-id=98 op=LOAD Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.563000 audit: BPF prog-id=99 op=LOAD Oct 2 19:14:28.563000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:14:28.563000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.573000 audit: BPF prog-id=100 op=LOAD Oct 2 19:14:28.573000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.582000 audit: BPF prog-id=101 op=LOAD Oct 2 19:14:28.583000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.590000 audit: BPF prog-id=102 op=LOAD Oct 2 19:14:28.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.627000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.629000 audit: BPF prog-id=108 op=LOAD Oct 2 19:14:28.629000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit: BPF prog-id=109 op=LOAD Oct 2 19:14:28.632000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.633000 audit: BPF prog-id=110 op=LOAD Oct 2 19:14:28.633000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit: BPF prog-id=111 op=LOAD Oct 2 19:14:28.635000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.635000 audit: BPF prog-id=112 op=LOAD Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.636000 audit: BPF prog-id=113 op=LOAD Oct 2 19:14:28.636000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:14:28.636000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.646000 audit: BPF prog-id=114 op=LOAD Oct 2 19:14:28.646000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit: BPF prog-id=115 op=LOAD Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit: BPF prog-id=116 op=LOAD Oct 2 19:14:28.648000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:14:28.648000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.649000 audit: BPF prog-id=117 op=LOAD Oct 2 19:14:28.649000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:14:28.706148 systemd[1]: Stopping kubelet.service... Oct 2 19:14:28.724661 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:14:28.725111 systemd[1]: Stopped kubelet.service. Oct 2 19:14:28.725211 systemd[1]: kubelet.service: Consumed 1.841s CPU time. Oct 2 19:14:28.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:28.730985 systemd[1]: Started kubelet.service. Oct 2 19:14:28.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:28.891000 audit[2988]: USER_ACCT pid=2988 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:28.900296 sudo[2988]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:14:28.901000 audit[2988]: CRED_REFR pid=2988 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:28.903120 sudo[2988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:14:28.906000 audit[2988]: USER_START pid=2988 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:28.932572 kubelet[2978]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:14:28.932572 kubelet[2978]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:28.933158 kubelet[2978]: I1002 19:14:28.932760 2978 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:14:28.935554 kubelet[2978]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:14:28.935554 kubelet[2978]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:28.947121 kubelet[2978]: I1002 19:14:28.947064 2978 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:14:28.947121 kubelet[2978]: I1002 19:14:28.947112 2978 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:14:28.947593 kubelet[2978]: I1002 19:14:28.947553 2978 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:14:28.950098 kubelet[2978]: I1002 19:14:28.950049 2978 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:14:28.953423 kubelet[2978]: I1002 19:14:28.953388 2978 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:14:28.960223 kubelet[2978]: W1002 19:14:28.960174 2978 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:14:28.961787 kubelet[2978]: I1002 19:14:28.961742 2978 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:14:28.962396 kubelet[2978]: I1002 19:14:28.962359 2978 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:14:28.962531 kubelet[2978]: I1002 19:14:28.962497 2978 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:14:28.962693 kubelet[2978]: I1002 19:14:28.962593 2978 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:14:28.962693 kubelet[2978]: I1002 19:14:28.962619 2978 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:14:28.962824 kubelet[2978]: I1002 19:14:28.962755 2978 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:28.969864 kubelet[2978]: I1002 19:14:28.969814 2978 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:14:28.969864 kubelet[2978]: I1002 19:14:28.969860 2978 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:14:28.970135 kubelet[2978]: I1002 19:14:28.970035 2978 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:14:28.970135 kubelet[2978]: I1002 19:14:28.970066 2978 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:14:28.975373 kubelet[2978]: I1002 19:14:28.975322 2978 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:14:28.976716 kubelet[2978]: I1002 19:14:28.976674 2978 server.go:1186] "Started kubelet" Oct 2 19:14:28.980000 audit[2978]: AVC avc: denied { mac_admin } for pid=2978 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.980000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:28.980000 audit[2978]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400097f8f0 a1=4000ede0f0 a2=400097f8c0 a3=25 items=0 ppid=1 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:28.980000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:28.982362 kubelet[2978]: I1002 19:14:28.981887 2978 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:14:28.982362 kubelet[2978]: I1002 19:14:28.981962 2978 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:14:28.980000 audit[2978]: AVC avc: denied { mac_admin } for pid=2978 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:28.980000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:28.980000 audit[2978]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ea0300 a1=4000ede108 a2=400097f980 a3=25 items=0 ppid=1 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:28.980000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:28.991086 kubelet[2978]: I1002 19:14:28.991036 2978 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:14:28.995245 kubelet[2978]: I1002 19:14:28.995186 2978 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:14:28.996376 kubelet[2978]: I1002 19:14:28.996333 2978 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:14:29.011023 kubelet[2978]: E1002 19:14:29.004234 2978 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:14:29.011340 kubelet[2978]: E1002 19:14:29.011311 2978 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:14:29.032814 kubelet[2978]: I1002 19:14:29.009167 2978 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:14:29.038603 kubelet[2978]: I1002 19:14:29.010087 2978 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:14:29.168480 kubelet[2978]: I1002 19:14:29.168355 2978 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-247" Oct 2 19:14:29.193782 kubelet[2978]: I1002 19:14:29.193743 2978 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-22-247" Oct 2 19:14:29.194132 kubelet[2978]: I1002 19:14:29.194097 2978 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-22-247" Oct 2 19:14:29.304125 kubelet[2978]: I1002 19:14:29.303224 2978 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:14:29.304125 kubelet[2978]: I1002 19:14:29.303276 2978 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:14:29.304125 kubelet[2978]: I1002 19:14:29.303309 2978 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:29.304125 kubelet[2978]: I1002 19:14:29.303521 2978 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:14:29.304125 kubelet[2978]: I1002 19:14:29.303545 2978 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:14:29.304125 kubelet[2978]: I1002 19:14:29.303626 2978 policy_none.go:49] "None policy: Start" Oct 2 19:14:29.305078 kubelet[2978]: I1002 19:14:29.304730 2978 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:14:29.305078 kubelet[2978]: I1002 19:14:29.304780 2978 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:14:29.306031 kubelet[2978]: I1002 19:14:29.305266 2978 state_mem.go:75] "Updated machine memory state" Oct 2 19:14:29.316973 kubelet[2978]: I1002 19:14:29.316922 2978 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:14:29.317149 kubelet[2978]: I1002 19:14:29.317080 2978 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:14:29.315000 audit[2978]: AVC avc: denied { mac_admin } for pid=2978 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:29.315000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:29.315000 audit[2978]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40014c0f00 a1=4001371de8 a2=40014c0ed0 a3=25 items=0 ppid=1 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:29.315000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:29.321664 kubelet[2978]: I1002 19:14:29.321615 2978 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:14:29.389400 kubelet[2978]: I1002 19:14:29.389347 2978 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:14:29.444969 kubelet[2978]: I1002 19:14:29.444846 2978 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:14:29.444969 kubelet[2978]: I1002 19:14:29.444887 2978 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:14:29.444969 kubelet[2978]: I1002 19:14:29.444920 2978 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:14:29.445223 kubelet[2978]: E1002 19:14:29.445017 2978 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:14:29.545482 kubelet[2978]: I1002 19:14:29.545430 2978 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:29.545824 kubelet[2978]: I1002 19:14:29.545800 2978 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:29.546425 kubelet[2978]: I1002 19:14:29.546395 2978 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:29.563062 kubelet[2978]: E1002 19:14:29.563015 2978 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-22-247\" already exists" pod="kube-system/kube-scheduler-ip-172-31-22-247" Oct 2 19:14:29.662452 kubelet[2978]: I1002 19:14:29.662405 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0383d64010f7e21ab02956c4461732c0-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-22-247\" (UID: \"0383d64010f7e21ab02956c4461732c0\") " pod="kube-system/kube-apiserver-ip-172-31-22-247" Oct 2 19:14:29.662620 kubelet[2978]: I1002 19:14:29.662481 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:29.662620 kubelet[2978]: I1002 19:14:29.662528 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-k8s-certs\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:29.662620 kubelet[2978]: I1002 19:14:29.662589 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:29.662815 kubelet[2978]: I1002 19:14:29.662633 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0383d64010f7e21ab02956c4461732c0-ca-certs\") pod \"kube-apiserver-ip-172-31-22-247\" (UID: \"0383d64010f7e21ab02956c4461732c0\") " pod="kube-system/kube-apiserver-ip-172-31-22-247" Oct 2 19:14:29.662815 kubelet[2978]: I1002 19:14:29.662684 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0383d64010f7e21ab02956c4461732c0-k8s-certs\") pod \"kube-apiserver-ip-172-31-22-247\" (UID: \"0383d64010f7e21ab02956c4461732c0\") " pod="kube-system/kube-apiserver-ip-172-31-22-247" Oct 2 19:14:29.662815 kubelet[2978]: I1002 19:14:29.662726 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4805a4a50f749254122a6bbaa22c3fde-kubeconfig\") pod \"kube-scheduler-ip-172-31-22-247\" (UID: \"4805a4a50f749254122a6bbaa22c3fde\") " pod="kube-system/kube-scheduler-ip-172-31-22-247" Oct 2 19:14:29.662815 kubelet[2978]: I1002 19:14:29.662767 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-ca-certs\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:29.662815 kubelet[2978]: I1002 19:14:29.662810 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d2065a7aadd973de4dafbd5542404ab3-kubeconfig\") pod \"kube-controller-manager-ip-172-31-22-247\" (UID: \"d2065a7aadd973de4dafbd5542404ab3\") " pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:29.983493 kubelet[2978]: I1002 19:14:29.983430 2978 apiserver.go:52] "Watching apiserver" Oct 2 19:14:30.033920 sudo[2988]: pam_unix(sudo:session): session closed for user root Oct 2 19:14:30.033000 audit[2988]: USER_END pid=2988 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:30.033000 audit[2988]: CRED_DISP pid=2988 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:30.039782 kubelet[2978]: I1002 19:14:30.039730 2978 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:14:30.066106 kubelet[2978]: I1002 19:14:30.066058 2978 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:14:30.438963 kubelet[2978]: I1002 19:14:30.438925 2978 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-22-247" podStartSLOduration=1.438758892 pod.CreationTimestamp="2023-10-02 19:14:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:30.434220385 +0000 UTC m=+1.675014907" watchObservedRunningTime="2023-10-02 19:14:30.438758892 +0000 UTC m=+1.679553414" Oct 2 19:14:30.783078 kubelet[2978]: E1002 19:14:30.782947 2978 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-22-247\" already exists" pod="kube-system/kube-scheduler-ip-172-31-22-247" Oct 2 19:14:30.980952 kubelet[2978]: E1002 19:14:30.980897 2978 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-22-247\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-22-247" Oct 2 19:14:32.383418 kubelet[2978]: I1002 19:14:32.383360 2978 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-22-247" podStartSLOduration=5.383286578 pod.CreationTimestamp="2023-10-02 19:14:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:31.981551951 +0000 UTC m=+3.222346473" watchObservedRunningTime="2023-10-02 19:14:32.383286578 +0000 UTC m=+3.624081112" Oct 2 19:14:32.658468 sudo[1920]: pam_unix(sudo:session): session closed for user root Oct 2 19:14:32.657000 audit[1920]: USER_END pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:32.657000 audit[1920]: CRED_DISP pid=1920 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:32.683267 sshd[1917]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:32.685000 audit[1917]: USER_END pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:14:32.685000 audit[1917]: CRED_DISP pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:14:32.689202 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:14:32.689575 systemd[1]: session-7.scope: Consumed 10.834s CPU time. Oct 2 19:14:32.690841 systemd[1]: sshd@6-172.31.22.247:22-139.178.89.65:39124.service: Deactivated successfully. Oct 2 19:14:32.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.22.247:22-139.178.89.65:39124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:32.692276 systemd-logind[1652]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:14:32.694096 systemd-logind[1652]: Removed session 7. Oct 2 19:14:34.859803 kubelet[2978]: I1002 19:14:34.859746 2978 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-22-247" podStartSLOduration=5.859678052 pod.CreationTimestamp="2023-10-02 19:14:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:32.383735946 +0000 UTC m=+3.624530456" watchObservedRunningTime="2023-10-02 19:14:34.859678052 +0000 UTC m=+6.100472598" Oct 2 19:14:38.783422 kernel: kauditd_printk_skb: 364 callbacks suppressed Oct 2 19:14:38.783641 kernel: audit: type=1400 audit(1696274078.770:940): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:38.770000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:38.776000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:38.794745 kernel: audit: type=1400 audit(1696274078.776:941): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:38.776000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd6b60 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:38.807737 kernel: audit: type=1300 audit(1696274078.776:941): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd6b60 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:38.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:38.819134 kernel: audit: type=1327 audit(1696274078.776:941): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:38.819266 kernel: audit: type=1400 audit(1696274078.776:942): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:38.776000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:38.776000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd6ba0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:38.841230 kernel: audit: type=1300 audit(1696274078.776:942): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd6ba0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:38.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:38.851978 kernel: audit: type=1327 audit(1696274078.776:942): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:38.776000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:38.861837 kernel: audit: type=1400 audit(1696274078.776:943): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:38.861980 kernel: audit: type=1300 audit(1696274078.776:943): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd6be0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:38.776000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd6be0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:38.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:38.884583 kernel: audit: type=1327 audit(1696274078.776:943): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:38.770000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400030bc20 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:38.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:41.033000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:14:41.033000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001128080 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:14:41.033000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:41.235639 kubelet[2978]: I1002 19:14:41.235556 2978 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:14:41.236366 env[1657]: time="2023-10-02T19:14:41.236208033Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:14:41.237263 kubelet[2978]: I1002 19:14:41.237227 2978 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:14:42.063810 kubelet[2978]: I1002 19:14:42.063762 2978 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:42.077217 systemd[1]: Created slice kubepods-besteffort-pod4810fa68_d587_4896_a53b_272832b2bde3.slice. Oct 2 19:14:42.089963 kubelet[2978]: W1002 19:14:42.089899 2978 reflector.go:424] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:14:42.090179 kubelet[2978]: E1002 19:14:42.089984 2978 reflector.go:140] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:14:42.090179 kubelet[2978]: W1002 19:14:42.090195 2978 reflector.go:424] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:14:42.090379 kubelet[2978]: E1002 19:14:42.090225 2978 reflector.go:140] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:14:42.101542 kubelet[2978]: I1002 19:14:42.101481 2978 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:42.112933 systemd[1]: Created slice kubepods-burstable-pod878064ee_fd7d_40fc_910c_0067678585ef.slice. Oct 2 19:14:42.140223 kubelet[2978]: I1002 19:14:42.140134 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4810fa68-d587-4896-a53b-272832b2bde3-xtables-lock\") pod \"kube-proxy-x96hl\" (UID: \"4810fa68-d587-4896-a53b-272832b2bde3\") " pod="kube-system/kube-proxy-x96hl" Oct 2 19:14:42.140427 kubelet[2978]: I1002 19:14:42.140302 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-hostproc\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.140501 kubelet[2978]: I1002 19:14:42.140427 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-xtables-lock\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.140565 kubelet[2978]: I1002 19:14:42.140523 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fwc8f\" (UniqueName: \"kubernetes.io/projected/878064ee-fd7d-40fc-910c-0067678585ef-kube-api-access-fwc8f\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.140669 kubelet[2978]: I1002 19:14:42.140626 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-bpf-maps\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.140801 kubelet[2978]: I1002 19:14:42.140766 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-host-proc-sys-net\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.140889 kubelet[2978]: I1002 19:14:42.140875 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/4810fa68-d587-4896-a53b-272832b2bde3-kube-proxy\") pod \"kube-proxy-x96hl\" (UID: \"4810fa68-d587-4896-a53b-272832b2bde3\") " pod="kube-system/kube-proxy-x96hl" Oct 2 19:14:42.141330 kubelet[2978]: I1002 19:14:42.141254 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-lib-modules\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.141480 kubelet[2978]: I1002 19:14:42.141409 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/878064ee-fd7d-40fc-910c-0067678585ef-clustermesh-secrets\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.141556 kubelet[2978]: I1002 19:14:42.141488 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4810fa68-d587-4896-a53b-272832b2bde3-lib-modules\") pod \"kube-proxy-x96hl\" (UID: \"4810fa68-d587-4896-a53b-272832b2bde3\") " pod="kube-system/kube-proxy-x96hl" Oct 2 19:14:42.141627 kubelet[2978]: I1002 19:14:42.141561 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2m5n4\" (UniqueName: \"kubernetes.io/projected/4810fa68-d587-4896-a53b-272832b2bde3-kube-api-access-2m5n4\") pod \"kube-proxy-x96hl\" (UID: \"4810fa68-d587-4896-a53b-272832b2bde3\") " pod="kube-system/kube-proxy-x96hl" Oct 2 19:14:42.141704 kubelet[2978]: I1002 19:14:42.141644 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-etc-cni-netd\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.141773 kubelet[2978]: I1002 19:14:42.141694 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-host-proc-sys-kernel\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.141773 kubelet[2978]: I1002 19:14:42.141770 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cilium-run\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.141894 kubelet[2978]: I1002 19:14:42.141839 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/878064ee-fd7d-40fc-910c-0067678585ef-hubble-tls\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.141967 kubelet[2978]: I1002 19:14:42.141907 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cilium-cgroup\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.142066 kubelet[2978]: I1002 19:14:42.142010 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cni-path\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.142131 kubelet[2978]: I1002 19:14:42.142098 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/878064ee-fd7d-40fc-910c-0067678585ef-cilium-config-path\") pod \"cilium-qbsfw\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " pod="kube-system/cilium-qbsfw" Oct 2 19:14:42.223854 kubelet[2978]: I1002 19:14:42.223762 2978 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:14:42.234612 systemd[1]: Created slice kubepods-besteffort-pod5b52a71c_332b_414f_8f63_7d6d29cdb0dc.slice. Oct 2 19:14:42.243854 kubelet[2978]: I1002 19:14:42.243796 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5b52a71c-332b-414f-8f63-7d6d29cdb0dc-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-rjm44\" (UID: \"5b52a71c-332b-414f-8f63-7d6d29cdb0dc\") " pod="kube-system/cilium-operator-f59cbd8c6-rjm44" Oct 2 19:14:42.244448 kubelet[2978]: I1002 19:14:42.244068 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wc5f7\" (UniqueName: \"kubernetes.io/projected/5b52a71c-332b-414f-8f63-7d6d29cdb0dc-kube-api-access-wc5f7\") pod \"cilium-operator-f59cbd8c6-rjm44\" (UID: \"5b52a71c-332b-414f-8f63-7d6d29cdb0dc\") " pod="kube-system/cilium-operator-f59cbd8c6-rjm44" Oct 2 19:14:43.254849 kubelet[2978]: E1002 19:14:43.254808 2978 configmap.go:199] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:14:43.255856 kubelet[2978]: E1002 19:14:43.255666 2978 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/4810fa68-d587-4896-a53b-272832b2bde3-kube-proxy podName:4810fa68-d587-4896-a53b-272832b2bde3 nodeName:}" failed. No retries permitted until 2023-10-02 19:14:43.755627811 +0000 UTC m=+14.996422309 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/4810fa68-d587-4896-a53b-272832b2bde3-kube-proxy") pod "kube-proxy-x96hl" (UID: "4810fa68-d587-4896-a53b-272832b2bde3") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:14:43.311091 kubelet[2978]: E1002 19:14:43.311034 2978 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:14:43.311091 kubelet[2978]: E1002 19:14:43.311084 2978 projected.go:198] Error preparing data for projected volume kube-api-access-2m5n4 for pod kube-system/kube-proxy-x96hl: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:14:43.311518 kubelet[2978]: E1002 19:14:43.311472 2978 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/4810fa68-d587-4896-a53b-272832b2bde3-kube-api-access-2m5n4 podName:4810fa68-d587-4896-a53b-272832b2bde3 nodeName:}" failed. No retries permitted until 2023-10-02 19:14:43.811172675 +0000 UTC m=+15.051967185 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-2m5n4" (UniqueName: "kubernetes.io/projected/4810fa68-d587-4896-a53b-272832b2bde3-kube-api-access-2m5n4") pod "kube-proxy-x96hl" (UID: "4810fa68-d587-4896-a53b-272832b2bde3") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:14:43.621735 env[1657]: time="2023-10-02T19:14:43.620932690Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-qbsfw,Uid:878064ee-fd7d-40fc-910c-0067678585ef,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:43.669483 env[1657]: time="2023-10-02T19:14:43.669366257Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:43.669823 env[1657]: time="2023-10-02T19:14:43.669721395Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:43.670016 env[1657]: time="2023-10-02T19:14:43.669946589Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:43.670945 env[1657]: time="2023-10-02T19:14:43.670844474Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9 pid=3081 runtime=io.containerd.runc.v2 Oct 2 19:14:43.714180 systemd[1]: Started cri-containerd-23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9.scope. Oct 2 19:14:43.741238 env[1657]: time="2023-10-02T19:14:43.741182520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-rjm44,Uid:5b52a71c-332b-414f-8f63-7d6d29cdb0dc,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.775364 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 19:14:43.775457 kernel: audit: type=1400 audit(1696274083.771:945): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.791638 kernel: audit: type=1400 audit(1696274083.771:946): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.792250 kernel: audit: type=1400 audit(1696274083.771:947): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.807138 kernel: audit: type=1400 audit(1696274083.771:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.817212 kernel: audit: type=1400 audit(1696274083.771:949): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.839496 kernel: audit: type=1400 audit(1696274083.771:950): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.839643 kernel: audit: type=1400 audit(1696274083.771:951): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.849753 kernel: audit: type=1400 audit(1696274083.771:952): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.861589 kernel: audit: type=1400 audit(1696274083.771:953): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.871260 kernel: audit: type=1400 audit(1696274083.771:954): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.771000 audit: BPF prog-id=118 op=LOAD Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3081 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233633937333436313938303263303263343232343239323665373939 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3081 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233633937333436313938303263303263343232343239323665373939 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit: BPF prog-id=119 op=LOAD Oct 2 19:14:43.782000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3081 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233633937333436313938303263303263343232343239323665373939 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit: BPF prog-id=120 op=LOAD Oct 2 19:14:43.782000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3081 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233633937333436313938303263303263343232343239323665373939 Oct 2 19:14:43.782000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:14:43.782000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { perfmon } for pid=3092 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit[3092]: AVC avc: denied { bpf } for pid=3092 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.782000 audit: BPF prog-id=121 op=LOAD Oct 2 19:14:43.782000 audit[3092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3081 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233633937333436313938303263303263343232343239323665373939 Oct 2 19:14:43.876911 env[1657]: time="2023-10-02T19:14:43.862964210Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:43.876911 env[1657]: time="2023-10-02T19:14:43.863405489Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:43.876911 env[1657]: time="2023-10-02T19:14:43.863438683Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:43.876911 env[1657]: time="2023-10-02T19:14:43.871643537Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac pid=3117 runtime=io.containerd.runc.v2 Oct 2 19:14:43.883387 env[1657]: time="2023-10-02T19:14:43.883318875Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-qbsfw,Uid:878064ee-fd7d-40fc-910c-0067678585ef,Namespace:kube-system,Attempt:0,} returns sandbox id \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\"" Oct 2 19:14:43.891432 env[1657]: time="2023-10-02T19:14:43.890916647Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-x96hl,Uid:4810fa68-d587-4896-a53b-272832b2bde3,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:43.891919 env[1657]: time="2023-10-02T19:14:43.891869867Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:14:43.924362 systemd[1]: Started cri-containerd-873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac.scope. Oct 2 19:14:43.959912 env[1657]: time="2023-10-02T19:14:43.959760876Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:43.960121 env[1657]: time="2023-10-02T19:14:43.959940167Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:43.960279 env[1657]: time="2023-10-02T19:14:43.960039161Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:43.961868 env[1657]: time="2023-10-02T19:14:43.961734387Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/26f446efa41c35163f4a6be40b3e907beb3bd8ae7ca8853c83629acd71a92c0a pid=3150 runtime=io.containerd.runc.v2 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.981000 audit: BPF prog-id=122 op=LOAD Oct 2 19:14:43.983000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.983000 audit[3134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3117 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837336638313338663338666261653137663666383531376330656433 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3117 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837336638313338663338666261653137663666383531376330656433 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.984000 audit: BPF prog-id=123 op=LOAD Oct 2 19:14:43.984000 audit[3134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3117 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837336638313338663338666261653137663666383531376330656433 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.987000 audit: BPF prog-id=124 op=LOAD Oct 2 19:14:43.987000 audit[3134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3117 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837336638313338663338666261653137663666383531376330656433 Oct 2 19:14:43.989000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:14:43.989000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { perfmon } for pid=3134 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit[3134]: AVC avc: denied { bpf } for pid=3134 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:43.989000 audit: BPF prog-id=125 op=LOAD Oct 2 19:14:43.989000 audit[3134]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3117 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:43.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837336638313338663338666261653137663666383531376330656433 Oct 2 19:14:43.999516 systemd[1]: Started cri-containerd-26f446efa41c35163f4a6be40b3e907beb3bd8ae7ca8853c83629acd71a92c0a.scope. Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.065000 audit: BPF prog-id=126 op=LOAD Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3150 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663434366566613431633335313633663461366265343062336539 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3150 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663434366566613431633335313633663461366265343062336539 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit: BPF prog-id=127 op=LOAD Oct 2 19:14:44.066000 audit[3165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3150 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663434366566613431633335313633663461366265343062336539 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.066000 audit: BPF prog-id=128 op=LOAD Oct 2 19:14:44.066000 audit[3165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3150 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663434366566613431633335313633663461366265343062336539 Oct 2 19:14:44.067000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:14:44.067000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { perfmon } for pid=3165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit[3165]: AVC avc: denied { bpf } for pid=3165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.067000 audit: BPF prog-id=129 op=LOAD Oct 2 19:14:44.067000 audit[3165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3150 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236663434366566613431633335313633663461366265343062336539 Oct 2 19:14:44.088640 env[1657]: time="2023-10-02T19:14:44.088562375Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-rjm44,Uid:5b52a71c-332b-414f-8f63-7d6d29cdb0dc,Namespace:kube-system,Attempt:0,} returns sandbox id \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\"" Oct 2 19:14:44.113072 env[1657]: time="2023-10-02T19:14:44.112968164Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-x96hl,Uid:4810fa68-d587-4896-a53b-272832b2bde3,Namespace:kube-system,Attempt:0,} returns sandbox id \"26f446efa41c35163f4a6be40b3e907beb3bd8ae7ca8853c83629acd71a92c0a\"" Oct 2 19:14:44.118340 env[1657]: time="2023-10-02T19:14:44.118281380Z" level=info msg="CreateContainer within sandbox \"26f446efa41c35163f4a6be40b3e907beb3bd8ae7ca8853c83629acd71a92c0a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:14:44.154047 env[1657]: time="2023-10-02T19:14:44.146282360Z" level=info msg="CreateContainer within sandbox \"26f446efa41c35163f4a6be40b3e907beb3bd8ae7ca8853c83629acd71a92c0a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"0362bf8c7a67c6fb3c6d2ff226e7045e8b3cbc12e17514e2cb8d8eb26de70e63\"" Oct 2 19:14:44.155023 env[1657]: time="2023-10-02T19:14:44.154947956Z" level=info msg="StartContainer for \"0362bf8c7a67c6fb3c6d2ff226e7045e8b3cbc12e17514e2cb8d8eb26de70e63\"" Oct 2 19:14:44.220333 systemd[1]: Started cri-containerd-0362bf8c7a67c6fb3c6d2ff226e7045e8b3cbc12e17514e2cb8d8eb26de70e63.scope. Oct 2 19:14:44.268000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.268000 audit[3204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3150 pid=3204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033363262663863376136376336666233633664326666323236653730 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.269000 audit: BPF prog-id=130 op=LOAD Oct 2 19:14:44.269000 audit[3204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3150 pid=3204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033363262663863376136376336666233633664326666323236653730 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.270000 audit: BPF prog-id=131 op=LOAD Oct 2 19:14:44.270000 audit[3204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3150 pid=3204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033363262663863376136376336666233633664326666323236653730 Oct 2 19:14:44.272000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:14:44.272000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { perfmon } for pid=3204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit[3204]: AVC avc: denied { bpf } for pid=3204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.272000 audit: BPF prog-id=132 op=LOAD Oct 2 19:14:44.272000 audit[3204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3150 pid=3204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033363262663863376136376336666233633664326666323236653730 Oct 2 19:14:44.312180 env[1657]: time="2023-10-02T19:14:44.312114203Z" level=info msg="StartContainer for \"0362bf8c7a67c6fb3c6d2ff226e7045e8b3cbc12e17514e2cb8d8eb26de70e63\" returns successfully" Oct 2 19:14:44.459000 audit[3253]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=3253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.459000 audit[3253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff45f5d20 a2=0 a3=ffffae4ab6c0 items=0 ppid=3215 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.459000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:14:44.481662 systemd[1]: run-containerd-runc-k8s.io-23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9-runc.WfZMiI.mount: Deactivated successfully. Oct 2 19:14:44.491000 audit[3256]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_chain pid=3256 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.491000 audit[3256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe44576c0 a2=0 a3=ffff910dc6c0 items=0 ppid=3215 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.491000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:14:44.502000 audit[3258]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=3258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.502000 audit[3258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1cb4ae0 a2=0 a3=fffface2e6c0 items=0 ppid=3215 pid=3258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.502000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:14:44.512000 audit[3254]: NETFILTER_CFG table=mangle:62 family=10 entries=1 op=nft_register_chain pid=3254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.512000 audit[3254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff261b690 a2=0 a3=ffff8a0346c0 items=0 ppid=3215 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.512000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:14:44.520000 audit[3259]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=3259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.520000 audit[3259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffef0a350 a2=0 a3=ffffbdd8f6c0 items=0 ppid=3215 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.520000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:14:44.528000 audit[3260]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=3260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.528000 audit[3260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6eb32a0 a2=0 a3=ffff83d0a6c0 items=0 ppid=3215 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:14:44.563000 audit[3261]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=3261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.563000 audit[3261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdb8909f0 a2=0 a3=ffffaefe46c0 items=0 ppid=3215 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.563000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:14:44.572000 audit[3263]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=3263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.572000 audit[3263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd576b280 a2=0 a3=ffffa9a896c0 items=0 ppid=3215 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:14:44.587000 audit[3266]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=3266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.587000 audit[3266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffda3caa90 a2=0 a3=ffffad05f6c0 items=0 ppid=3215 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.587000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:14:44.591000 audit[3267]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=3267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.591000 audit[3267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda4cb930 a2=0 a3=ffff956e76c0 items=0 ppid=3215 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.591000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:14:44.599000 audit[3269]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=3269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.599000 audit[3269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcd0d0760 a2=0 a3=ffffa24136c0 items=0 ppid=3215 pid=3269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.599000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:14:44.603000 audit[3270]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=3270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.603000 audit[3270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd59b59e0 a2=0 a3=ffff844406c0 items=0 ppid=3215 pid=3270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.603000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:14:44.611000 audit[3272]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=3272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.611000 audit[3272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc32b34c0 a2=0 a3=ffffbd5766c0 items=0 ppid=3215 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.611000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:14:44.623000 audit[3275]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=3275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.623000 audit[3275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff3460210 a2=0 a3=ffff9c1d26c0 items=0 ppid=3215 pid=3275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.623000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:14:44.626000 audit[3276]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=3276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.626000 audit[3276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd27c990 a2=0 a3=ffff984a06c0 items=0 ppid=3215 pid=3276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.626000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:14:44.635000 audit[3278]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.635000 audit[3278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffea0d220 a2=0 a3=ffff801596c0 items=0 ppid=3215 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.635000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:14:44.639000 audit[3279]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3279 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.639000 audit[3279]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcdb6aa00 a2=0 a3=ffffabf126c0 items=0 ppid=3215 pid=3279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.639000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:14:44.647000 audit[3281]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.647000 audit[3281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd194a440 a2=0 a3=ffffb72046c0 items=0 ppid=3215 pid=3281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.647000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:44.659000 audit[3284]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.659000 audit[3284]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc593fd80 a2=0 a3=ffff9afd66c0 items=0 ppid=3215 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.659000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:44.672000 audit[3287]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.672000 audit[3287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd0ade360 a2=0 a3=ffffb0c106c0 items=0 ppid=3215 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:14:44.675000 audit[3288]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.675000 audit[3288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd8130970 a2=0 a3=ffffba5ae6c0 items=0 ppid=3215 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.675000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:14:44.686000 audit[3290]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.686000 audit[3290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff85ccff0 a2=0 a3=ffff892b16c0 items=0 ppid=3215 pid=3290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.686000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:44.698000 audit[3293]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.698000 audit[3293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef91c4a0 a2=0 a3=ffff86e226c0 items=0 ppid=3215 pid=3293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.698000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:44.734000 audit[3297]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:14:44.734000 audit[3297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffea0af020 a2=0 a3=ffff866936c0 items=0 ppid=3215 pid=3297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.734000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:44.748000 audit[3297]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:14:44.748000 audit[3297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffea0af020 a2=0 a3=ffff866936c0 items=0 ppid=3215 pid=3297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.748000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:44.760000 audit[3302]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.760000 audit[3302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffbad2cf0 a2=0 a3=ffff8ec036c0 items=0 ppid=3215 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.760000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:14:44.769000 audit[3304]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.769000 audit[3304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc7c8ea50 a2=0 a3=ffffb4d956c0 items=0 ppid=3215 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.769000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:14:44.783000 audit[3307]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.783000 audit[3307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcf339cc0 a2=0 a3=ffffb9e9f6c0 items=0 ppid=3215 pid=3307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.783000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:14:44.789000 audit[3308]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3308 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.789000 audit[3308]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd1285e0 a2=0 a3=ffffb22266c0 items=0 ppid=3215 pid=3308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.789000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:14:44.797000 audit[3310]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.797000 audit[3310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffdfdf0f0 a2=0 a3=ffffa155b6c0 items=0 ppid=3215 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.797000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:14:44.801000 audit[3311]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.801000 audit[3311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe548e730 a2=0 a3=ffffb26c36c0 items=0 ppid=3215 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.801000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:14:44.811000 audit[3313]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.811000 audit[3313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd81758b0 a2=0 a3=ffffbd93f6c0 items=0 ppid=3215 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.811000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:14:44.824000 audit[3316]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.824000 audit[3316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe2461b90 a2=0 a3=ffffa539f6c0 items=0 ppid=3215 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.824000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:14:44.828000 audit[3317]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3317 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.828000 audit[3317]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc412ebe0 a2=0 a3=ffff859196c0 items=0 ppid=3215 pid=3317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:14:44.838000 audit[3319]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.838000 audit[3319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcf515ff0 a2=0 a3=ffff94a726c0 items=0 ppid=3215 pid=3319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:14:44.844000 audit[3320]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3320 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.844000 audit[3320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffee620a60 a2=0 a3=ffff9ac766c0 items=0 ppid=3215 pid=3320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:14:44.855000 audit[3322]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.855000 audit[3322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc206ee50 a2=0 a3=ffff867a56c0 items=0 ppid=3215 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.855000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:44.869000 audit[3325]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.869000 audit[3325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcbb785a0 a2=0 a3=ffffa4d566c0 items=0 ppid=3215 pid=3325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.869000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:14:44.883000 audit[3328]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.883000 audit[3328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd661d4d0 a2=0 a3=ffffa077c6c0 items=0 ppid=3215 pid=3328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.883000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:14:44.890000 audit[3329]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.890000 audit[3329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc632a2a0 a2=0 a3=ffffbb97c6c0 items=0 ppid=3215 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.890000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:14:44.897000 audit[3331]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.897000 audit[3331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd8ceb140 a2=0 a3=ffff84eb06c0 items=0 ppid=3215 pid=3331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.897000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:44.911000 audit[3334]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.911000 audit[3334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffea340040 a2=0 a3=ffff988726c0 items=0 ppid=3215 pid=3334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:44.929000 audit[3338]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3338 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:14:44.929000 audit[3338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc5c4e920 a2=0 a3=ffffb8aad6c0 items=0 ppid=3215 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.929000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:44.930000 audit[3338]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3338 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:14:44.930000 audit[3338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc5c4e920 a2=0 a3=ffffb8aad6c0 items=0 ppid=3215 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.930000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:50.897797 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3580293443.mount: Deactivated successfully. Oct 2 19:14:54.914227 env[1657]: time="2023-10-02T19:14:54.914167299Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:54.920759 env[1657]: time="2023-10-02T19:14:54.920688210Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:54.923014 env[1657]: time="2023-10-02T19:14:54.922921442Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:54.924483 env[1657]: time="2023-10-02T19:14:54.924428231Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:14:54.926575 env[1657]: time="2023-10-02T19:14:54.926520613Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:14:54.930719 env[1657]: time="2023-10-02T19:14:54.930662197Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:14:54.953079 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount403385610.mount: Deactivated successfully. Oct 2 19:14:54.965083 env[1657]: time="2023-10-02T19:14:54.964986779Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\"" Oct 2 19:14:54.968364 env[1657]: time="2023-10-02T19:14:54.967809718Z" level=info msg="StartContainer for \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\"" Oct 2 19:14:55.028181 systemd[1]: Started cri-containerd-bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992.scope. Oct 2 19:14:55.062153 systemd[1]: cri-containerd-bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992.scope: Deactivated successfully. Oct 2 19:14:55.948464 systemd[1]: run-containerd-runc-k8s.io-bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992-runc.K94gS8.mount: Deactivated successfully. Oct 2 19:14:55.949120 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992-rootfs.mount: Deactivated successfully. Oct 2 19:14:56.052035 env[1657]: time="2023-10-02T19:14:56.051895441Z" level=info msg="shim disconnected" id=bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992 Oct 2 19:14:56.052657 env[1657]: time="2023-10-02T19:14:56.052038092Z" level=warning msg="cleaning up after shim disconnected" id=bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992 namespace=k8s.io Oct 2 19:14:56.052657 env[1657]: time="2023-10-02T19:14:56.052062213Z" level=info msg="cleaning up dead shim" Oct 2 19:14:56.079570 env[1657]: time="2023-10-02T19:14:56.079505742Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:14:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3364 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:14:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:14:56.080377 env[1657]: time="2023-10-02T19:14:56.080220589Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:14:56.082135 env[1657]: time="2023-10-02T19:14:56.082077311Z" level=error msg="Failed to pipe stderr of container \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\"" error="reading from a closed fifo" Oct 2 19:14:56.082352 env[1657]: time="2023-10-02T19:14:56.082085231Z" level=error msg="Failed to pipe stdout of container \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\"" error="reading from a closed fifo" Oct 2 19:14:56.084815 env[1657]: time="2023-10-02T19:14:56.084726584Z" level=error msg="StartContainer for \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:14:56.085340 kubelet[2978]: E1002 19:14:56.085301 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992" Oct 2 19:14:56.086223 kubelet[2978]: E1002 19:14:56.085460 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:14:56.086223 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:14:56.086223 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:14:56.086223 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fwc8f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:14:56.086573 kubelet[2978]: E1002 19:14:56.085522 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:14:56.574398 env[1657]: time="2023-10-02T19:14:56.574331965Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:14:56.583848 kubelet[2978]: I1002 19:14:56.583399 2978 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-x96hl" podStartSLOduration=14.583307496 pod.CreationTimestamp="2023-10-02 19:14:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:44.525239137 +0000 UTC m=+15.766033635" watchObservedRunningTime="2023-10-02 19:14:56.583307496 +0000 UTC m=+27.824102042" Oct 2 19:14:56.607923 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2561315459.mount: Deactivated successfully. Oct 2 19:14:56.622163 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1990724936.mount: Deactivated successfully. Oct 2 19:14:56.636185 env[1657]: time="2023-10-02T19:14:56.636121619Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\"" Oct 2 19:14:56.667511 env[1657]: time="2023-10-02T19:14:56.667454723Z" level=info msg="StartContainer for \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\"" Oct 2 19:14:56.734230 systemd[1]: Started cri-containerd-0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b.scope. Oct 2 19:14:56.774314 systemd[1]: cri-containerd-0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b.scope: Deactivated successfully. Oct 2 19:14:56.797662 env[1657]: time="2023-10-02T19:14:56.797587916Z" level=info msg="shim disconnected" id=0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b Oct 2 19:14:56.797959 env[1657]: time="2023-10-02T19:14:56.797662055Z" level=warning msg="cleaning up after shim disconnected" id=0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b namespace=k8s.io Oct 2 19:14:56.797959 env[1657]: time="2023-10-02T19:14:56.797684844Z" level=info msg="cleaning up dead shim" Oct 2 19:14:56.843008 env[1657]: time="2023-10-02T19:14:56.842795792Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:14:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3400 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:14:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:14:56.844961 env[1657]: time="2023-10-02T19:14:56.844859895Z" level=error msg="copy shim log" error="read /proc/self/fd/61: file already closed" Oct 2 19:14:56.849310 env[1657]: time="2023-10-02T19:14:56.849238828Z" level=error msg="Failed to pipe stdout of container \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\"" error="reading from a closed fifo" Oct 2 19:14:56.849601 env[1657]: time="2023-10-02T19:14:56.849554946Z" level=error msg="Failed to pipe stderr of container \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\"" error="reading from a closed fifo" Oct 2 19:14:56.852343 env[1657]: time="2023-10-02T19:14:56.852259829Z" level=error msg="StartContainer for \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:14:56.853013 kubelet[2978]: E1002 19:14:56.852746 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b" Oct 2 19:14:56.853013 kubelet[2978]: E1002 19:14:56.852884 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:14:56.853013 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:14:56.853013 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:14:56.855128 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fwc8f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:14:56.857442 kubelet[2978]: E1002 19:14:56.852943 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:14:57.548793 kubelet[2978]: I1002 19:14:57.545558 2978 scope.go:115] "RemoveContainer" containerID="bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992" Oct 2 19:14:57.548793 kubelet[2978]: I1002 19:14:57.546110 2978 scope.go:115] "RemoveContainer" containerID="bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992" Oct 2 19:14:57.568105 env[1657]: time="2023-10-02T19:14:57.568051516Z" level=info msg="RemoveContainer for \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\"" Oct 2 19:14:57.585940 env[1657]: time="2023-10-02T19:14:57.585875437Z" level=info msg="RemoveContainer for \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\" returns successfully" Oct 2 19:14:57.587140 env[1657]: time="2023-10-02T19:14:57.587091929Z" level=info msg="RemoveContainer for \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\"" Oct 2 19:14:57.587356 env[1657]: time="2023-10-02T19:14:57.587321691Z" level=info msg="RemoveContainer for \"bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992\" returns successfully" Oct 2 19:14:57.588284 kubelet[2978]: E1002 19:14:57.588254 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:14:57.703968 env[1657]: time="2023-10-02T19:14:57.703888502Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:57.708052 env[1657]: time="2023-10-02T19:14:57.707963925Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:57.711898 env[1657]: time="2023-10-02T19:14:57.711831691Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:57.714289 env[1657]: time="2023-10-02T19:14:57.713143467Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:14:57.719479 env[1657]: time="2023-10-02T19:14:57.719419413Z" level=info msg="CreateContainer within sandbox \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:14:57.740818 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1345646797.mount: Deactivated successfully. Oct 2 19:14:57.754858 env[1657]: time="2023-10-02T19:14:57.754794951Z" level=info msg="CreateContainer within sandbox \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\"" Oct 2 19:14:57.758122 env[1657]: time="2023-10-02T19:14:57.757341736Z" level=info msg="StartContainer for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\"" Oct 2 19:14:57.810262 systemd[1]: Started cri-containerd-43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5.scope. Oct 2 19:14:57.862047 kernel: kauditd_printk_skb: 336 callbacks suppressed Oct 2 19:14:57.862195 kernel: audit: type=1400 audit(1696274097.857:1049): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876740 kernel: audit: type=1400 audit(1696274097.857:1050): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876867 kernel: audit: type=1400 audit(1696274097.857:1051): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.892637 kernel: audit: type=1400 audit(1696274097.857:1052): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.901800 kernel: audit: type=1400 audit(1696274097.857:1053): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.918516 kernel: audit: type=1400 audit(1696274097.857:1054): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.918643 kernel: audit: type=1400 audit(1696274097.857:1055): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.928132 kernel: audit: type=1400 audit(1696274097.857:1056): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.937793 kernel: audit: type=1400 audit(1696274097.857:1057): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.859000 audit: BPF prog-id=133 op=LOAD Oct 2 19:14:57.946059 kernel: audit: type=1400 audit(1696274097.859:1058): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3117 pid=3421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:57.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663235373561376637646337613862653362653166373739656239 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3117 pid=3421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:57.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663235373561376637646337613862653362653166373739656239 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.868000 audit: BPF prog-id=134 op=LOAD Oct 2 19:14:57.868000 audit[3421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3117 pid=3421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:57.868000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663235373561376637646337613862653362653166373739656239 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.876000 audit: BPF prog-id=135 op=LOAD Oct 2 19:14:57.876000 audit[3421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3117 pid=3421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:57.876000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663235373561376637646337613862653362653166373739656239 Oct 2 19:14:57.884000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:14:57.884000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { perfmon } for pid=3421 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit[3421]: AVC avc: denied { bpf } for pid=3421 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:57.884000 audit: BPF prog-id=136 op=LOAD Oct 2 19:14:57.884000 audit[3421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3117 pid=3421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:57.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663235373561376637646337613862653362653166373739656239 Oct 2 19:14:57.978263 env[1657]: time="2023-10-02T19:14:57.978099035Z" level=info msg="StartContainer for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" returns successfully" Oct 2 19:14:58.058000 audit[3432]: AVC avc: denied { map_create } for pid=3432 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c221 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c221 tclass=bpf permissive=0 Oct 2 19:14:58.058000 audit[3432]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=40001d3768 a2=48 a3=0 items=0 ppid=3117 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c221 key=(null) Oct 2 19:14:58.058000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:14:58.557069 kubelet[2978]: E1002 19:14:58.557029 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:14:58.620511 kubelet[2978]: I1002 19:14:58.620449 2978 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-rjm44" podStartSLOduration=-9.223372020234491e+09 pod.CreationTimestamp="2023-10-02 19:14:42 +0000 UTC" firstStartedPulling="2023-10-02 19:14:44.090574777 +0000 UTC m=+15.331369287" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:58.620053321 +0000 UTC m=+29.860847927" watchObservedRunningTime="2023-10-02 19:14:58.620283994 +0000 UTC m=+29.861078576" Oct 2 19:14:59.169066 kubelet[2978]: W1002 19:14:59.168980 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod878064ee_fd7d_40fc_910c_0067678585ef.slice/cri-containerd-bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992.scope WatchSource:0}: container "bcc6d6ba04cc219e5ff08b05aea77df57f63f8bc7652e63e0f2361c7539d9992" in namespace "k8s.io": not found Oct 2 19:15:02.278213 kubelet[2978]: W1002 19:15:02.278075 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod878064ee_fd7d_40fc_910c_0067678585ef.slice/cri-containerd-0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b.scope WatchSource:0}: task 0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b not found: not found Oct 2 19:15:11.450081 env[1657]: time="2023-10-02T19:15:11.449815894Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:15:11.469474 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1881928497.mount: Deactivated successfully. Oct 2 19:15:11.479745 env[1657]: time="2023-10-02T19:15:11.479660642Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\"" Oct 2 19:15:11.482907 env[1657]: time="2023-10-02T19:15:11.480985243Z" level=info msg="StartContainer for \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\"" Oct 2 19:15:11.539974 systemd[1]: Started cri-containerd-09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0.scope. Oct 2 19:15:11.585255 systemd[1]: cri-containerd-09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0.scope: Deactivated successfully. Oct 2 19:15:11.712648 env[1657]: time="2023-10-02T19:15:11.712476640Z" level=info msg="shim disconnected" id=09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0 Oct 2 19:15:11.712648 env[1657]: time="2023-10-02T19:15:11.712582495Z" level=warning msg="cleaning up after shim disconnected" id=09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0 namespace=k8s.io Oct 2 19:15:11.712648 env[1657]: time="2023-10-02T19:15:11.712605943Z" level=info msg="cleaning up dead shim" Oct 2 19:15:11.746943 env[1657]: time="2023-10-02T19:15:11.746861642Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3476 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:11Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:11.748116 env[1657]: time="2023-10-02T19:15:11.747972456Z" level=error msg="Failed to pipe stdout of container \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\"" error="reading from a closed fifo" Oct 2 19:15:11.748276 env[1657]: time="2023-10-02T19:15:11.748216267Z" level=error msg="Failed to pipe stderr of container \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\"" error="reading from a closed fifo" Oct 2 19:15:11.748617 env[1657]: time="2023-10-02T19:15:11.747373337Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 19:15:11.752799 env[1657]: time="2023-10-02T19:15:11.750770916Z" level=error msg="StartContainer for \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:11.753409 kubelet[2978]: E1002 19:15:11.753360 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0" Oct 2 19:15:11.753980 kubelet[2978]: E1002 19:15:11.753521 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:11.753980 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:11.753980 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:15:11.753980 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fwc8f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:11.754340 kubelet[2978]: E1002 19:15:11.753585 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:15:12.463547 systemd[1]: run-containerd-runc-k8s.io-09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0-runc.zl2Kml.mount: Deactivated successfully. Oct 2 19:15:12.463725 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0-rootfs.mount: Deactivated successfully. Oct 2 19:15:12.598783 kubelet[2978]: I1002 19:15:12.598741 2978 scope.go:115] "RemoveContainer" containerID="0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b" Oct 2 19:15:12.599344 kubelet[2978]: I1002 19:15:12.599301 2978 scope.go:115] "RemoveContainer" containerID="0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b" Oct 2 19:15:12.603892 env[1657]: time="2023-10-02T19:15:12.603833090Z" level=info msg="RemoveContainer for \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\"" Oct 2 19:15:12.606307 env[1657]: time="2023-10-02T19:15:12.606245857Z" level=info msg="RemoveContainer for \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\"" Oct 2 19:15:12.606485 env[1657]: time="2023-10-02T19:15:12.606398970Z" level=error msg="RemoveContainer for \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\" failed" error="failed to set removing state for container \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\": container is already in removing state" Oct 2 19:15:12.606779 kubelet[2978]: E1002 19:15:12.606750 2978 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\": container is already in removing state" containerID="0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b" Oct 2 19:15:12.606965 kubelet[2978]: E1002 19:15:12.606942 2978 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b": container is already in removing state; Skipping pod "cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)" Oct 2 19:15:12.607578 kubelet[2978]: E1002 19:15:12.607552 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:15:12.612054 env[1657]: time="2023-10-02T19:15:12.611967831Z" level=info msg="RemoveContainer for \"0a19a904a9fafb0d0658c493521b93760f9007507437ed2890c26496dee4314b\" returns successfully" Oct 2 19:15:14.818894 kubelet[2978]: W1002 19:15:14.818846 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod878064ee_fd7d_40fc_910c_0067678585ef.slice/cri-containerd-09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0.scope WatchSource:0}: task 09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0 not found: not found Oct 2 19:15:23.207000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.211011 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:15:23.211116 kernel: audit: type=1400 audit(1696274123.207:1068): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.207000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd74e0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:23.233007 kernel: audit: type=1300 audit(1696274123.207:1068): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000bd74e0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:23.233141 kernel: audit: type=1327 audit(1696274123.207:1068): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:23.207000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:23.219000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.253831 kernel: audit: type=1400 audit(1696274123.219:1069): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:23.219000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d9b890 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:23.266633 kernel: audit: type=1300 audit(1696274123.219:1069): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d9b890 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:23.266791 kernel: audit: type=1327 audit(1696274123.219:1069): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:23.219000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:24.447311 kubelet[2978]: E1002 19:15:24.447274 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:15:24.887000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:24.887000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:24.908033 kernel: audit: type=1400 audit(1696274124.887:1070): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:24.908187 kernel: audit: type=1400 audit(1696274124.887:1071): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:24.887000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=4009732e10 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:15:24.920869 kernel: audit: type=1300 audit(1696274124.887:1071): arch=c00000b7 syscall=27 success=no exit=-13 a0=59 a1=4009732e10 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:15:24.887000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4003242880 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:15:24.934646 kernel: audit: type=1300 audit(1696274124.887:1070): arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4003242880 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:15:24.887000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:24.887000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:24.893000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:24.893000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4009dc7650 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:15:24.893000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:24.903000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:24.903000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4009dc77a0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:15:24.903000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:24.947000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:24.947000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4009dc7920 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:15:24.947000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:24.951000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:24.951000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4002e5b9a0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:15:24.951000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:33.495608 systemd[1]: Started sshd@7-172.31.22.247:22-139.178.89.65:42074.service. Oct 2 19:15:33.508234 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:15:33.508360 kernel: audit: type=1130 audit(1696274133.494:1076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.22.247:22-139.178.89.65:42074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:33.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.22.247:22-139.178.89.65:42074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:33.678000 audit[3497]: USER_ACCT pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.692116 sshd[3497]: Accepted publickey for core from 139.178.89.65 port 42074 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:33.691000 audit[3497]: CRED_ACQ pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.702450 kernel: audit: type=1101 audit(1696274133.678:1077): pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.702581 kernel: audit: type=1103 audit(1696274133.691:1078): pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.693189 sshd[3497]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:33.708522 kernel: audit: type=1006 audit(1696274133.691:1079): pid=3497 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:15:33.691000 audit[3497]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9f8e990 a2=3 a3=1 items=0 ppid=1 pid=3497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:33.719282 kernel: audit: type=1300 audit(1696274133.691:1079): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9f8e990 a2=3 a3=1 items=0 ppid=1 pid=3497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:33.691000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:33.724357 kernel: audit: type=1327 audit(1696274133.691:1079): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:33.731819 systemd-logind[1652]: New session 8 of user core. Oct 2 19:15:33.732853 systemd[1]: Started session-8.scope. Oct 2 19:15:33.745000 audit[3497]: USER_START pid=3497 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.752000 audit[3499]: CRED_ACQ pid=3499 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.768155 kernel: audit: type=1105 audit(1696274133.745:1080): pid=3497 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:33.768274 kernel: audit: type=1103 audit(1696274133.752:1081): pid=3499 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:34.073200 sshd[3497]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:34.074000 audit[3497]: USER_END pid=3497 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:34.074000 audit[3497]: CRED_DISP pid=3497 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:34.097358 kernel: audit: type=1106 audit(1696274134.074:1082): pid=3497 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:34.097512 kernel: audit: type=1104 audit(1696274134.074:1083): pid=3497 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:34.088351 systemd[1]: sshd@7-172.31.22.247:22-139.178.89.65:42074.service: Deactivated successfully. Oct 2 19:15:34.089615 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:15:34.091911 systemd-logind[1652]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:15:34.094270 systemd-logind[1652]: Removed session 8. Oct 2 19:15:34.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.22.247:22-139.178.89.65:42074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:36.450316 env[1657]: time="2023-10-02T19:15:36.450097799Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:15:36.477418 env[1657]: time="2023-10-02T19:15:36.477328796Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\"" Oct 2 19:15:36.478415 env[1657]: time="2023-10-02T19:15:36.478369575Z" level=info msg="StartContainer for \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\"" Oct 2 19:15:36.528176 systemd[1]: Started cri-containerd-0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f.scope. Oct 2 19:15:36.572592 systemd[1]: cri-containerd-0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f.scope: Deactivated successfully. Oct 2 19:15:36.582003 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f-rootfs.mount: Deactivated successfully. Oct 2 19:15:36.599681 env[1657]: time="2023-10-02T19:15:36.599612974Z" level=info msg="shim disconnected" id=0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f Oct 2 19:15:36.600127 env[1657]: time="2023-10-02T19:15:36.600090078Z" level=warning msg="cleaning up after shim disconnected" id=0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f namespace=k8s.io Oct 2 19:15:36.600267 env[1657]: time="2023-10-02T19:15:36.600238677Z" level=info msg="cleaning up dead shim" Oct 2 19:15:36.629384 env[1657]: time="2023-10-02T19:15:36.629317216Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3534 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:36.630079 env[1657]: time="2023-10-02T19:15:36.629976915Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:15:36.632974 env[1657]: time="2023-10-02T19:15:36.632915912Z" level=error msg="Failed to pipe stdout of container \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\"" error="reading from a closed fifo" Oct 2 19:15:36.633232 env[1657]: time="2023-10-02T19:15:36.633070031Z" level=error msg="Failed to pipe stderr of container \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\"" error="reading from a closed fifo" Oct 2 19:15:36.635615 env[1657]: time="2023-10-02T19:15:36.635525263Z" level=error msg="StartContainer for \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:36.636616 kubelet[2978]: E1002 19:15:36.635948 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f" Oct 2 19:15:36.636616 kubelet[2978]: E1002 19:15:36.636115 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:36.636616 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:36.636616 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:15:36.640505 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fwc8f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:36.640778 kubelet[2978]: E1002 19:15:36.636172 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:15:36.665879 kubelet[2978]: I1002 19:15:36.664986 2978 scope.go:115] "RemoveContainer" containerID="09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0" Oct 2 19:15:36.665879 kubelet[2978]: I1002 19:15:36.665599 2978 scope.go:115] "RemoveContainer" containerID="09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0" Oct 2 19:15:36.673786 env[1657]: time="2023-10-02T19:15:36.673298570Z" level=info msg="RemoveContainer for \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\"" Oct 2 19:15:36.676528 env[1657]: time="2023-10-02T19:15:36.674304848Z" level=info msg="RemoveContainer for \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\"" Oct 2 19:15:36.676528 env[1657]: time="2023-10-02T19:15:36.674649686Z" level=error msg="RemoveContainer for \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\" failed" error="failed to set removing state for container \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\": container is already in removing state" Oct 2 19:15:36.676774 kubelet[2978]: E1002 19:15:36.675032 2978 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\": container is already in removing state" containerID="09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0" Oct 2 19:15:36.676774 kubelet[2978]: E1002 19:15:36.675112 2978 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0": container is already in removing state; Skipping pod "cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)" Oct 2 19:15:36.676774 kubelet[2978]: E1002 19:15:36.675696 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:15:36.680451 env[1657]: time="2023-10-02T19:15:36.680350065Z" level=info msg="RemoveContainer for \"09a84fa4c71e850e09248c14c6277f860873502cc01e75e0a527da95c6997df0\" returns successfully" Oct 2 19:15:38.776000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:38.779620 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:38.779800 kernel: audit: type=1400 audit(1696274138.776:1085): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:38.777000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:38.798600 kernel: audit: type=1400 audit(1696274138.777:1086): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:38.798723 kernel: audit: type=1300 audit(1696274138.777:1086): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000d4df80 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:38.777000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000d4df80 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:38.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:38.821384 kernel: audit: type=1327 audit(1696274138.777:1086): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:38.821515 kernel: audit: type=1400 audit(1696274138.778:1087): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:38.778000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:38.778000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000d4dfa0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:38.843711 kernel: audit: type=1300 audit(1696274138.778:1087): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000d4dfa0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:38.843916 kernel: audit: type=1327 audit(1696274138.778:1087): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:38.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:38.776000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000df21c0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:38.866762 kernel: audit: type=1300 audit(1696274138.776:1085): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000df21c0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:38.866875 kernel: audit: type=1327 audit(1696274138.776:1085): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:38.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:38.783000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:38.886543 kernel: audit: type=1400 audit(1696274138.783:1088): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:38.783000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000df21e0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:15:38.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:39.709102 kubelet[2978]: W1002 19:15:39.709052 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod878064ee_fd7d_40fc_910c_0067678585ef.slice/cri-containerd-0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f.scope WatchSource:0}: task 0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f not found: not found Oct 2 19:15:44.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.247:22-139.178.89.65:46392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:44.104133 systemd[1]: Started sshd@8-172.31.22.247:22-139.178.89.65:46392.service. Oct 2 19:15:44.108043 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:15:44.108150 kernel: audit: type=1130 audit(1696274144.103:1089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.247:22-139.178.89.65:46392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:44.291000 audit[3547]: USER_ACCT pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.297211 sshd[3547]: Accepted publickey for core from 139.178.89.65 port 46392 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:44.301320 sshd[3547]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:44.296000 audit[3547]: CRED_ACQ pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.312809 kernel: audit: type=1101 audit(1696274144.291:1090): pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.312953 kernel: audit: type=1103 audit(1696274144.296:1091): pid=3547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.319920 kernel: audit: type=1006 audit(1696274144.296:1092): pid=3547 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:15:44.296000 audit[3547]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd37bc5d0 a2=3 a3=1 items=0 ppid=1 pid=3547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:44.330303 kernel: audit: type=1300 audit(1696274144.296:1092): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd37bc5d0 a2=3 a3=1 items=0 ppid=1 pid=3547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:44.336625 kernel: audit: type=1327 audit(1696274144.296:1092): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:44.296000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:44.337058 systemd[1]: Started session-9.scope. Oct 2 19:15:44.338096 systemd-logind[1652]: New session 9 of user core. Oct 2 19:15:44.352000 audit[3547]: USER_START pid=3547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.365000 audit[3549]: CRED_ACQ pid=3549 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.375408 kernel: audit: type=1105 audit(1696274144.352:1093): pid=3547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.375530 kernel: audit: type=1103 audit(1696274144.365:1094): pid=3549 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.635361 sshd[3547]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:44.636000 audit[3547]: USER_END pid=3547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.636000 audit[3547]: CRED_DISP pid=3547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.660390 kernel: audit: type=1106 audit(1696274144.636:1095): pid=3547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.660527 kernel: audit: type=1104 audit(1696274144.636:1096): pid=3547 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:44.661219 systemd-logind[1652]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:15:44.661236 systemd[1]: sshd@8-172.31.22.247:22-139.178.89.65:46392.service: Deactivated successfully. Oct 2 19:15:44.662548 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:15:44.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.247:22-139.178.89.65:46392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:44.664759 systemd-logind[1652]: Removed session 9. Oct 2 19:15:48.447572 kubelet[2978]: E1002 19:15:48.447532 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:15:54.667316 systemd[1]: Started sshd@9-172.31.22.247:22-139.178.89.65:52122.service. Oct 2 19:15:54.685869 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:54.686028 kernel: audit: type=1130 audit(1696274154.673:1098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.247:22-139.178.89.65:52122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:54.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.247:22-139.178.89.65:52122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:54.851000 audit[3561]: USER_ACCT pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.855976 sshd[3561]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:54.857548 sshd[3561]: Accepted publickey for core from 139.178.89.65 port 52122 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:54.854000 audit[3561]: CRED_ACQ pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.872837 kernel: audit: type=1101 audit(1696274154.851:1099): pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.872955 kernel: audit: type=1103 audit(1696274154.854:1100): pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.879414 kernel: audit: type=1006 audit(1696274154.854:1101): pid=3561 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:15:54.854000 audit[3561]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd30879b0 a2=3 a3=1 items=0 ppid=1 pid=3561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.889897 kernel: audit: type=1300 audit(1696274154.854:1101): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd30879b0 a2=3 a3=1 items=0 ppid=1 pid=3561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.854000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:54.893582 kernel: audit: type=1327 audit(1696274154.854:1101): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:54.899762 systemd-logind[1652]: New session 10 of user core. Oct 2 19:15:54.900263 systemd[1]: Started session-10.scope. Oct 2 19:15:54.909000 audit[3561]: USER_START pid=3561 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.923089 kernel: audit: type=1105 audit(1696274154.909:1102): pid=3561 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.922000 audit[3563]: CRED_ACQ pid=3563 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:54.935179 kernel: audit: type=1103 audit(1696274154.922:1103): pid=3563 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:55.194039 sshd[3561]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:55.195000 audit[3561]: USER_END pid=3561 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:55.208614 systemd[1]: sshd@9-172.31.22.247:22-139.178.89.65:52122.service: Deactivated successfully. Oct 2 19:15:55.195000 audit[3561]: CRED_DISP pid=3561 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:55.220674 kernel: audit: type=1106 audit(1696274155.195:1104): pid=3561 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:55.220774 kernel: audit: type=1104 audit(1696274155.195:1105): pid=3561 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:55.215055 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:15:55.221240 systemd-logind[1652]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:15:55.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.247:22-139.178.89.65:52122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:55.226175 systemd-logind[1652]: Removed session 10. Oct 2 19:16:01.447060 kubelet[2978]: E1002 19:16:01.446977 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:16:05.236780 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:05.236919 kernel: audit: type=1130 audit(1696274165.223:1107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.22.247:22-139.178.89.65:33622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.22.247:22-139.178.89.65:33622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.224717 systemd[1]: Started sshd@10-172.31.22.247:22-139.178.89.65:33622.service. Oct 2 19:16:05.403000 audit[3574]: USER_ACCT pid=3574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.405290 sshd[3574]: Accepted publickey for core from 139.178.89.65 port 33622 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:05.409068 sshd[3574]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:05.407000 audit[3574]: CRED_ACQ pid=3574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.425330 kernel: audit: type=1101 audit(1696274165.403:1108): pid=3574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.425402 kernel: audit: type=1103 audit(1696274165.407:1109): pid=3574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.431648 kernel: audit: type=1006 audit(1696274165.407:1110): pid=3574 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:16:05.407000 audit[3574]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd55a1e20 a2=3 a3=1 items=0 ppid=1 pid=3574 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:05.442815 kernel: audit: type=1300 audit(1696274165.407:1110): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd55a1e20 a2=3 a3=1 items=0 ppid=1 pid=3574 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:05.443129 kernel: audit: type=1327 audit(1696274165.407:1110): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:05.407000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:05.451242 systemd-logind[1652]: New session 11 of user core. Oct 2 19:16:05.452565 systemd[1]: Started session-11.scope. Oct 2 19:16:05.461000 audit[3574]: USER_START pid=3574 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.469000 audit[3576]: CRED_ACQ pid=3576 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.484582 kernel: audit: type=1105 audit(1696274165.461:1111): pid=3574 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.484706 kernel: audit: type=1103 audit(1696274165.469:1112): pid=3576 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.734124 sshd[3574]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:05.735000 audit[3574]: USER_END pid=3574 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.741165 systemd-logind[1652]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:16:05.743648 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:16:05.745794 systemd-logind[1652]: Removed session 11. Oct 2 19:16:05.747077 systemd[1]: sshd@10-172.31.22.247:22-139.178.89.65:33622.service: Deactivated successfully. Oct 2 19:16:05.736000 audit[3574]: CRED_DISP pid=3574 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.757647 kernel: audit: type=1106 audit(1696274165.735:1113): pid=3574 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.757817 kernel: audit: type=1104 audit(1696274165.736:1114): pid=3574 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:05.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.22.247:22-139.178.89.65:33622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:13.448283 kubelet[2978]: E1002 19:16:13.448233 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:16:15.769278 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:15.769435 kernel: audit: type=1130 audit(1696274175.766:1116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.22.247:22-139.178.89.65:55048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.22.247:22-139.178.89.65:55048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.766784 systemd[1]: Started sshd@11-172.31.22.247:22-139.178.89.65:55048.service. Oct 2 19:16:15.963000 audit[3588]: USER_ACCT pid=3588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.965269 sshd[3588]: Accepted publickey for core from 139.178.89.65 port 55048 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:15.975040 kernel: audit: type=1101 audit(1696274175.963:1117): pid=3588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.976000 audit[3588]: CRED_ACQ pid=3588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.977469 sshd[3588]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:15.987052 kernel: audit: type=1103 audit(1696274175.976:1118): pid=3588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:15.987223 kernel: audit: type=1006 audit(1696274175.976:1119): pid=3588 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:16:15.976000 audit[3588]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0568a30 a2=3 a3=1 items=0 ppid=1 pid=3588 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.003445 kernel: audit: type=1300 audit(1696274175.976:1119): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0568a30 a2=3 a3=1 items=0 ppid=1 pid=3588 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.003570 kernel: audit: type=1327 audit(1696274175.976:1119): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:15.976000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:16.013245 systemd[1]: Started session-12.scope. Oct 2 19:16:16.014137 systemd-logind[1652]: New session 12 of user core. Oct 2 19:16:16.022000 audit[3588]: USER_START pid=3588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:16.030000 audit[3590]: CRED_ACQ pid=3590 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:16.044232 kernel: audit: type=1105 audit(1696274176.022:1120): pid=3588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:16.044326 kernel: audit: type=1103 audit(1696274176.030:1121): pid=3590 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:16.316347 sshd[3588]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:16.317000 audit[3588]: USER_END pid=3588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:16.321845 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:16:16.323257 systemd[1]: sshd@11-172.31.22.247:22-139.178.89.65:55048.service: Deactivated successfully. Oct 2 19:16:16.318000 audit[3588]: CRED_DISP pid=3588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:16.331059 kernel: audit: type=1106 audit(1696274176.317:1122): pid=3588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:16.340592 systemd-logind[1652]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:16:16.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.22.247:22-139.178.89.65:55048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:16.342051 kernel: audit: type=1104 audit(1696274176.318:1123): pid=3588 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:16.342962 systemd-logind[1652]: Removed session 12. Oct 2 19:16:23.209000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.212632 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:23.212751 kernel: audit: type=1400 audit(1696274183.209:1125): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.209000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024fb400 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:16:23.234492 kernel: audit: type=1300 audit(1696274183.209:1125): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024fb400 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:16:23.234578 kernel: audit: type=1327 audit(1696274183.209:1125): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:23.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:23.220000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.254752 kernel: audit: type=1400 audit(1696274183.220:1126): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:23.254846 kernel: audit: type=1300 audit(1696274183.220:1126): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400229de90 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:16:23.220000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400229de90 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:16:23.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:23.278027 kernel: audit: type=1327 audit(1696274183.220:1126): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:24.888000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:24.888000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40054caae0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:16:24.911063 kernel: audit: type=1400 audit(1696274184.888:1127): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:24.911215 kernel: audit: type=1300 audit(1696274184.888:1127): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40054caae0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:16:24.888000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:24.921673 kernel: audit: type=1327 audit(1696274184.888:1127): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:24.888000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:24.931390 kernel: audit: type=1400 audit(1696274184.888:1128): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:24.888000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40026ee940 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:16:24.888000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:24.893000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:24.893000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40054cbc80 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:16:24.893000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:24.903000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:24.903000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4005353080 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:16:24.903000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:24.947000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:24.947000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40031fa240 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:16:24.947000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:24.951000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:24.951000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002bd40a0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:16:24.951000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:26.345904 systemd[1]: Started sshd@12-172.31.22.247:22-139.178.89.65:39454.service. Oct 2 19:16:26.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.22.247:22-139.178.89.65:39454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:26.525000 audit[3600]: USER_ACCT pid=3600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.526919 sshd[3600]: Accepted publickey for core from 139.178.89.65 port 39454 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:26.528000 audit[3600]: CRED_ACQ pid=3600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.528000 audit[3600]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff65062e0 a2=3 a3=1 items=0 ppid=1 pid=3600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:26.528000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:26.530851 sshd[3600]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:26.540403 systemd[1]: Started session-13.scope. Oct 2 19:16:26.541584 systemd-logind[1652]: New session 13 of user core. Oct 2 19:16:26.550000 audit[3600]: USER_START pid=3600 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.556000 audit[3602]: CRED_ACQ pid=3602 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.834193 sshd[3600]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:26.835000 audit[3600]: USER_END pid=3600 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.835000 audit[3600]: CRED_DISP pid=3600 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:26.840467 systemd[1]: sshd@12-172.31.22.247:22-139.178.89.65:39454.service: Deactivated successfully. Oct 2 19:16:26.841831 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:16:26.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.22.247:22-139.178.89.65:39454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:26.843281 systemd-logind[1652]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:16:26.844862 systemd-logind[1652]: Removed session 13. Oct 2 19:16:27.453454 env[1657]: time="2023-10-02T19:16:27.453366656Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:16:27.472877 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1165379643.mount: Deactivated successfully. Oct 2 19:16:27.485627 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount177147078.mount: Deactivated successfully. Oct 2 19:16:27.487232 env[1657]: time="2023-10-02T19:16:27.487158963Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\"" Oct 2 19:16:27.492594 env[1657]: time="2023-10-02T19:16:27.491050938Z" level=info msg="StartContainer for \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\"" Oct 2 19:16:27.546340 systemd[1]: Started cri-containerd-c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21.scope. Oct 2 19:16:27.585029 systemd[1]: cri-containerd-c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21.scope: Deactivated successfully. Oct 2 19:16:27.616445 env[1657]: time="2023-10-02T19:16:27.616372246Z" level=info msg="shim disconnected" id=c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21 Oct 2 19:16:27.616737 env[1657]: time="2023-10-02T19:16:27.616447739Z" level=warning msg="cleaning up after shim disconnected" id=c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21 namespace=k8s.io Oct 2 19:16:27.616737 env[1657]: time="2023-10-02T19:16:27.616470491Z" level=info msg="cleaning up dead shim" Oct 2 19:16:27.645602 env[1657]: time="2023-10-02T19:16:27.645511795Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:16:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3639 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:16:27Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:16:27.646074 env[1657]: time="2023-10-02T19:16:27.645960624Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:16:27.646554 env[1657]: time="2023-10-02T19:16:27.646480889Z" level=error msg="Failed to pipe stderr of container \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\"" error="reading from a closed fifo" Oct 2 19:16:27.647190 env[1657]: time="2023-10-02T19:16:27.647134091Z" level=error msg="Failed to pipe stdout of container \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\"" error="reading from a closed fifo" Oct 2 19:16:27.649932 env[1657]: time="2023-10-02T19:16:27.649812626Z" level=error msg="StartContainer for \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:16:27.650545 kubelet[2978]: E1002 19:16:27.650477 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21" Oct 2 19:16:27.651109 kubelet[2978]: E1002 19:16:27.650881 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:16:27.651109 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:16:27.651109 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:16:27.651109 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fwc8f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:16:27.652082 kubelet[2978]: E1002 19:16:27.651057 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:16:27.783107 kubelet[2978]: I1002 19:16:27.781418 2978 scope.go:115] "RemoveContainer" containerID="0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f" Oct 2 19:16:27.784497 kubelet[2978]: I1002 19:16:27.784465 2978 scope.go:115] "RemoveContainer" containerID="0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f" Oct 2 19:16:27.787404 env[1657]: time="2023-10-02T19:16:27.787340238Z" level=info msg="RemoveContainer for \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\"" Oct 2 19:16:27.788737 env[1657]: time="2023-10-02T19:16:27.788683135Z" level=info msg="RemoveContainer for \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\"" Oct 2 19:16:27.789208 env[1657]: time="2023-10-02T19:16:27.789147875Z" level=error msg="RemoveContainer for \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\" failed" error="failed to set removing state for container \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\": container is already in removing state" Oct 2 19:16:27.790095 kubelet[2978]: E1002 19:16:27.789871 2978 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\": container is already in removing state" containerID="0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f" Oct 2 19:16:27.790323 kubelet[2978]: E1002 19:16:27.790299 2978 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f": container is already in removing state; Skipping pod "cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)" Oct 2 19:16:27.791762 kubelet[2978]: E1002 19:16:27.791616 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:16:27.801079 env[1657]: time="2023-10-02T19:16:27.800058430Z" level=info msg="RemoveContainer for \"0b554a48771f565cc6427f36e2ef1f65afc98296b842ef2d697ad21e8b187b8f\" returns successfully" Oct 2 19:16:28.468205 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21-rootfs.mount: Deactivated successfully. Oct 2 19:16:29.086438 kubelet[2978]: E1002 19:16:29.086402 2978 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:16:29.350554 kubelet[2978]: E1002 19:16:29.350429 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:30.722499 kubelet[2978]: W1002 19:16:30.722452 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod878064ee_fd7d_40fc_910c_0067678585ef.slice/cri-containerd-c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21.scope WatchSource:0}: task c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21 not found: not found Oct 2 19:16:34.352500 kubelet[2978]: E1002 19:16:34.352352 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:36.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.247:22-139.178.89.65:43498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:36.866617 systemd[1]: Started sshd@13-172.31.22.247:22-139.178.89.65:43498.service. Oct 2 19:16:36.870577 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:16:36.870728 kernel: audit: type=1130 audit(1696274196.865:1142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.247:22-139.178.89.65:43498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:37.047000 audit[3656]: USER_ACCT pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.050132 sshd[3656]: Accepted publickey for core from 139.178.89.65 port 43498 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:37.053955 sshd[3656]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:37.047000 audit[3656]: CRED_ACQ pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.068860 kernel: audit: type=1101 audit(1696274197.047:1143): pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.069062 kernel: audit: type=1103 audit(1696274197.047:1144): pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.069140 kernel: audit: type=1006 audit(1696274197.047:1145): pid=3656 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:16:37.047000 audit[3656]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe95a3f10 a2=3 a3=1 items=0 ppid=1 pid=3656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:37.085222 kernel: audit: type=1300 audit(1696274197.047:1145): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe95a3f10 a2=3 a3=1 items=0 ppid=1 pid=3656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:37.047000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:37.089043 kernel: audit: type=1327 audit(1696274197.047:1145): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:37.094500 systemd[1]: Started session-14.scope. Oct 2 19:16:37.096056 systemd-logind[1652]: New session 14 of user core. Oct 2 19:16:37.104000 audit[3656]: USER_START pid=3656 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.109000 audit[3658]: CRED_ACQ pid=3658 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.126486 kernel: audit: type=1105 audit(1696274197.104:1146): pid=3656 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.126617 kernel: audit: type=1103 audit(1696274197.109:1147): pid=3658 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.381354 sshd[3656]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:37.382000 audit[3656]: USER_END pid=3656 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.387409 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:16:37.388825 systemd[1]: sshd@13-172.31.22.247:22-139.178.89.65:43498.service: Deactivated successfully. Oct 2 19:16:37.384000 audit[3656]: CRED_DISP pid=3656 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.396798 systemd-logind[1652]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:16:37.398440 systemd-logind[1652]: Removed session 14. Oct 2 19:16:37.404440 kernel: audit: type=1106 audit(1696274197.382:1148): pid=3656 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.404522 kernel: audit: type=1104 audit(1696274197.384:1149): pid=3656 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:37.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.247:22-139.178.89.65:43498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:38.779000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:38.779000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:38.779000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40029000e0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:16:38.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:38.779000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028ce2e0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:16:38.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:38.781000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:38.781000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028ce520 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:16:38.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:38.785000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:38.785000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002900200 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:16:38.785000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:39.353409 kubelet[2978]: E1002 19:16:39.353344 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:40.446445 kubelet[2978]: E1002 19:16:40.446407 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:16:44.354239 kubelet[2978]: E1002 19:16:44.354188 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:47.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.22.247:22-139.178.89.65:52592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:47.414168 systemd[1]: Started sshd@14-172.31.22.247:22-139.178.89.65:52592.service. Oct 2 19:16:47.417242 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:16:47.417365 kernel: audit: type=1130 audit(1696274207.413:1155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.22.247:22-139.178.89.65:52592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:47.596000 audit[3671]: USER_ACCT pid=3671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.598144 sshd[3671]: Accepted publickey for core from 139.178.89.65 port 52592 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:47.611038 kernel: audit: type=1101 audit(1696274207.596:1156): pid=3671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.611189 kernel: audit: type=1103 audit(1696274207.609:1157): pid=3671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.609000 audit[3671]: CRED_ACQ pid=3671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.611916 sshd[3671]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:47.626867 kernel: audit: type=1006 audit(1696274207.609:1158): pid=3671 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:16:47.609000 audit[3671]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5a7b540 a2=3 a3=1 items=0 ppid=1 pid=3671 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:47.637502 kernel: audit: type=1300 audit(1696274207.609:1158): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5a7b540 a2=3 a3=1 items=0 ppid=1 pid=3671 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:47.609000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:47.641279 kernel: audit: type=1327 audit(1696274207.609:1158): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:47.645389 systemd-logind[1652]: New session 15 of user core. Oct 2 19:16:47.645500 systemd[1]: Started session-15.scope. Oct 2 19:16:47.655000 audit[3671]: USER_START pid=3671 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.668000 audit[3673]: CRED_ACQ pid=3673 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.678864 kernel: audit: type=1105 audit(1696274207.655:1159): pid=3671 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.679025 kernel: audit: type=1103 audit(1696274207.668:1160): pid=3673 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.929607 sshd[3671]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:47.931000 audit[3671]: USER_END pid=3671 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.932000 audit[3671]: CRED_DISP pid=3671 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.945123 systemd[1]: sshd@14-172.31.22.247:22-139.178.89.65:52592.service: Deactivated successfully. Oct 2 19:16:47.946385 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:16:47.948585 systemd-logind[1652]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:16:47.950565 systemd-logind[1652]: Removed session 15. Oct 2 19:16:47.953104 kernel: audit: type=1106 audit(1696274207.931:1161): pid=3671 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.953298 kernel: audit: type=1104 audit(1696274207.932:1162): pid=3671 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:47.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.22.247:22-139.178.89.65:52592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:49.356107 kubelet[2978]: E1002 19:16:49.356060 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:54.357829 kubelet[2978]: E1002 19:16:54.357785 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:55.447058 kubelet[2978]: E1002 19:16:55.446986 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:16:57.965554 systemd[1]: Started sshd@15-172.31.22.247:22-139.178.89.65:50960.service. Oct 2 19:16:57.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.247:22-139.178.89.65:50960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.969021 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:57.969157 kernel: audit: type=1130 audit(1696274217.965:1164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.247:22-139.178.89.65:50960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:58.148000 audit[3683]: USER_ACCT pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.151218 sshd[3683]: Accepted publickey for core from 139.178.89.65 port 50960 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:58.163064 kernel: audit: type=1101 audit(1696274218.148:1165): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.161000 audit[3683]: CRED_ACQ pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.163886 sshd[3683]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:58.179640 kernel: audit: type=1103 audit(1696274218.161:1166): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.179750 kernel: audit: type=1006 audit(1696274218.162:1167): pid=3683 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:16:58.162000 audit[3683]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd8b02d0 a2=3 a3=1 items=0 ppid=1 pid=3683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:58.192570 kernel: audit: type=1300 audit(1696274218.162:1167): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd8b02d0 a2=3 a3=1 items=0 ppid=1 pid=3683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:58.185683 systemd-logind[1652]: New session 16 of user core. Oct 2 19:16:58.186964 systemd[1]: Started session-16.scope. Oct 2 19:16:58.162000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:58.196920 kernel: audit: type=1327 audit(1696274218.162:1167): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:58.197000 audit[3683]: USER_START pid=3683 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.204000 audit[3685]: CRED_ACQ pid=3685 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.218506 kernel: audit: type=1105 audit(1696274218.197:1168): pid=3683 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.228023 kernel: audit: type=1103 audit(1696274218.204:1169): pid=3685 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.476327 sshd[3683]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:58.477000 audit[3683]: USER_END pid=3683 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.482896 systemd[1]: sshd@15-172.31.22.247:22-139.178.89.65:50960.service: Deactivated successfully. Oct 2 19:16:58.484151 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:16:58.491630 systemd-logind[1652]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:16:58.477000 audit[3683]: CRED_DISP pid=3683 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.500875 kernel: audit: type=1106 audit(1696274218.477:1170): pid=3683 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.500979 kernel: audit: type=1104 audit(1696274218.477:1171): pid=3683 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:58.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.247:22-139.178.89.65:50960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:58.502134 systemd-logind[1652]: Removed session 16. Oct 2 19:16:59.359218 kubelet[2978]: E1002 19:16:59.359184 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:04.361435 kubelet[2978]: E1002 19:17:04.361386 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:08.509149 systemd[1]: Started sshd@16-172.31.22.247:22-139.178.89.65:55660.service. Oct 2 19:17:08.521224 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:17:08.521374 kernel: audit: type=1130 audit(1696274228.509:1173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.247:22-139.178.89.65:55660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:08.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.247:22-139.178.89.65:55660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:08.694000 audit[3696]: USER_ACCT pid=3696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:08.699034 sshd[3696]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:08.700357 sshd[3696]: Accepted publickey for core from 139.178.89.65 port 55660 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:08.697000 audit[3696]: CRED_ACQ pid=3696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:08.716155 kernel: audit: type=1101 audit(1696274228.694:1174): pid=3696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:08.716260 kernel: audit: type=1103 audit(1696274228.697:1175): pid=3696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:08.722712 kernel: audit: type=1006 audit(1696274228.697:1176): pid=3696 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:17:08.697000 audit[3696]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1ed0590 a2=3 a3=1 items=0 ppid=1 pid=3696 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:08.733649 kernel: audit: type=1300 audit(1696274228.697:1176): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1ed0590 a2=3 a3=1 items=0 ppid=1 pid=3696 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:08.733763 kernel: audit: type=1327 audit(1696274228.697:1176): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:08.697000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:08.741971 systemd-logind[1652]: New session 17 of user core. Oct 2 19:17:08.744053 systemd[1]: Started session-17.scope. Oct 2 19:17:08.753000 audit[3696]: USER_START pid=3696 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:08.765000 audit[3698]: CRED_ACQ pid=3698 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:08.776174 kernel: audit: type=1105 audit(1696274228.753:1177): pid=3696 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:08.776306 kernel: audit: type=1103 audit(1696274228.765:1178): pid=3698 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.042530 sshd[3696]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:09.043000 audit[3696]: USER_END pid=3696 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.043000 audit[3696]: CRED_DISP pid=3696 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.067039 kernel: audit: type=1106 audit(1696274229.043:1179): pid=3696 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.067163 kernel: audit: type=1104 audit(1696274229.043:1180): pid=3696 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.067426 systemd[1]: sshd@16-172.31.22.247:22-139.178.89.65:55660.service: Deactivated successfully. Oct 2 19:17:09.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.247:22-139.178.89.65:55660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:09.068881 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:17:09.078665 systemd-logind[1652]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:17:09.083030 systemd[1]: Started sshd@17-172.31.22.247:22-139.178.89.65:55672.service. Oct 2 19:17:09.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.22.247:22-139.178.89.65:55672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:09.087646 systemd-logind[1652]: Removed session 17. Oct 2 19:17:09.269000 audit[3708]: USER_ACCT pid=3708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.270499 sshd[3708]: Accepted publickey for core from 139.178.89.65 port 55672 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:09.272000 audit[3708]: CRED_ACQ pid=3708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.272000 audit[3708]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5227a20 a2=3 a3=1 items=0 ppid=1 pid=3708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:09.272000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:09.273976 sshd[3708]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:09.282085 systemd-logind[1652]: New session 18 of user core. Oct 2 19:17:09.283161 systemd[1]: Started session-18.scope. Oct 2 19:17:09.293000 audit[3708]: USER_START pid=3708 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.299000 audit[3710]: CRED_ACQ pid=3710 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:09.362641 kubelet[2978]: E1002 19:17:09.362454 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:09.448322 kubelet[2978]: E1002 19:17:09.446960 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:17:11.050000 audit[3708]: USER_END pid=3708 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:11.049631 sshd[3708]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:11.050000 audit[3708]: CRED_DISP pid=3708 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:11.056104 systemd-logind[1652]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:17:11.057527 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:17:11.058842 systemd[1]: sshd@17-172.31.22.247:22-139.178.89.65:55672.service: Deactivated successfully. Oct 2 19:17:11.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.22.247:22-139.178.89.65:55672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.061898 systemd-logind[1652]: Removed session 18. Oct 2 19:17:11.085275 systemd[1]: Started sshd@18-172.31.22.247:22-139.178.89.65:55674.service. Oct 2 19:17:11.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.22.247:22-139.178.89.65:55674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.263000 audit[3718]: USER_ACCT pid=3718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:11.264907 sshd[3718]: Accepted publickey for core from 139.178.89.65 port 55674 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:11.266000 audit[3718]: CRED_ACQ pid=3718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:11.266000 audit[3718]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6bcab10 a2=3 a3=1 items=0 ppid=1 pid=3718 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:11.266000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:11.268405 sshd[3718]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:11.276250 systemd-logind[1652]: New session 19 of user core. Oct 2 19:17:11.277364 systemd[1]: Started session-19.scope. Oct 2 19:17:11.287000 audit[3718]: USER_START pid=3718 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:11.294000 audit[3720]: CRED_ACQ pid=3720 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:11.573542 sshd[3718]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:11.574000 audit[3718]: USER_END pid=3718 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:11.574000 audit[3718]: CRED_DISP pid=3718 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:11.579894 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:17:11.581112 systemd[1]: sshd@18-172.31.22.247:22-139.178.89.65:55674.service: Deactivated successfully. Oct 2 19:17:11.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.22.247:22-139.178.89.65:55674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:11.582773 systemd-logind[1652]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:17:11.584963 systemd-logind[1652]: Removed session 19. Oct 2 19:17:14.364040 kubelet[2978]: E1002 19:17:14.363973 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:19.365079 kubelet[2978]: E1002 19:17:19.364974 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:21.605790 systemd[1]: Started sshd@19-172.31.22.247:22-139.178.89.65:40324.service. Oct 2 19:17:21.617689 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:17:21.617748 kernel: audit: type=1130 audit(1696274241.605:1200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.22.247:22-139.178.89.65:40324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.22.247:22-139.178.89.65:40324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.790000 audit[3731]: USER_ACCT pid=3731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.791648 sshd[3731]: Accepted publickey for core from 139.178.89.65 port 40324 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:21.803051 kernel: audit: type=1101 audit(1696274241.790:1201): pid=3731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.805134 sshd[3731]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:21.803000 audit[3731]: CRED_ACQ pid=3731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.821666 kernel: audit: type=1103 audit(1696274241.803:1202): pid=3731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.821806 kernel: audit: type=1006 audit(1696274241.803:1203): pid=3731 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:17:21.803000 audit[3731]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9234d30 a2=3 a3=1 items=0 ppid=1 pid=3731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:21.832412 kernel: audit: type=1300 audit(1696274241.803:1203): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9234d30 a2=3 a3=1 items=0 ppid=1 pid=3731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:21.832546 kernel: audit: type=1327 audit(1696274241.803:1203): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:21.803000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:21.841088 systemd-logind[1652]: New session 20 of user core. Oct 2 19:17:21.842486 systemd[1]: Started session-20.scope. Oct 2 19:17:21.851000 audit[3731]: USER_START pid=3731 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.858000 audit[3733]: CRED_ACQ pid=3733 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.873932 kernel: audit: type=1105 audit(1696274241.851:1204): pid=3731 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:21.874051 kernel: audit: type=1103 audit(1696274241.858:1205): pid=3733 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:22.126629 sshd[3731]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:22.127000 audit[3731]: USER_END pid=3731 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:22.132859 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:17:22.134199 systemd[1]: sshd@19-172.31.22.247:22-139.178.89.65:40324.service: Deactivated successfully. Oct 2 19:17:22.142665 systemd-logind[1652]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:17:22.127000 audit[3731]: CRED_DISP pid=3731 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:22.152968 kernel: audit: type=1106 audit(1696274242.127:1206): pid=3731 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:22.153073 kernel: audit: type=1104 audit(1696274242.127:1207): pid=3731 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:22.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.22.247:22-139.178.89.65:40324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:22.153669 systemd-logind[1652]: Removed session 20. Oct 2 19:17:23.211000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:23.211000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000df20c0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:23.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:23.221000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:23.221000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000df69f0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:23.221000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:24.366796 kubelet[2978]: E1002 19:17:24.366748 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:24.446602 kubelet[2978]: E1002 19:17:24.446549 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:17:24.889000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:24.889000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40105f9680 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:17:24.889000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:24.892000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:24.892000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40105b7a60 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:17:24.892000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:24.897000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:24.897000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40105f96e0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:17:24.897000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:24.905000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:24.905000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40105f9800 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:17:24.905000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:24.949000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:24.949000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4010612c00 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:17:24.949000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:24.953000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:24.953000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4010642500 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:17:24.953000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:29.368436 kubelet[2978]: E1002 19:17:29.368379 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:32.155418 systemd[1]: Started sshd@20-172.31.22.247:22-139.178.89.65:55680.service. Oct 2 19:17:32.160215 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:17:32.160357 kernel: audit: type=1130 audit(1696274252.154:1217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.22.247:22-139.178.89.65:55680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:32.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.22.247:22-139.178.89.65:55680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:32.339000 audit[3745]: USER_ACCT pid=3745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.340906 sshd[3745]: Accepted publickey for core from 139.178.89.65 port 55680 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:32.352080 kernel: audit: type=1101 audit(1696274252.339:1218): pid=3745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.352000 audit[3745]: CRED_ACQ pid=3745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.354227 sshd[3745]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:32.369058 kernel: audit: type=1103 audit(1696274252.352:1219): pid=3745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.369176 kernel: audit: type=1006 audit(1696274252.352:1220): pid=3745 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:17:32.352000 audit[3745]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8018fc0 a2=3 a3=1 items=0 ppid=1 pid=3745 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:32.380077 kernel: audit: type=1300 audit(1696274252.352:1220): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8018fc0 a2=3 a3=1 items=0 ppid=1 pid=3745 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:32.352000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:32.384533 kernel: audit: type=1327 audit(1696274252.352:1220): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:32.389350 systemd-logind[1652]: New session 21 of user core. Oct 2 19:17:32.391317 systemd[1]: Started session-21.scope. Oct 2 19:17:32.400000 audit[3745]: USER_START pid=3745 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.407000 audit[3747]: CRED_ACQ pid=3747 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.422655 kernel: audit: type=1105 audit(1696274252.400:1221): pid=3745 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.422774 kernel: audit: type=1103 audit(1696274252.407:1222): pid=3747 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.674295 sshd[3745]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:32.675000 audit[3745]: USER_END pid=3745 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.681513 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:17:32.682786 systemd[1]: sshd@20-172.31.22.247:22-139.178.89.65:55680.service: Deactivated successfully. Oct 2 19:17:32.677000 audit[3745]: CRED_DISP pid=3745 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.698166 kernel: audit: type=1106 audit(1696274252.675:1223): pid=3745 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.698316 kernel: audit: type=1104 audit(1696274252.677:1224): pid=3745 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:32.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.22.247:22-139.178.89.65:55680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:32.698787 systemd-logind[1652]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:17:32.700735 systemd-logind[1652]: Removed session 21. Oct 2 19:17:34.369886 kubelet[2978]: E1002 19:17:34.369830 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:35.446976 kubelet[2978]: E1002 19:17:35.446914 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:17:38.779000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.782956 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:17:38.783078 kernel: audit: type=1400 audit(1696274258.779:1226): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.780000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.780000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ed1660 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:38.817449 kernel: audit: type=1400 audit(1696274258.780:1227): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.817618 kernel: audit: type=1300 audit(1696274258.780:1227): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ed1660 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:38.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.781000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.839047 kernel: audit: type=1327 audit(1696274258.780:1227): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.839200 kernel: audit: type=1400 audit(1696274258.781:1228): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.839274 kernel: audit: type=1300 audit(1696274258.781:1228): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ed1780 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:38.781000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ed1780 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:38.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.862050 kernel: audit: type=1327 audit(1696274258.781:1228): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.779000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010ac900 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:38.874595 kernel: audit: type=1300 audit(1696274258.779:1226): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010ac900 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:38.874733 kernel: audit: type=1327 audit(1696274258.779:1226): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:38.786000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.894656 kernel: audit: type=1400 audit(1696274258.786:1229): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:38.786000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010ac920 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:17:38.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:39.371122 kubelet[2978]: E1002 19:17:39.371083 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:42.707293 systemd[1]: Started sshd@21-172.31.22.247:22-139.178.89.65:60724.service. Oct 2 19:17:42.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.22.247:22-139.178.89.65:60724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:42.890267 sshd[3756]: Accepted publickey for core from 139.178.89.65 port 60724 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:42.889000 audit[3756]: USER_ACCT pid=3756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.893743 sshd[3756]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:42.891000 audit[3756]: CRED_ACQ pid=3756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.892000 audit[3756]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe255b620 a2=3 a3=1 items=0 ppid=1 pid=3756 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:42.892000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:42.905339 systemd[1]: Started session-22.scope. Oct 2 19:17:42.910129 systemd-logind[1652]: New session 22 of user core. Oct 2 19:17:42.927000 audit[3756]: USER_START pid=3756 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:42.934000 audit[3758]: CRED_ACQ pid=3758 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:43.214296 sshd[3756]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:43.216000 audit[3756]: USER_END pid=3756 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:43.217000 audit[3756]: CRED_DISP pid=3756 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:43.221266 systemd-logind[1652]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:17:43.221828 systemd[1]: sshd@21-172.31.22.247:22-139.178.89.65:60724.service: Deactivated successfully. Oct 2 19:17:43.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.22.247:22-139.178.89.65:60724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:43.223144 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:17:43.225083 systemd-logind[1652]: Removed session 22. Oct 2 19:17:44.373973 kubelet[2978]: E1002 19:17:44.373898 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:49.375435 kubelet[2978]: E1002 19:17:49.375388 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:49.452070 env[1657]: time="2023-10-02T19:17:49.451938467Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:17:49.477064 env[1657]: time="2023-10-02T19:17:49.476966240Z" level=info msg="CreateContainer within sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f\"" Oct 2 19:17:49.478236 env[1657]: time="2023-10-02T19:17:49.478192700Z" level=info msg="StartContainer for \"4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f\"" Oct 2 19:17:49.542584 systemd[1]: Started cri-containerd-4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f.scope. Oct 2 19:17:49.549650 systemd[1]: run-containerd-runc-k8s.io-4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f-runc.AxgUzJ.mount: Deactivated successfully. Oct 2 19:17:49.580805 systemd[1]: cri-containerd-4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f.scope: Deactivated successfully. Oct 2 19:17:49.597951 env[1657]: time="2023-10-02T19:17:49.597871688Z" level=info msg="shim disconnected" id=4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f Oct 2 19:17:49.598258 env[1657]: time="2023-10-02T19:17:49.597952688Z" level=warning msg="cleaning up after shim disconnected" id=4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f namespace=k8s.io Oct 2 19:17:49.598258 env[1657]: time="2023-10-02T19:17:49.597975752Z" level=info msg="cleaning up dead shim" Oct 2 19:17:49.625328 env[1657]: time="2023-10-02T19:17:49.625265189Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:17:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3791 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:17:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:17:49.626939 env[1657]: time="2023-10-02T19:17:49.625956317Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:17:49.627300 env[1657]: time="2023-10-02T19:17:49.626756921Z" level=error msg="Failed to pipe stdout of container \"4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f\"" error="reading from a closed fifo" Oct 2 19:17:49.627494 env[1657]: time="2023-10-02T19:17:49.627191621Z" level=error msg="Failed to pipe stderr of container \"4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f\"" error="reading from a closed fifo" Oct 2 19:17:49.629577 env[1657]: time="2023-10-02T19:17:49.629491361Z" level=error msg="StartContainer for \"4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:17:49.629835 kubelet[2978]: E1002 19:17:49.629800 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f" Oct 2 19:17:49.629980 kubelet[2978]: E1002 19:17:49.629945 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:17:49.629980 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:17:49.629980 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:17:49.629980 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fwc8f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:17:49.630394 kubelet[2978]: E1002 19:17:49.630056 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:17:49.970539 kubelet[2978]: I1002 19:17:49.967865 2978 scope.go:115] "RemoveContainer" containerID="c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21" Oct 2 19:17:49.970539 kubelet[2978]: I1002 19:17:49.968474 2978 scope.go:115] "RemoveContainer" containerID="c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21" Oct 2 19:17:49.976305 env[1657]: time="2023-10-02T19:17:49.976254353Z" level=info msg="RemoveContainer for \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\"" Oct 2 19:17:49.980601 env[1657]: time="2023-10-02T19:17:49.980544340Z" level=info msg="RemoveContainer for \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\"" Oct 2 19:17:49.981040 env[1657]: time="2023-10-02T19:17:49.980931772Z" level=error msg="RemoveContainer for \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\" failed" error="rpc error: code = NotFound desc = get container info: container \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\" in namespace \"k8s.io\": not found" Oct 2 19:17:49.981669 kubelet[2978]: E1002 19:17:49.981638 2978 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\" in namespace \"k8s.io\": not found" containerID="c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21" Oct 2 19:17:49.982615 kubelet[2978]: E1002 19:17:49.981861 2978 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21" in namespace "k8s.io": not found; Skipping pod "cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)" Oct 2 19:17:49.982615 kubelet[2978]: E1002 19:17:49.982376 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:17:49.985193 env[1657]: time="2023-10-02T19:17:49.985122364Z" level=info msg="RemoveContainer for \"c6acdcb6822f6ef314740264cc7da0db4987e3dd6ac59c331e22f0826d5c5f21\" returns successfully" Oct 2 19:17:50.465207 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f-rootfs.mount: Deactivated successfully. Oct 2 19:17:52.702952 kubelet[2978]: W1002 19:17:52.702905 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod878064ee_fd7d_40fc_910c_0067678585ef.slice/cri-containerd-4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f.scope WatchSource:0}: task 4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f not found: not found Oct 2 19:17:53.246907 systemd[1]: Started sshd@22-172.31.22.247:22-139.178.89.65:46040.service. Oct 2 19:17:53.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.22.247:22-139.178.89.65:46040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:53.251028 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:17:53.251168 kernel: audit: type=1130 audit(1696274273.246:1239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.22.247:22-139.178.89.65:46040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:53.431000 audit[3806]: USER_ACCT pid=3806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.432734 sshd[3806]: Accepted publickey for core from 139.178.89.65 port 46040 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:53.436738 sshd[3806]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:53.434000 audit[3806]: CRED_ACQ pid=3806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.452636 kernel: audit: type=1101 audit(1696274273.431:1240): pid=3806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.452777 kernel: audit: type=1103 audit(1696274273.434:1241): pid=3806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.459970 kernel: audit: type=1006 audit(1696274273.435:1242): pid=3806 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:17:53.435000 audit[3806]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfe49410 a2=3 a3=1 items=0 ppid=1 pid=3806 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.471076 kernel: audit: type=1300 audit(1696274273.435:1242): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfe49410 a2=3 a3=1 items=0 ppid=1 pid=3806 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:53.435000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:53.475430 kernel: audit: type=1327 audit(1696274273.435:1242): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:53.481637 systemd-logind[1652]: New session 23 of user core. Oct 2 19:17:53.484953 systemd[1]: Started session-23.scope. Oct 2 19:17:53.493000 audit[3806]: USER_START pid=3806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.500000 audit[3808]: CRED_ACQ pid=3808 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.515504 kernel: audit: type=1105 audit(1696274273.493:1243): pid=3806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.515626 kernel: audit: type=1103 audit(1696274273.500:1244): pid=3808 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.761343 sshd[3806]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:53.762000 audit[3806]: USER_END pid=3806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.767759 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:17:53.769096 systemd[1]: sshd@22-172.31.22.247:22-139.178.89.65:46040.service: Deactivated successfully. Oct 2 19:17:53.764000 audit[3806]: CRED_DISP pid=3806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.784867 kernel: audit: type=1106 audit(1696274273.762:1245): pid=3806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.784966 kernel: audit: type=1104 audit(1696274273.764:1246): pid=3806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:53.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.22.247:22-139.178.89.65:46040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:53.785776 systemd-logind[1652]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:17:53.787522 systemd-logind[1652]: Removed session 23. Oct 2 19:17:54.378321 kubelet[2978]: E1002 19:17:54.378264 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:59.379825 kubelet[2978]: E1002 19:17:59.379793 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:03.447369 kubelet[2978]: E1002 19:18:03.447256 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:18:03.792581 systemd[1]: Started sshd@23-172.31.22.247:22-139.178.89.65:52174.service. Oct 2 19:18:03.804899 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:03.805086 kernel: audit: type=1130 audit(1696274283.792:1248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.22.247:22-139.178.89.65:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:03.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.22.247:22-139.178.89.65:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:03.975000 audit[3817]: USER_ACCT pid=3817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.979891 sshd[3817]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:03.981592 sshd[3817]: Accepted publickey for core from 139.178.89.65 port 52174 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:03.978000 audit[3817]: CRED_ACQ pid=3817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.996446 kernel: audit: type=1101 audit(1696274283.975:1249): pid=3817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:03.996577 kernel: audit: type=1103 audit(1696274283.978:1250): pid=3817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.004063 kernel: audit: type=1006 audit(1696274283.978:1251): pid=3817 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:18:04.004190 kernel: audit: type=1300 audit(1696274283.978:1251): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7cdb3a0 a2=3 a3=1 items=0 ppid=1 pid=3817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.978000 audit[3817]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7cdb3a0 a2=3 a3=1 items=0 ppid=1 pid=3817 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:03.978000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:04.018333 kernel: audit: type=1327 audit(1696274283.978:1251): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:04.020113 systemd-logind[1652]: New session 24 of user core. Oct 2 19:18:04.021929 systemd[1]: Started session-24.scope. Oct 2 19:18:04.031000 audit[3817]: USER_START pid=3817 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.045217 kernel: audit: type=1105 audit(1696274284.031:1252): pid=3817 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.045000 audit[3819]: CRED_ACQ pid=3819 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.057046 kernel: audit: type=1103 audit(1696274284.045:1253): pid=3819 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.337310 sshd[3817]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:04.338000 audit[3817]: USER_END pid=3817 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.342447 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:18:04.344203 systemd[1]: sshd@23-172.31.22.247:22-139.178.89.65:52174.service: Deactivated successfully. Oct 2 19:18:04.339000 audit[3817]: CRED_DISP pid=3817 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.352088 systemd-logind[1652]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:18:04.353739 systemd-logind[1652]: Removed session 24. Oct 2 19:18:04.360450 kernel: audit: type=1106 audit(1696274284.338:1254): pid=3817 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.360584 kernel: audit: type=1104 audit(1696274284.339:1255): pid=3817 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:04.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.22.247:22-139.178.89.65:52174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:04.382325 kubelet[2978]: E1002 19:18:04.382266 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:09.383789 kubelet[2978]: E1002 19:18:09.383736 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:14.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.22.247:22-139.178.89.65:58242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:14.368962 systemd[1]: Started sshd@24-172.31.22.247:22-139.178.89.65:58242.service. Oct 2 19:18:14.371393 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:14.371499 kernel: audit: type=1130 audit(1696274294.368:1257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.22.247:22-139.178.89.65:58242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:14.384949 kubelet[2978]: E1002 19:18:14.384905 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:14.446928 kubelet[2978]: E1002 19:18:14.446858 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:18:14.554000 audit[3829]: USER_ACCT pid=3829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.558469 sshd[3829]: Accepted publickey for core from 139.178.89.65 port 58242 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:14.562454 sshd[3829]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:14.560000 audit[3829]: CRED_ACQ pid=3829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.575126 kernel: audit: type=1101 audit(1696274294.554:1258): pid=3829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.575315 kernel: audit: type=1103 audit(1696274294.560:1259): pid=3829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.581619 kernel: audit: type=1006 audit(1696274294.560:1260): pid=3829 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:18:14.560000 audit[3829]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd06c30b0 a2=3 a3=1 items=0 ppid=1 pid=3829 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:14.592416 kernel: audit: type=1300 audit(1696274294.560:1260): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd06c30b0 a2=3 a3=1 items=0 ppid=1 pid=3829 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:14.593347 kernel: audit: type=1327 audit(1696274294.560:1260): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:14.560000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:14.598051 systemd-logind[1652]: New session 25 of user core. Oct 2 19:18:14.598271 systemd[1]: Started session-25.scope. Oct 2 19:18:14.608000 audit[3829]: USER_START pid=3829 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.613000 audit[3833]: CRED_ACQ pid=3833 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.630828 kernel: audit: type=1105 audit(1696274294.608:1261): pid=3829 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.630972 kernel: audit: type=1103 audit(1696274294.613:1262): pid=3833 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.885013 sshd[3829]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:14.886000 audit[3829]: USER_END pid=3829 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.891503 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:18:14.892681 systemd[1]: sshd@24-172.31.22.247:22-139.178.89.65:58242.service: Deactivated successfully. Oct 2 19:18:14.900043 kernel: audit: type=1106 audit(1696274294.886:1263): pid=3829 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.900156 kernel: audit: type=1104 audit(1696274294.886:1264): pid=3829 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.886000 audit[3829]: CRED_DISP pid=3829 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:14.909298 systemd-logind[1652]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:18:14.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.22.247:22-139.178.89.65:58242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:14.911059 systemd-logind[1652]: Removed session 25. Oct 2 19:18:19.387853 kubelet[2978]: E1002 19:18:19.387789 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:23.212000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.215054 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:23.215150 kernel: audit: type=1400 audit(1696274303.212:1266): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.212000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024fb260 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:18:23.237001 kernel: audit: type=1300 audit(1696274303.212:1266): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024fb260 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:18:23.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:23.247825 kernel: audit: type=1327 audit(1696274303.212:1266): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:23.247928 kernel: audit: type=1400 audit(1696274303.220:1267): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.220000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:23.220000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017e7d10 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:18:23.270167 kernel: audit: type=1300 audit(1696274303.220:1267): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017e7d10 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:18:23.270254 kernel: audit: type=1327 audit(1696274303.220:1267): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:23.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:24.389225 kubelet[2978]: E1002 19:18:24.389172 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:24.890000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:24.890000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40091032c0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:18:24.913905 kernel: audit: type=1400 audit(1696274304.890:1268): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:24.914078 kernel: audit: type=1300 audit(1696274304.890:1268): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40091032c0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:18:24.927321 kernel: audit: type=1327 audit(1696274304.890:1268): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:24.890000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:24.893000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:24.938972 kernel: audit: type=1400 audit(1696274304.893:1269): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:24.933732 systemd[1]: Started sshd@25-172.31.22.247:22-139.178.89.65:43954.service. Oct 2 19:18:24.893000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002a2b040 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:18:24.893000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:24.898000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:24.898000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009103350 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:18:24.898000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:24.906000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:24.906000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009103500 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:18:24.906000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:24.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.22.247:22-139.178.89.65:43954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:24.950000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:24.950000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40091036e0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:18:24.950000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:24.953000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:24.953000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002876c80 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:18:24.953000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:25.109000 audit[3843]: USER_ACCT pid=3843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:25.110412 sshd[3843]: Accepted publickey for core from 139.178.89.65 port 43954 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:25.111000 audit[3843]: CRED_ACQ pid=3843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:25.112000 audit[3843]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7110430 a2=3 a3=1 items=0 ppid=1 pid=3843 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:25.112000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:25.114249 sshd[3843]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:25.122760 systemd-logind[1652]: New session 26 of user core. Oct 2 19:18:25.123753 systemd[1]: Started session-26.scope. Oct 2 19:18:25.132000 audit[3843]: USER_START pid=3843 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:25.139000 audit[3845]: CRED_ACQ pid=3845 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:25.409911 sshd[3843]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:25.410000 audit[3843]: USER_END pid=3843 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:25.411000 audit[3843]: CRED_DISP pid=3843 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:25.415917 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:18:25.417127 systemd[1]: sshd@25-172.31.22.247:22-139.178.89.65:43954.service: Deactivated successfully. Oct 2 19:18:25.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.22.247:22-139.178.89.65:43954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:25.418856 systemd-logind[1652]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:18:25.420592 systemd-logind[1652]: Removed session 26. Oct 2 19:18:26.446364 kubelet[2978]: E1002 19:18:26.446302 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:18:29.391031 kubelet[2978]: E1002 19:18:29.390759 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:34.392322 kubelet[2978]: E1002 19:18:34.392283 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:35.441187 systemd[1]: Started sshd@26-172.31.22.247:22-139.178.89.65:38168.service. Oct 2 19:18:35.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.22.247:22-139.178.89.65:38168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:35.448024 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:18:35.448206 kernel: audit: type=1130 audit(1696274315.441:1283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.22.247:22-139.178.89.65:38168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:35.628000 audit[3859]: USER_ACCT pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.629470 sshd[3859]: Accepted publickey for core from 139.178.89.65 port 38168 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:35.633428 sshd[3859]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:35.631000 audit[3859]: CRED_ACQ pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.649645 kernel: audit: type=1101 audit(1696274315.628:1284): pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.649751 kernel: audit: type=1103 audit(1696274315.631:1285): pid=3859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.656537 kernel: audit: type=1006 audit(1696274315.631:1286): pid=3859 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:18:35.631000 audit[3859]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1237620 a2=3 a3=1 items=0 ppid=1 pid=3859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:35.670053 kernel: audit: type=1300 audit(1696274315.631:1286): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1237620 a2=3 a3=1 items=0 ppid=1 pid=3859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:35.670212 kernel: audit: type=1327 audit(1696274315.631:1286): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:35.631000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:35.677398 systemd-logind[1652]: New session 27 of user core. Oct 2 19:18:35.678659 systemd[1]: Started session-27.scope. Oct 2 19:18:35.689000 audit[3859]: USER_START pid=3859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.696000 audit[3862]: CRED_ACQ pid=3862 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.712926 kernel: audit: type=1105 audit(1696274315.689:1287): pid=3859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.713048 kernel: audit: type=1103 audit(1696274315.696:1288): pid=3862 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.970877 sshd[3859]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:35.972000 audit[3859]: USER_END pid=3859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.978891 systemd-logind[1652]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:18:35.981642 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:18:35.983831 systemd-logind[1652]: Removed session 27. Oct 2 19:18:35.973000 audit[3859]: CRED_DISP pid=3859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.985425 systemd[1]: sshd@26-172.31.22.247:22-139.178.89.65:38168.service: Deactivated successfully. Oct 2 19:18:35.994723 kernel: audit: type=1106 audit(1696274315.972:1289): pid=3859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.994853 kernel: audit: type=1104 audit(1696274315.973:1290): pid=3859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:35.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.22.247:22-139.178.89.65:38168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:37.012970 amazon-ssm-agent[1640]: 2023-10-02 19:18:37 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:18:37.113408 amazon-ssm-agent[1640]: 2023-10-02 19:18:37 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0e18676b10d6f4350 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0e18676b10d6f4350 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:18:37.113408 amazon-ssm-agent[1640]: status code: 400, request id: fb16a12c-9fcf-4a80-8321-ef556295aab8 Oct 2 19:18:38.781000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.781000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40025fc2e0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:18:38.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.782000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.782000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40025fc300 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:18:38.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.784000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.784000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40025fc420 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:18:38.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:38.786000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:38.786000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40022222e0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:18:38.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:39.394206 kubelet[2978]: E1002 19:18:39.394157 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:41.446890 kubelet[2978]: E1002 19:18:41.446847 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-qbsfw_kube-system(878064ee-fd7d-40fc-910c-0067678585ef)\"" pod="kube-system/cilium-qbsfw" podUID=878064ee-fd7d-40fc-910c-0067678585ef Oct 2 19:18:44.395882 kubelet[2978]: E1002 19:18:44.395837 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:46.000500 systemd[1]: Started sshd@27-172.31.22.247:22-139.178.89.65:43538.service. Oct 2 19:18:46.012385 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:18:46.012447 kernel: audit: type=1130 audit(1696274325.999:1296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.22.247:22-139.178.89.65:43538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:45.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.22.247:22-139.178.89.65:43538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:46.175000 audit[3874]: USER_ACCT pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.176833 sshd[3874]: Accepted publickey for core from 139.178.89.65 port 43538 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:46.180697 sshd[3874]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:46.187188 kernel: audit: type=1101 audit(1696274326.175:1297): pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.187305 kernel: audit: type=1103 audit(1696274326.178:1298): pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.178000 audit[3874]: CRED_ACQ pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.202823 kernel: audit: type=1006 audit(1696274326.178:1299): pid=3874 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:18:46.178000 audit[3874]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea9d4d40 a2=3 a3=1 items=0 ppid=1 pid=3874 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:46.214864 kernel: audit: type=1300 audit(1696274326.178:1299): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea9d4d40 a2=3 a3=1 items=0 ppid=1 pid=3874 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:46.178000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:46.219389 kernel: audit: type=1327 audit(1696274326.178:1299): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:46.223508 systemd-logind[1652]: New session 28 of user core. Oct 2 19:18:46.224784 systemd[1]: Started session-28.scope. Oct 2 19:18:46.233000 audit[3874]: USER_START pid=3874 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.240000 audit[3876]: CRED_ACQ pid=3876 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.254986 kernel: audit: type=1105 audit(1696274326.233:1300): pid=3874 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.255174 kernel: audit: type=1103 audit(1696274326.240:1301): pid=3876 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.503226 sshd[3874]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:46.504000 audit[3874]: USER_END pid=3874 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.504000 audit[3874]: CRED_DISP pid=3874 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.518937 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:18:46.520294 systemd[1]: sshd@27-172.31.22.247:22-139.178.89.65:43538.service: Deactivated successfully. Oct 2 19:18:46.526590 kernel: audit: type=1106 audit(1696274326.504:1302): pid=3874 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.526733 kernel: audit: type=1104 audit(1696274326.504:1303): pid=3874 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.22.247:22-139.178.89.65:43538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:46.534824 systemd-logind[1652]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:18:46.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.22.247:22-139.178.89.65:43540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:46.538407 systemd[1]: Started sshd@28-172.31.22.247:22-139.178.89.65:43540.service. Oct 2 19:18:46.542153 systemd-logind[1652]: Removed session 28. Oct 2 19:18:46.721000 audit[3885]: USER_ACCT pid=3885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.723188 sshd[3885]: Accepted publickey for core from 139.178.89.65 port 43540 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:46.724000 audit[3885]: CRED_ACQ pid=3885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.725000 audit[3885]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffded79ed0 a2=3 a3=1 items=0 ppid=1 pid=3885 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:46.725000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:46.727120 sshd[3885]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:46.736574 systemd[1]: Started session-29.scope. Oct 2 19:18:46.738457 systemd-logind[1652]: New session 29 of user core. Oct 2 19:18:46.746000 audit[3885]: USER_START pid=3885 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:46.752000 audit[3888]: CRED_ACQ pid=3888 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:49.266198 env[1657]: time="2023-10-02T19:18:49.266113008Z" level=info msg="StopPodSandbox for \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\"" Oct 2 19:18:49.266813 env[1657]: time="2023-10-02T19:18:49.266227440Z" level=info msg="Container to stop \"4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:18:49.272352 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9-shm.mount: Deactivated successfully. Oct 2 19:18:49.296140 env[1657]: time="2023-10-02T19:18:49.296055189Z" level=info msg="StopContainer for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" with timeout 30 (s)" Oct 2 19:18:49.296684 env[1657]: time="2023-10-02T19:18:49.296638859Z" level=info msg="Stop container \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" with signal terminated" Oct 2 19:18:49.308467 systemd[1]: cri-containerd-23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9.scope: Deactivated successfully. Oct 2 19:18:49.307000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:18:49.311000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:18:49.342572 systemd[1]: cri-containerd-43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5.scope: Deactivated successfully. Oct 2 19:18:49.342000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:18:49.348000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:18:49.397205 kubelet[2978]: E1002 19:18:49.396902 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:49.409949 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9-rootfs.mount: Deactivated successfully. Oct 2 19:18:49.424546 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5-rootfs.mount: Deactivated successfully. Oct 2 19:18:49.443936 env[1657]: time="2023-10-02T19:18:49.443853697Z" level=info msg="shim disconnected" id=23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9 Oct 2 19:18:49.444269 env[1657]: time="2023-10-02T19:18:49.443944273Z" level=warning msg="cleaning up after shim disconnected" id=23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9 namespace=k8s.io Oct 2 19:18:49.444269 env[1657]: time="2023-10-02T19:18:49.443967517Z" level=info msg="cleaning up dead shim" Oct 2 19:18:49.454534 env[1657]: time="2023-10-02T19:18:49.454461554Z" level=info msg="shim disconnected" id=43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5 Oct 2 19:18:49.454931 env[1657]: time="2023-10-02T19:18:49.454892727Z" level=warning msg="cleaning up after shim disconnected" id=43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5 namespace=k8s.io Oct 2 19:18:49.455090 env[1657]: time="2023-10-02T19:18:49.455059912Z" level=info msg="cleaning up dead shim" Oct 2 19:18:49.482400 env[1657]: time="2023-10-02T19:18:49.482255464Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3934 runtime=io.containerd.runc.v2\n" Oct 2 19:18:49.482927 env[1657]: time="2023-10-02T19:18:49.482870898Z" level=info msg="TearDown network for sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" successfully" Oct 2 19:18:49.483104 env[1657]: time="2023-10-02T19:18:49.482922150Z" level=info msg="StopPodSandbox for \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" returns successfully" Oct 2 19:18:49.494753 env[1657]: time="2023-10-02T19:18:49.494693783Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3939 runtime=io.containerd.runc.v2\n" Oct 2 19:18:49.497978 env[1657]: time="2023-10-02T19:18:49.497923799Z" level=info msg="StopContainer for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" returns successfully" Oct 2 19:18:49.498947 env[1657]: time="2023-10-02T19:18:49.498859934Z" level=info msg="StopPodSandbox for \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\"" Oct 2 19:18:49.499272 env[1657]: time="2023-10-02T19:18:49.498977715Z" level=info msg="Container to stop \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:18:49.501769 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac-shm.mount: Deactivated successfully. Oct 2 19:18:49.521000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:18:49.521775 systemd[1]: cri-containerd-873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac.scope: Deactivated successfully. Oct 2 19:18:49.527000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:18:49.546595 kubelet[2978]: I1002 19:18:49.546541 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cni-path\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.546595 kubelet[2978]: I1002 19:18:49.546614 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cilium-run\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.546878 kubelet[2978]: I1002 19:18:49.546668 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-fwc8f\" (UniqueName: \"kubernetes.io/projected/878064ee-fd7d-40fc-910c-0067678585ef-kube-api-access-fwc8f\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.546878 kubelet[2978]: I1002 19:18:49.546707 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-host-proc-sys-net\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.546878 kubelet[2978]: I1002 19:18:49.546746 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cilium-cgroup\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.546878 kubelet[2978]: I1002 19:18:49.546785 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-xtables-lock\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.546878 kubelet[2978]: I1002 19:18:49.546834 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-host-proc-sys-kernel\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.546878 kubelet[2978]: I1002 19:18:49.546874 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-hostproc\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.549451 kubelet[2978]: I1002 19:18:49.546910 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-bpf-maps\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.549451 kubelet[2978]: I1002 19:18:49.546954 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/878064ee-fd7d-40fc-910c-0067678585ef-hubble-tls\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.549451 kubelet[2978]: I1002 19:18:49.547023 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/878064ee-fd7d-40fc-910c-0067678585ef-cilium-config-path\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.549451 kubelet[2978]: I1002 19:18:49.547078 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.549451 kubelet[2978]: I1002 19:18:49.547125 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.549762 kubelet[2978]: I1002 19:18:49.547166 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.549762 kubelet[2978]: I1002 19:18:49.547177 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cni-path" (OuterVolumeSpecName: "cni-path") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.549762 kubelet[2978]: I1002 19:18:49.547208 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.549762 kubelet[2978]: I1002 19:18:49.547244 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.549762 kubelet[2978]: I1002 19:18:49.547249 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-hostproc" (OuterVolumeSpecName: "hostproc") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.550105 kubelet[2978]: I1002 19:18:49.547275 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.550105 kubelet[2978]: I1002 19:18:49.547796 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.550105 kubelet[2978]: I1002 19:18:49.547073 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-lib-modules\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.550105 kubelet[2978]: I1002 19:18:49.547932 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/878064ee-fd7d-40fc-910c-0067678585ef-clustermesh-secrets\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.550105 kubelet[2978]: I1002 19:18:49.548102 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-etc-cni-netd\") pod \"878064ee-fd7d-40fc-910c-0067678585ef\" (UID: \"878064ee-fd7d-40fc-910c-0067678585ef\") " Oct 2 19:18:49.550105 kubelet[2978]: I1002 19:18:49.548196 2978 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-lib-modules\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.550547 kubelet[2978]: I1002 19:18:49.548223 2978 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cni-path\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.550547 kubelet[2978]: I1002 19:18:49.548248 2978 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cilium-run\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.550547 kubelet[2978]: I1002 19:18:49.548298 2978 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-host-proc-sys-net\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.550547 kubelet[2978]: I1002 19:18:49.548328 2978 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-cilium-cgroup\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.550547 kubelet[2978]: I1002 19:18:49.548376 2978 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-xtables-lock\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.550547 kubelet[2978]: I1002 19:18:49.548406 2978 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-host-proc-sys-kernel\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.550547 kubelet[2978]: I1002 19:18:49.548453 2978 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-hostproc\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.550547 kubelet[2978]: I1002 19:18:49.548480 2978 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-bpf-maps\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.551136 kubelet[2978]: I1002 19:18:49.548539 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:49.551983 kubelet[2978]: W1002 19:18:49.551913 2978 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/878064ee-fd7d-40fc-910c-0067678585ef/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:18:49.561405 kubelet[2978]: I1002 19:18:49.561240 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/878064ee-fd7d-40fc-910c-0067678585ef-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:18:49.567706 systemd[1]: var-lib-kubelet-pods-878064ee\x2dfd7d\x2d40fc\x2d910c\x2d0067678585ef-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dfwc8f.mount: Deactivated successfully. Oct 2 19:18:49.567894 systemd[1]: var-lib-kubelet-pods-878064ee\x2dfd7d\x2d40fc\x2d910c\x2d0067678585ef-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:18:49.574337 kubelet[2978]: I1002 19:18:49.574278 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/878064ee-fd7d-40fc-910c-0067678585ef-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:49.575862 kubelet[2978]: I1002 19:18:49.575811 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/878064ee-fd7d-40fc-910c-0067678585ef-kube-api-access-fwc8f" (OuterVolumeSpecName: "kube-api-access-fwc8f") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "kube-api-access-fwc8f". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:49.579779 kubelet[2978]: I1002 19:18:49.579687 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/878064ee-fd7d-40fc-910c-0067678585ef-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "878064ee-fd7d-40fc-910c-0067678585ef" (UID: "878064ee-fd7d-40fc-910c-0067678585ef"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:18:49.617214 env[1657]: time="2023-10-02T19:18:49.617137150Z" level=info msg="shim disconnected" id=873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac Oct 2 19:18:49.617506 env[1657]: time="2023-10-02T19:18:49.617213902Z" level=warning msg="cleaning up after shim disconnected" id=873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac namespace=k8s.io Oct 2 19:18:49.617506 env[1657]: time="2023-10-02T19:18:49.617237962Z" level=info msg="cleaning up dead shim" Oct 2 19:18:49.644165 env[1657]: time="2023-10-02T19:18:49.644100105Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3983 runtime=io.containerd.runc.v2\n" Oct 2 19:18:49.644747 env[1657]: time="2023-10-02T19:18:49.644692379Z" level=info msg="TearDown network for sandbox \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" successfully" Oct 2 19:18:49.644879 env[1657]: time="2023-10-02T19:18:49.644742095Z" level=info msg="StopPodSandbox for \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" returns successfully" Oct 2 19:18:49.649600 kubelet[2978]: I1002 19:18:49.649531 2978 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-fwc8f\" (UniqueName: \"kubernetes.io/projected/878064ee-fd7d-40fc-910c-0067678585ef-kube-api-access-fwc8f\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.649600 kubelet[2978]: I1002 19:18:49.649584 2978 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/878064ee-fd7d-40fc-910c-0067678585ef-hubble-tls\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.649871 kubelet[2978]: I1002 19:18:49.649618 2978 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/878064ee-fd7d-40fc-910c-0067678585ef-cilium-config-path\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.649871 kubelet[2978]: I1002 19:18:49.649645 2978 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/878064ee-fd7d-40fc-910c-0067678585ef-etc-cni-netd\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.649871 kubelet[2978]: I1002 19:18:49.649669 2978 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/878064ee-fd7d-40fc-910c-0067678585ef-clustermesh-secrets\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.750431 kubelet[2978]: I1002 19:18:49.750394 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5b52a71c-332b-414f-8f63-7d6d29cdb0dc-cilium-config-path\") pod \"5b52a71c-332b-414f-8f63-7d6d29cdb0dc\" (UID: \"5b52a71c-332b-414f-8f63-7d6d29cdb0dc\") " Oct 2 19:18:49.750728 kubelet[2978]: I1002 19:18:49.750666 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-wc5f7\" (UniqueName: \"kubernetes.io/projected/5b52a71c-332b-414f-8f63-7d6d29cdb0dc-kube-api-access-wc5f7\") pod \"5b52a71c-332b-414f-8f63-7d6d29cdb0dc\" (UID: \"5b52a71c-332b-414f-8f63-7d6d29cdb0dc\") " Oct 2 19:18:49.750871 kubelet[2978]: W1002 19:18:49.750712 2978 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/5b52a71c-332b-414f-8f63-7d6d29cdb0dc/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:18:49.756390 kubelet[2978]: I1002 19:18:49.756334 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/5b52a71c-332b-414f-8f63-7d6d29cdb0dc-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "5b52a71c-332b-414f-8f63-7d6d29cdb0dc" (UID: "5b52a71c-332b-414f-8f63-7d6d29cdb0dc"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:18:49.760824 kubelet[2978]: I1002 19:18:49.760750 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5b52a71c-332b-414f-8f63-7d6d29cdb0dc-kube-api-access-wc5f7" (OuterVolumeSpecName: "kube-api-access-wc5f7") pod "5b52a71c-332b-414f-8f63-7d6d29cdb0dc" (UID: "5b52a71c-332b-414f-8f63-7d6d29cdb0dc"). InnerVolumeSpecName "kube-api-access-wc5f7". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:49.851670 kubelet[2978]: I1002 19:18:49.851633 2978 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5b52a71c-332b-414f-8f63-7d6d29cdb0dc-cilium-config-path\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:49.852241 kubelet[2978]: I1002 19:18:49.852217 2978 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-wc5f7\" (UniqueName: \"kubernetes.io/projected/5b52a71c-332b-414f-8f63-7d6d29cdb0dc-kube-api-access-wc5f7\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:18:50.142305 kubelet[2978]: I1002 19:18:50.141966 2978 scope.go:115] "RemoveContainer" containerID="43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5" Oct 2 19:18:50.144245 systemd[1]: Removed slice kubepods-besteffort-pod5b52a71c_332b_414f_8f63_7d6d29cdb0dc.slice. Oct 2 19:18:50.152058 env[1657]: time="2023-10-02T19:18:50.151746619Z" level=info msg="RemoveContainer for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\"" Oct 2 19:18:50.158032 env[1657]: time="2023-10-02T19:18:50.157792793Z" level=info msg="RemoveContainer for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" returns successfully" Oct 2 19:18:50.158470 kubelet[2978]: I1002 19:18:50.158390 2978 scope.go:115] "RemoveContainer" containerID="43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5" Oct 2 19:18:50.159088 env[1657]: time="2023-10-02T19:18:50.158916009Z" level=error msg="ContainerStatus for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\": not found" Oct 2 19:18:50.161107 systemd[1]: Removed slice kubepods-burstable-pod878064ee_fd7d_40fc_910c_0067678585ef.slice. Oct 2 19:18:50.163493 kubelet[2978]: E1002 19:18:50.163447 2978 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\": not found" containerID="43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5" Oct 2 19:18:50.163692 kubelet[2978]: I1002 19:18:50.163515 2978 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5} err="failed to get container status \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\": rpc error: code = NotFound desc = an error occurred when try to find container \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\": not found" Oct 2 19:18:50.163692 kubelet[2978]: I1002 19:18:50.163540 2978 scope.go:115] "RemoveContainer" containerID="4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f" Oct 2 19:18:50.172068 env[1657]: time="2023-10-02T19:18:50.171237700Z" level=info msg="RemoveContainer for \"4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f\"" Oct 2 19:18:50.176179 env[1657]: time="2023-10-02T19:18:50.176113078Z" level=info msg="RemoveContainer for \"4ec595e9c6a50ec446104d1c524431954ec5ebc58828973d216100b6a79a3a3f\" returns successfully" Oct 2 19:18:50.271893 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac-rootfs.mount: Deactivated successfully. Oct 2 19:18:50.272122 systemd[1]: var-lib-kubelet-pods-5b52a71c\x2d332b\x2d414f\x2d8f63\x2d7d6d29cdb0dc-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dwc5f7.mount: Deactivated successfully. Oct 2 19:18:50.272274 systemd[1]: var-lib-kubelet-pods-878064ee\x2dfd7d\x2d40fc\x2d910c\x2d0067678585ef-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:18:51.216968 sshd[3885]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:51.218000 audit[3885]: USER_END pid=3885 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.222583 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:18:51.222719 kernel: audit: type=1106 audit(1696274331.218:1317): pid=3885 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.218000 audit[3885]: CRED_DISP pid=3885 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.233872 systemd[1]: sshd@28-172.31.22.247:22-139.178.89.65:43540.service: Deactivated successfully. Oct 2 19:18:51.235118 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:18:51.235449 systemd[1]: session-29.scope: Consumed 1.766s CPU time. Oct 2 19:18:51.242529 kernel: audit: type=1104 audit(1696274331.218:1318): pid=3885 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.22.247:22-139.178.89.65:43540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:51.247192 systemd-logind[1652]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:18:51.259712 kernel: audit: type=1131 audit(1696274331.232:1319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.22.247:22-139.178.89.65:43540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:51.259846 kernel: audit: type=1130 audit(1696274331.256:1320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.22.247:22-139.178.89.65:43556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:51.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.22.247:22-139.178.89.65:43556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:51.257438 systemd[1]: Started sshd@29-172.31.22.247:22-139.178.89.65:43556.service. Oct 2 19:18:51.270074 systemd-logind[1652]: Removed session 29. Oct 2 19:18:51.432000 audit[4000]: USER_ACCT pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.434247 sshd[4000]: Accepted publickey for core from 139.178.89.65 port 43556 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:51.446031 kernel: audit: type=1101 audit(1696274331.432:1321): pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.446000 audit[4000]: CRED_ACQ pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.463100 kubelet[2978]: E1002 19:18:51.451533 2978 remote_runtime.go:349] "StopContainer from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\": not found" containerID="43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5" Oct 2 19:18:51.463100 kubelet[2978]: I1002 19:18:51.459200 2978 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=5b52a71c-332b-414f-8f63-7d6d29cdb0dc path="/var/lib/kubelet/pods/5b52a71c-332b-414f-8f63-7d6d29cdb0dc/volumes" Oct 2 19:18:51.463659 env[1657]: time="2023-10-02T19:18:51.450920978Z" level=info msg="StopContainer for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" with timeout 1 (s)" Oct 2 19:18:51.463659 env[1657]: time="2023-10-02T19:18:51.450984086Z" level=error msg="StopContainer for \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"43f2575a7f7dc7a8be3be1f779eb94f550f40f6a205473ba31f21bb3f8d259d5\": not found" Oct 2 19:18:51.463659 env[1657]: time="2023-10-02T19:18:51.451962762Z" level=info msg="StopPodSandbox for \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\"" Oct 2 19:18:51.463659 env[1657]: time="2023-10-02T19:18:51.452121678Z" level=info msg="TearDown network for sandbox \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" successfully" Oct 2 19:18:51.463659 env[1657]: time="2023-10-02T19:18:51.452180227Z" level=info msg="StopPodSandbox for \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" returns successfully" Oct 2 19:18:51.463659 env[1657]: time="2023-10-02T19:18:51.452420780Z" level=info msg="StopPodSandbox for \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\"" Oct 2 19:18:51.463659 env[1657]: time="2023-10-02T19:18:51.452530148Z" level=info msg="TearDown network for sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" successfully" Oct 2 19:18:51.463659 env[1657]: time="2023-10-02T19:18:51.452577512Z" level=info msg="StopPodSandbox for \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" returns successfully" Oct 2 19:18:51.468948 sshd[4000]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:51.470682 kubelet[2978]: I1002 19:18:51.470614 2978 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=878064ee-fd7d-40fc-910c-0067678585ef path="/var/lib/kubelet/pods/878064ee-fd7d-40fc-910c-0067678585ef/volumes" Oct 2 19:18:51.478950 kernel: audit: type=1103 audit(1696274331.446:1322): pid=4000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.479117 kernel: audit: type=1006 audit(1696274331.447:1323): pid=4000 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:18:51.447000 audit[4000]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7908080 a2=3 a3=1 items=0 ppid=1 pid=4000 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:51.490162 kernel: audit: type=1300 audit(1696274331.447:1323): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7908080 a2=3 a3=1 items=0 ppid=1 pid=4000 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:51.491485 kernel: audit: type=1327 audit(1696274331.447:1323): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:51.447000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:51.500049 systemd-logind[1652]: New session 30 of user core. Oct 2 19:18:51.501189 systemd[1]: Started session-30.scope. Oct 2 19:18:51.509000 audit[4000]: USER_START pid=4000 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.518000 audit[4002]: CRED_ACQ pid=4002 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:51.523049 kernel: audit: type=1105 audit(1696274331.509:1324): pid=4000 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:52.999115 kubelet[2978]: I1002 19:18:52.999043 2978 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:18:52.999115 kubelet[2978]: E1002 19:18:52.999121 2978 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: E1002 19:18:52.999145 2978 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: E1002 19:18:52.999163 2978 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: E1002 19:18:52.999181 2978 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: E1002 19:18:52.999197 2978 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5b52a71c-332b-414f-8f63-7d6d29cdb0dc" containerName="cilium-operator" Oct 2 19:18:52.999874 kubelet[2978]: E1002 19:18:52.999214 2978 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: I1002 19:18:52.999260 2978 memory_manager.go:346] "RemoveStaleState removing state" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: I1002 19:18:52.999277 2978 memory_manager.go:346] "RemoveStaleState removing state" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: I1002 19:18:52.999293 2978 memory_manager.go:346] "RemoveStaleState removing state" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: I1002 19:18:52.999308 2978 memory_manager.go:346] "RemoveStaleState removing state" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: I1002 19:18:52.999323 2978 memory_manager.go:346] "RemoveStaleState removing state" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:52.999874 kubelet[2978]: I1002 19:18:52.999339 2978 memory_manager.go:346] "RemoveStaleState removing state" podUID="5b52a71c-332b-414f-8f63-7d6d29cdb0dc" containerName="cilium-operator" Oct 2 19:18:52.999874 kubelet[2978]: E1002 19:18:52.999395 2978 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:53.000612 kubelet[2978]: I1002 19:18:52.999432 2978 memory_manager.go:346] "RemoveStaleState removing state" podUID="878064ee-fd7d-40fc-910c-0067678585ef" containerName="mount-cgroup" Oct 2 19:18:53.010624 systemd[1]: Created slice kubepods-burstable-pod0f4c4953_fc35_4587_8d90_8aa4beeb98b6.slice. Oct 2 19:18:53.018742 kubelet[2978]: W1002 19:18:53.018682 2978 reflector.go:424] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:18:53.018742 kubelet[2978]: E1002 19:18:53.018738 2978 reflector.go:140] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:18:53.019046 kubelet[2978]: W1002 19:18:53.018805 2978 reflector.go:424] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:18:53.019046 kubelet[2978]: E1002 19:18:53.018830 2978 reflector.go:140] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:18:53.019046 kubelet[2978]: W1002 19:18:53.018901 2978 reflector.go:424] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:18:53.019046 kubelet[2978]: E1002 19:18:53.018925 2978 reflector.go:140] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:18:53.019046 kubelet[2978]: W1002 19:18:53.018979 2978 reflector.go:424] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:18:53.019383 kubelet[2978]: E1002 19:18:53.019034 2978 reflector.go:140] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-22-247" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-247' and this object Oct 2 19:18:53.084237 kubelet[2978]: I1002 19:18:53.084140 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-xtables-lock\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084237 kubelet[2978]: I1002 19:18:53.084238 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-run\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084617 kubelet[2978]: I1002 19:18:53.084298 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-etc-cni-netd\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084617 kubelet[2978]: I1002 19:18:53.084360 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-ipsec-secrets\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084617 kubelet[2978]: I1002 19:18:53.084417 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-host-proc-sys-net\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084617 kubelet[2978]: I1002 19:18:53.084475 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-host-proc-sys-kernel\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084617 kubelet[2978]: I1002 19:18:53.084533 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hubble-tls\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084617 kubelet[2978]: I1002 19:18:53.084593 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hostproc\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084960 kubelet[2978]: I1002 19:18:53.084651 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-cgroup\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084960 kubelet[2978]: I1002 19:18:53.084708 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cni-path\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084960 kubelet[2978]: I1002 19:18:53.084761 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-clustermesh-secrets\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084960 kubelet[2978]: I1002 19:18:53.084840 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cwk98\" (UniqueName: \"kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-kube-api-access-cwk98\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084960 kubelet[2978]: I1002 19:18:53.084897 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-lib-modules\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.084960 kubelet[2978]: I1002 19:18:53.084954 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-config-path\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:53.085357 kubelet[2978]: I1002 19:18:53.085028 2978 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-bpf-maps\") pod \"cilium-r4px4\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " pod="kube-system/cilium-r4px4" Oct 2 19:18:54.186621 kubelet[2978]: E1002 19:18:54.186573 2978 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 19:18:54.187295 kubelet[2978]: E1002 19:18:54.186678 2978 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-clustermesh-secrets podName:0f4c4953-fc35-4587-8d90-8aa4beeb98b6 nodeName:}" failed. No retries permitted until 2023-10-02 19:18:54.686652061 +0000 UTC m=+265.927446559 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-clustermesh-secrets") pod "cilium-r4px4" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:18:54.187295 kubelet[2978]: E1002 19:18:54.186584 2978 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:18:54.187538 kubelet[2978]: E1002 19:18:54.187509 2978 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:18:54.187661 kubelet[2978]: E1002 19:18:54.187637 2978 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-r4px4: failed to sync secret cache: timed out waiting for the condition Oct 2 19:18:54.187824 kubelet[2978]: E1002 19:18:54.187802 2978 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hubble-tls podName:0f4c4953-fc35-4587-8d90-8aa4beeb98b6 nodeName:}" failed. No retries permitted until 2023-10-02 19:18:54.687776669 +0000 UTC m=+265.928571167 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hubble-tls") pod "cilium-r4px4" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:18:54.188079 kubelet[2978]: E1002 19:18:54.188051 2978 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-config-path podName:0f4c4953-fc35-4587-8d90-8aa4beeb98b6 nodeName:}" failed. No retries permitted until 2023-10-02 19:18:54.688024134 +0000 UTC m=+265.928818668 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-config-path") pod "cilium-r4px4" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:18:54.398540 kubelet[2978]: E1002 19:18:54.398486 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:54.823428 env[1657]: time="2023-10-02T19:18:54.823361739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-r4px4,Uid:0f4c4953-fc35-4587-8d90-8aa4beeb98b6,Namespace:kube-system,Attempt:0,}" Oct 2 19:18:54.859754 env[1657]: time="2023-10-02T19:18:54.859314303Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:54.859754 env[1657]: time="2023-10-02T19:18:54.859386952Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:54.859754 env[1657]: time="2023-10-02T19:18:54.859418344Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:54.860094 env[1657]: time="2023-10-02T19:18:54.859932630Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1 pid=4019 runtime=io.containerd.runc.v2 Oct 2 19:18:54.890370 systemd[1]: Started cri-containerd-95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1.scope. Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.934000 audit: BPF prog-id=137 op=LOAD Oct 2 19:18:54.936000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.936000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4019 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:54.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935373333626364343436366534303139386538356232623465363662 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4019 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:54.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935373333626364343436366534303139386538356232623465363662 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.937000 audit: BPF prog-id=138 op=LOAD Oct 2 19:18:54.937000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4019 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:54.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935373333626364343436366534303139386538356232623465363662 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.939000 audit: BPF prog-id=139 op=LOAD Oct 2 19:18:54.939000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4019 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:54.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935373333626364343436366534303139386538356232623465363662 Oct 2 19:18:54.940000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:18:54.941000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:54.941000 audit: BPF prog-id=140 op=LOAD Oct 2 19:18:54.941000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4019 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:54.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935373333626364343436366534303139386538356232623465363662 Oct 2 19:18:54.977267 env[1657]: time="2023-10-02T19:18:54.977143542Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-r4px4,Uid:0f4c4953-fc35-4587-8d90-8aa4beeb98b6,Namespace:kube-system,Attempt:0,} returns sandbox id \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\"" Oct 2 19:18:54.988533 env[1657]: time="2023-10-02T19:18:54.988476276Z" level=info msg="CreateContainer within sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:18:55.008684 env[1657]: time="2023-10-02T19:18:55.008622443Z" level=info msg="CreateContainer within sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\"" Oct 2 19:18:55.014871 env[1657]: time="2023-10-02T19:18:55.012893486Z" level=info msg="StartContainer for \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\"" Oct 2 19:18:55.056436 systemd[1]: Started cri-containerd-f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626.scope. Oct 2 19:18:55.090841 systemd[1]: cri-containerd-f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626.scope: Deactivated successfully. Oct 2 19:18:55.128986 env[1657]: time="2023-10-02T19:18:55.128917923Z" level=info msg="shim disconnected" id=f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626 Oct 2 19:18:55.129356 env[1657]: time="2023-10-02T19:18:55.129321964Z" level=warning msg="cleaning up after shim disconnected" id=f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626 namespace=k8s.io Oct 2 19:18:55.129509 env[1657]: time="2023-10-02T19:18:55.129482753Z" level=info msg="cleaning up dead shim" Oct 2 19:18:55.160124 env[1657]: time="2023-10-02T19:18:55.160060727Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4079 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:18:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:18:55.160887 env[1657]: time="2023-10-02T19:18:55.160808401Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:18:55.163182 env[1657]: time="2023-10-02T19:18:55.163115086Z" level=error msg="Failed to pipe stdout of container \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\"" error="reading from a closed fifo" Oct 2 19:18:55.163515 env[1657]: time="2023-10-02T19:18:55.163464107Z" level=error msg="Failed to pipe stderr of container \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\"" error="reading from a closed fifo" Oct 2 19:18:55.165767 env[1657]: time="2023-10-02T19:18:55.165695504Z" level=error msg="StartContainer for \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:18:55.166117 kubelet[2978]: E1002 19:18:55.166077 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626" Oct 2 19:18:55.166307 kubelet[2978]: E1002 19:18:55.166271 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:18:55.166307 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:18:55.166307 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:18:55.166307 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cwk98,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:18:55.166670 kubelet[2978]: E1002 19:18:55.166370 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:18:56.167126 env[1657]: time="2023-10-02T19:18:56.167056386Z" level=info msg="CreateContainer within sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:18:56.186392 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2886097175.mount: Deactivated successfully. Oct 2 19:18:56.200233 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3319487562.mount: Deactivated successfully. Oct 2 19:18:56.212283 env[1657]: time="2023-10-02T19:18:56.212203892Z" level=info msg="CreateContainer within sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\"" Oct 2 19:18:56.214091 env[1657]: time="2023-10-02T19:18:56.214038915Z" level=info msg="StartContainer for \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\"" Oct 2 19:18:56.262595 systemd[1]: Started cri-containerd-dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2.scope. Oct 2 19:18:56.299876 systemd[1]: cri-containerd-dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2.scope: Deactivated successfully. Oct 2 19:18:56.320251 env[1657]: time="2023-10-02T19:18:56.320182493Z" level=info msg="shim disconnected" id=dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2 Oct 2 19:18:56.320632 env[1657]: time="2023-10-02T19:18:56.320587891Z" level=warning msg="cleaning up after shim disconnected" id=dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2 namespace=k8s.io Oct 2 19:18:56.320758 env[1657]: time="2023-10-02T19:18:56.320731015Z" level=info msg="cleaning up dead shim" Oct 2 19:18:56.346724 env[1657]: time="2023-10-02T19:18:56.346659861Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4117 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:18:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:18:56.347480 env[1657]: time="2023-10-02T19:18:56.347406624Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:18:56.348537 env[1657]: time="2023-10-02T19:18:56.347967614Z" level=error msg="Failed to pipe stdout of container \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\"" error="reading from a closed fifo" Oct 2 19:18:56.348791 env[1657]: time="2023-10-02T19:18:56.348071018Z" level=error msg="Failed to pipe stderr of container \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\"" error="reading from a closed fifo" Oct 2 19:18:56.353859 env[1657]: time="2023-10-02T19:18:56.353791452Z" level=error msg="StartContainer for \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:18:56.355022 kubelet[2978]: E1002 19:18:56.354300 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2" Oct 2 19:18:56.355022 kubelet[2978]: E1002 19:18:56.354447 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:18:56.355022 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:18:56.355022 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:18:56.355780 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cwk98,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:18:56.355911 kubelet[2978]: E1002 19:18:56.354505 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:18:57.166804 kubelet[2978]: I1002 19:18:57.165978 2978 scope.go:115] "RemoveContainer" containerID="f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626" Oct 2 19:18:57.166804 kubelet[2978]: I1002 19:18:57.166563 2978 scope.go:115] "RemoveContainer" containerID="f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626" Oct 2 19:18:57.169255 env[1657]: time="2023-10-02T19:18:57.169202644Z" level=info msg="RemoveContainer for \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\"" Oct 2 19:18:57.170592 env[1657]: time="2023-10-02T19:18:57.170505897Z" level=info msg="RemoveContainer for \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\"" Oct 2 19:18:57.172802 env[1657]: time="2023-10-02T19:18:57.170682454Z" level=error msg="RemoveContainer for \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\" failed" error="failed to set removing state for container \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\": container is already in removing state" Oct 2 19:18:57.176113 kubelet[2978]: E1002 19:18:57.175183 2978 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\": container is already in removing state" containerID="f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626" Oct 2 19:18:57.176113 kubelet[2978]: E1002 19:18:57.175251 2978 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626": container is already in removing state; Skipping pod "cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6)" Oct 2 19:18:57.176113 kubelet[2978]: E1002 19:18:57.175699 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6)\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:18:57.180902 env[1657]: time="2023-10-02T19:18:57.180815628Z" level=info msg="RemoveContainer for \"f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626\" returns successfully" Oct 2 19:18:58.171299 kubelet[2978]: E1002 19:18:58.171263 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6)\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:18:58.235685 kubelet[2978]: W1002 19:18:58.235625 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0f4c4953_fc35_4587_8d90_8aa4beeb98b6.slice/cri-containerd-f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626.scope WatchSource:0}: container "f2c2d43cc0c15b8021817555de8e048f355f6325f642c5609088872a82c66626" in namespace "k8s.io": not found Oct 2 19:18:59.399664 kubelet[2978]: E1002 19:18:59.399616 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:01.344491 kubelet[2978]: W1002 19:19:01.344431 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0f4c4953_fc35_4587_8d90_8aa4beeb98b6.slice/cri-containerd-dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2.scope WatchSource:0}: task dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2 not found: not found Oct 2 19:19:04.400820 kubelet[2978]: E1002 19:19:04.400770 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:09.402825 kubelet[2978]: E1002 19:19:09.402300 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:12.450038 env[1657]: time="2023-10-02T19:19:12.449923867Z" level=info msg="CreateContainer within sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:19:12.469569 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2917027813.mount: Deactivated successfully. Oct 2 19:19:12.483409 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2216724507.mount: Deactivated successfully. Oct 2 19:19:12.484343 env[1657]: time="2023-10-02T19:19:12.484262072Z" level=info msg="CreateContainer within sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\"" Oct 2 19:19:12.485362 env[1657]: time="2023-10-02T19:19:12.485115180Z" level=info msg="StartContainer for \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\"" Oct 2 19:19:12.533556 systemd[1]: Started cri-containerd-1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622.scope. Oct 2 19:19:12.571614 systemd[1]: cri-containerd-1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622.scope: Deactivated successfully. Oct 2 19:19:12.596355 env[1657]: time="2023-10-02T19:19:12.596276556Z" level=info msg="shim disconnected" id=1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622 Oct 2 19:19:12.596691 env[1657]: time="2023-10-02T19:19:12.596659514Z" level=warning msg="cleaning up after shim disconnected" id=1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622 namespace=k8s.io Oct 2 19:19:12.596829 env[1657]: time="2023-10-02T19:19:12.596802183Z" level=info msg="cleaning up dead shim" Oct 2 19:19:12.632289 env[1657]: time="2023-10-02T19:19:12.632226500Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4154 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:19:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:19:12.633038 env[1657]: time="2023-10-02T19:19:12.632927915Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:19:12.634484 env[1657]: time="2023-10-02T19:19:12.633548569Z" level=error msg="Failed to pipe stderr of container \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\"" error="reading from a closed fifo" Oct 2 19:19:12.634621 env[1657]: time="2023-10-02T19:19:12.634324697Z" level=error msg="Failed to pipe stdout of container \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\"" error="reading from a closed fifo" Oct 2 19:19:12.637009 env[1657]: time="2023-10-02T19:19:12.636926896Z" level=error msg="StartContainer for \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:19:12.638420 kubelet[2978]: E1002 19:19:12.637480 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622" Oct 2 19:19:12.638420 kubelet[2978]: E1002 19:19:12.637660 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:19:12.638420 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:19:12.638420 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:19:12.639261 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cwk98,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:19:12.639383 kubelet[2978]: E1002 19:19:12.637720 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:19:13.206285 kubelet[2978]: I1002 19:19:13.206238 2978 scope.go:115] "RemoveContainer" containerID="dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2" Oct 2 19:19:13.206835 kubelet[2978]: I1002 19:19:13.206795 2978 scope.go:115] "RemoveContainer" containerID="dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2" Oct 2 19:19:13.210468 env[1657]: time="2023-10-02T19:19:13.210394943Z" level=info msg="RemoveContainer for \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\"" Oct 2 19:19:13.212646 env[1657]: time="2023-10-02T19:19:13.212550752Z" level=info msg="RemoveContainer for \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\"" Oct 2 19:19:13.212897 env[1657]: time="2023-10-02T19:19:13.212811093Z" level=error msg="RemoveContainer for \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\" failed" error="failed to set removing state for container \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\": container is already in removing state" Oct 2 19:19:13.213323 kubelet[2978]: E1002 19:19:13.213269 2978 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\": container is already in removing state" containerID="dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2" Oct 2 19:19:13.213466 kubelet[2978]: E1002 19:19:13.213341 2978 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2": container is already in removing state; Skipping pod "cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6)" Oct 2 19:19:13.213823 kubelet[2978]: E1002 19:19:13.213775 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6)\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:19:13.218659 env[1657]: time="2023-10-02T19:19:13.218540205Z" level=info msg="RemoveContainer for \"dff83c3103303f8fb9cd0498afc121f54fb5643420fa40051583cb0c58d5a0c2\" returns successfully" Oct 2 19:19:13.464474 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622-rootfs.mount: Deactivated successfully. Oct 2 19:19:14.404322 kubelet[2978]: E1002 19:19:14.404112 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:15.701409 kubelet[2978]: W1002 19:19:15.701337 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0f4c4953_fc35_4587_8d90_8aa4beeb98b6.slice/cri-containerd-1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622.scope WatchSource:0}: task 1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622 not found: not found Oct 2 19:19:19.405131 kubelet[2978]: E1002 19:19:19.405095 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:23.214000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.217127 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:19:23.217235 kernel: audit: type=1400 audit(1696274363.214:1344): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.214000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40022d8a00 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:23.239189 kernel: audit: type=1300 audit(1696274363.214:1344): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40022d8a00 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:23.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:23.251308 kernel: audit: type=1327 audit(1696274363.214:1344): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:23.223000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.262473 kernel: audit: type=1400 audit(1696274363.223:1345): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:23.223000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40023a6f00 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:23.223000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:23.286461 kernel: audit: type=1300 audit(1696274363.223:1345): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40023a6f00 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:23.286553 kernel: audit: type=1327 audit(1696274363.223:1345): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:24.407058 kubelet[2978]: E1002 19:19:24.407023 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:24.891000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:24.891000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40093bdf50 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:19:24.914959 kernel: audit: type=1400 audit(1696274364.891:1346): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:24.915130 kernel: audit: type=1300 audit(1696274364.891:1346): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40093bdf50 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:19:24.891000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:24.925901 kernel: audit: type=1327 audit(1696274364.891:1346): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:24.895000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:24.935559 kernel: audit: type=1400 audit(1696274364.895:1347): avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:24.895000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40023a53e0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:19:24.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:24.899000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:24.899000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4009498000 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:19:24.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:24.907000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:24.907000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4009545a10 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:19:24.907000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:24.951000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:24.951000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40094981b0 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:19:24.951000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:24.954000 audit[2577]: AVC avc: denied { watch } for pid=2577 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:24.954000 audit[2577]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40023a5540 a2=fc6 a3=0 items=0 ppid=2430 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c461,c600 key=(null) Oct 2 19:19:24.954000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:26.446204 kubelet[2978]: E1002 19:19:26.446151 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6)\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:19:29.102484 env[1657]: time="2023-10-02T19:19:29.102409347Z" level=info msg="StopPodSandbox for \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\"" Oct 2 19:19:29.103326 env[1657]: time="2023-10-02T19:19:29.103230187Z" level=info msg="TearDown network for sandbox \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" successfully" Oct 2 19:19:29.103487 env[1657]: time="2023-10-02T19:19:29.103454204Z" level=info msg="StopPodSandbox for \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" returns successfully" Oct 2 19:19:29.104377 env[1657]: time="2023-10-02T19:19:29.104319624Z" level=info msg="RemovePodSandbox for \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\"" Oct 2 19:19:29.104642 env[1657]: time="2023-10-02T19:19:29.104563885Z" level=info msg="Forcibly stopping sandbox \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\"" Oct 2 19:19:29.104946 env[1657]: time="2023-10-02T19:19:29.104897211Z" level=info msg="TearDown network for sandbox \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" successfully" Oct 2 19:19:29.110465 env[1657]: time="2023-10-02T19:19:29.110398192Z" level=info msg="RemovePodSandbox \"873f8138f38fbae17f6f8517c0ed356dab8d20bd2fe886b55fbc7ef46d941eac\" returns successfully" Oct 2 19:19:29.111406 env[1657]: time="2023-10-02T19:19:29.111355592Z" level=info msg="StopPodSandbox for \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\"" Oct 2 19:19:29.111559 env[1657]: time="2023-10-02T19:19:29.111494061Z" level=info msg="TearDown network for sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" successfully" Oct 2 19:19:29.111644 env[1657]: time="2023-10-02T19:19:29.111559809Z" level=info msg="StopPodSandbox for \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" returns successfully" Oct 2 19:19:29.112241 env[1657]: time="2023-10-02T19:19:29.112177500Z" level=info msg="RemovePodSandbox for \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\"" Oct 2 19:19:29.112435 env[1657]: time="2023-10-02T19:19:29.112379521Z" level=info msg="Forcibly stopping sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\"" Oct 2 19:19:29.112652 env[1657]: time="2023-10-02T19:19:29.112619078Z" level=info msg="TearDown network for sandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" successfully" Oct 2 19:19:29.117133 env[1657]: time="2023-10-02T19:19:29.117081058Z" level=info msg="RemovePodSandbox \"23c9734619802c02c42242926e7997790d1be218747ebafc4ff3f40bd2bb41d9\" returns successfully" Oct 2 19:19:29.305803 kubelet[2978]: W1002 19:19:29.305751 2978 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:19:29.409238 kubelet[2978]: E1002 19:19:29.408348 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:34.410103 kubelet[2978]: E1002 19:19:34.409982 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:35.440180 update_engine[1653]: I1002 19:19:35.440111 1653 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:19:35.440180 update_engine[1653]: I1002 19:19:35.440178 1653 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:19:35.440805 update_engine[1653]: I1002 19:19:35.440546 1653 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:19:35.441439 update_engine[1653]: I1002 19:19:35.441381 1653 omaha_request_params.cc:62] Current group set to lts Oct 2 19:19:35.441768 update_engine[1653]: I1002 19:19:35.441596 1653 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:19:35.441768 update_engine[1653]: I1002 19:19:35.441620 1653 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:19:35.441768 update_engine[1653]: I1002 19:19:35.441649 1653 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:19:35.441768 update_engine[1653]: I1002 19:19:35.441700 1653 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:19:35.443810 update_engine[1653]: I1002 19:19:35.443682 1653 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:19:35.443810 update_engine[1653]: I1002 19:19:35.443766 1653 omaha_request_action.cc:269] Request: Oct 2 19:19:35.443810 update_engine[1653]: Oct 2 19:19:35.443810 update_engine[1653]: Oct 2 19:19:35.443810 update_engine[1653]: Oct 2 19:19:35.443810 update_engine[1653]: Oct 2 19:19:35.443810 update_engine[1653]: Oct 2 19:19:35.443810 update_engine[1653]: Oct 2 19:19:35.443810 update_engine[1653]: Oct 2 19:19:35.443810 update_engine[1653]: Oct 2 19:19:35.443810 update_engine[1653]: I1002 19:19:35.443781 1653 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:19:35.448110 update_engine[1653]: I1002 19:19:35.447875 1653 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:19:35.448416 update_engine[1653]: I1002 19:19:35.448350 1653 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:19:35.448634 locksmithd[1709]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:19:36.641818 update_engine[1653]: I1002 19:19:36.641752 1653 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:19:36.642375 update_engine[1653]: I1002 19:19:36.642230 1653 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:19:36.642611 update_engine[1653]: I1002 19:19:36.642565 1653 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:19:36.960186 update_engine[1653]: I1002 19:19:36.960036 1653 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:19:36.962214 update_engine[1653]: I1002 19:19:36.962152 1653 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:19:36.962214 update_engine[1653]: I1002 19:19:36.962196 1653 omaha_request_action.cc:619] Omaha request response: Oct 2 19:19:36.962214 update_engine[1653]: Oct 2 19:19:36.969289 update_engine[1653]: I1002 19:19:36.969226 1653 omaha_request_action.cc:409] No update. Oct 2 19:19:36.969289 update_engine[1653]: I1002 19:19:36.969278 1653 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:19:36.969289 update_engine[1653]: I1002 19:19:36.969292 1653 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:19:36.969571 update_engine[1653]: I1002 19:19:36.969303 1653 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:19:36.969571 update_engine[1653]: I1002 19:19:36.969312 1653 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:19:36.969571 update_engine[1653]: I1002 19:19:36.969321 1653 update_attempter.cc:302] Processing Done. Oct 2 19:19:36.969571 update_engine[1653]: I1002 19:19:36.969342 1653 update_attempter.cc:338] No update. Oct 2 19:19:36.969571 update_engine[1653]: I1002 19:19:36.969360 1653 update_check_scheduler.cc:74] Next update check in 47m10s Oct 2 19:19:36.969929 locksmithd[1709]: LastCheckedTime=1696274376 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:19:38.782000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:38.785816 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:19:38.785886 kernel: audit: type=1400 audit(1696274378.782:1353): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:38.782000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:38.804849 kernel: audit: type=1400 audit(1696274378.782:1352): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:38.804940 kernel: audit: type=1300 audit(1696274378.782:1352): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40024fb0a0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:38.782000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40024fb0a0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:38.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:38.827485 kernel: audit: type=1327 audit(1696274378.782:1352): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:38.827553 kernel: audit: type=1300 audit(1696274378.782:1353): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002acbba0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:38.782000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002acbba0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:38.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:38.850161 kernel: audit: type=1327 audit(1696274378.782:1353): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:38.850245 kernel: audit: type=1400 audit(1696274378.785:1354): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:38.785000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:38.785000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024fb2c0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:38.871838 kernel: audit: type=1300 audit(1696274378.785:1354): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024fb2c0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:38.871915 kernel: audit: type=1327 audit(1696274378.785:1354): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:38.785000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:38.788000 audit[2579]: AVC avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:38.891574 kernel: audit: type=1400 audit(1696274378.788:1355): avc: denied { watch } for pid=2579 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:38.788000 audit[2579]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40024fb3e0 a2=fc6 a3=0 items=0 ppid=2410 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c601 key=(null) Oct 2 19:19:38.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:39.411542 kubelet[2978]: E1002 19:19:39.411478 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:41.452692 env[1657]: time="2023-10-02T19:19:41.452229004Z" level=info msg="CreateContainer within sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:19:41.472708 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4245159433.mount: Deactivated successfully. Oct 2 19:19:41.484165 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount682189091.mount: Deactivated successfully. Oct 2 19:19:41.497425 env[1657]: time="2023-10-02T19:19:41.497365709Z" level=info msg="CreateContainer within sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90\"" Oct 2 19:19:41.500519 env[1657]: time="2023-10-02T19:19:41.500411612Z" level=info msg="StartContainer for \"75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90\"" Oct 2 19:19:41.569592 systemd[1]: Started cri-containerd-75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90.scope. Oct 2 19:19:41.605610 systemd[1]: cri-containerd-75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90.scope: Deactivated successfully. Oct 2 19:19:41.632577 env[1657]: time="2023-10-02T19:19:41.632504022Z" level=info msg="shim disconnected" id=75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90 Oct 2 19:19:41.632577 env[1657]: time="2023-10-02T19:19:41.632577187Z" level=warning msg="cleaning up after shim disconnected" id=75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90 namespace=k8s.io Oct 2 19:19:41.632969 env[1657]: time="2023-10-02T19:19:41.632605759Z" level=info msg="cleaning up dead shim" Oct 2 19:19:41.658929 env[1657]: time="2023-10-02T19:19:41.658851325Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4194 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:19:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:19:41.659451 env[1657]: time="2023-10-02T19:19:41.659359935Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:19:41.660515 env[1657]: time="2023-10-02T19:19:41.660458408Z" level=error msg="Failed to pipe stderr of container \"75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90\"" error="reading from a closed fifo" Oct 2 19:19:41.661171 env[1657]: time="2023-10-02T19:19:41.661082903Z" level=error msg="Failed to pipe stdout of container \"75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90\"" error="reading from a closed fifo" Oct 2 19:19:41.663359 env[1657]: time="2023-10-02T19:19:41.663270658Z" level=error msg="StartContainer for \"75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:19:41.665295 kubelet[2978]: E1002 19:19:41.663688 2978 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90" Oct 2 19:19:41.665295 kubelet[2978]: E1002 19:19:41.663824 2978 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:19:41.665295 kubelet[2978]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:19:41.665295 kubelet[2978]: rm /hostbin/cilium-mount Oct 2 19:19:41.666207 kubelet[2978]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cwk98,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:19:41.666343 kubelet[2978]: E1002 19:19:41.663881 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:19:42.301955 kubelet[2978]: I1002 19:19:42.301920 2978 scope.go:115] "RemoveContainer" containerID="1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622" Oct 2 19:19:42.302913 kubelet[2978]: I1002 19:19:42.302887 2978 scope.go:115] "RemoveContainer" containerID="1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622" Oct 2 19:19:42.307820 env[1657]: time="2023-10-02T19:19:42.307751483Z" level=info msg="RemoveContainer for \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\"" Oct 2 19:19:42.308426 env[1657]: time="2023-10-02T19:19:42.308349277Z" level=info msg="RemoveContainer for \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\"" Oct 2 19:19:42.308583 env[1657]: time="2023-10-02T19:19:42.308492594Z" level=error msg="RemoveContainer for \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\" failed" error="failed to set removing state for container \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\": container is already in removing state" Oct 2 19:19:42.309127 kubelet[2978]: E1002 19:19:42.309075 2978 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\": container is already in removing state" containerID="1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622" Oct 2 19:19:42.309398 kubelet[2978]: I1002 19:19:42.309360 2978 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622} err="rpc error: code = Unknown desc = failed to set removing state for container \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\": container is already in removing state" Oct 2 19:19:42.313892 env[1657]: time="2023-10-02T19:19:42.313827880Z" level=info msg="RemoveContainer for \"1c586dda130f4f734a7017663ab79a7ddba0c30f45a420ad9ab315bf06010622\" returns successfully" Oct 2 19:19:42.315751 kubelet[2978]: E1002 19:19:42.315704 2978 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-r4px4_kube-system(0f4c4953-fc35-4587-8d90-8aa4beeb98b6)\"" pod="kube-system/cilium-r4px4" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 Oct 2 19:19:42.466977 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90-rootfs.mount: Deactivated successfully. Oct 2 19:19:44.412768 kubelet[2978]: E1002 19:19:44.412722 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:44.737625 kubelet[2978]: W1002 19:19:44.737481 2978 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0f4c4953_fc35_4587_8d90_8aa4beeb98b6.slice/cri-containerd-75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90.scope WatchSource:0}: task 75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90 not found: not found Oct 2 19:19:49.415100 kubelet[2978]: E1002 19:19:49.415043 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:54.416579 kubelet[2978]: E1002 19:19:54.416536 2978 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:54.690595 env[1657]: time="2023-10-02T19:19:54.690135289Z" level=info msg="StopPodSandbox for \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\"" Oct 2 19:19:54.690595 env[1657]: time="2023-10-02T19:19:54.690287269Z" level=info msg="Container to stop \"75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:19:54.693840 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1-shm.mount: Deactivated successfully. Oct 2 19:19:54.723642 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:19:54.723802 kernel: audit: type=1334 audit(1696274394.716:1356): prog-id=137 op=UNLOAD Oct 2 19:19:54.716000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:19:54.717412 systemd[1]: cri-containerd-95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1.scope: Deactivated successfully. Oct 2 19:19:54.725000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:19:54.731069 kernel: audit: type=1334 audit(1696274394.725:1357): prog-id=140 op=UNLOAD Oct 2 19:19:54.797151 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1-rootfs.mount: Deactivated successfully. Oct 2 19:19:54.805361 sshd[4000]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:54.809000 audit[4000]: USER_END pid=4000 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:54.809000 audit[4000]: CRED_DISP pid=4000 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:54.824835 systemd[1]: sshd@29-172.31.22.247:22-139.178.89.65:43556.service: Deactivated successfully. Oct 2 19:19:54.827562 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:19:54.828369 systemd[1]: session-30.scope: Consumed 1.973s CPU time. Oct 2 19:19:54.829984 systemd-logind[1652]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:19:54.833153 kernel: audit: type=1106 audit(1696274394.809:1358): pid=4000 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:54.833338 kernel: audit: type=1104 audit(1696274394.809:1359): pid=4000 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:54.833397 kernel: audit: type=1131 audit(1696274394.824:1360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.22.247:22-139.178.89.65:43556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:54.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.22.247:22-139.178.89.65:43556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:54.832508 systemd-logind[1652]: Removed session 30. Oct 2 19:19:54.842973 env[1657]: time="2023-10-02T19:19:54.842910547Z" level=info msg="shim disconnected" id=95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1 Oct 2 19:19:54.843821 env[1657]: time="2023-10-02T19:19:54.843768731Z" level=warning msg="cleaning up after shim disconnected" id=95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1 namespace=k8s.io Oct 2 19:19:54.844586 env[1657]: time="2023-10-02T19:19:54.843960852Z" level=info msg="cleaning up dead shim" Oct 2 19:19:54.871602 env[1657]: time="2023-10-02T19:19:54.871523526Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4231 runtime=io.containerd.runc.v2\n" Oct 2 19:19:54.872180 env[1657]: time="2023-10-02T19:19:54.872120421Z" level=info msg="TearDown network for sandbox \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" successfully" Oct 2 19:19:54.872306 env[1657]: time="2023-10-02T19:19:54.872172885Z" level=info msg="StopPodSandbox for \"95733bcd4466e40198e85b2b4e66b46f20ea18c8885ae43e8072f8e805a828f1\" returns successfully" Oct 2 19:19:54.961108 kubelet[2978]: I1002 19:19:54.957115 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hostproc\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.961108 kubelet[2978]: I1002 19:19:54.957171 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-lib-modules\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.961108 kubelet[2978]: I1002 19:19:54.957194 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hostproc" (OuterVolumeSpecName: "hostproc") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.961108 kubelet[2978]: I1002 19:19:54.957211 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-etc-cni-netd\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.961108 kubelet[2978]: I1002 19:19:54.957236 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.961108 kubelet[2978]: I1002 19:19:54.957285 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-host-proc-sys-kernel\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.961599 kubelet[2978]: I1002 19:19:54.957307 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.961599 kubelet[2978]: I1002 19:19:54.957326 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-cgroup\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.961599 kubelet[2978]: I1002 19:19:54.957348 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.961599 kubelet[2978]: I1002 19:19:54.957367 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-run\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.961599 kubelet[2978]: I1002 19:19:54.957385 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.961899 kubelet[2978]: I1002 19:19:54.957406 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-host-proc-sys-net\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.961899 kubelet[2978]: I1002 19:19:54.957424 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.961899 kubelet[2978]: I1002 19:19:54.957452 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-clustermesh-secrets\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.961899 kubelet[2978]: I1002 19:19:54.957461 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.961899 kubelet[2978]: I1002 19:19:54.957518 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-ipsec-secrets\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.962252 kubelet[2978]: I1002 19:19:54.957561 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-cwk98\" (UniqueName: \"kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-kube-api-access-cwk98\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.962252 kubelet[2978]: I1002 19:19:54.957598 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-bpf-maps\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.962252 kubelet[2978]: I1002 19:19:54.957641 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hubble-tls\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.962252 kubelet[2978]: I1002 19:19:54.957685 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-config-path\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.962252 kubelet[2978]: I1002 19:19:54.957724 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-xtables-lock\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.962252 kubelet[2978]: I1002 19:19:54.957763 2978 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cni-path\") pod \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\" (UID: \"0f4c4953-fc35-4587-8d90-8aa4beeb98b6\") " Oct 2 19:19:54.962606 kubelet[2978]: I1002 19:19:54.957812 2978 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hostproc\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:54.962606 kubelet[2978]: I1002 19:19:54.957854 2978 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-lib-modules\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:54.962606 kubelet[2978]: I1002 19:19:54.957882 2978 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-etc-cni-netd\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:54.962606 kubelet[2978]: I1002 19:19:54.957908 2978 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-host-proc-sys-kernel\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:54.962606 kubelet[2978]: I1002 19:19:54.957937 2978 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-cgroup\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:54.962606 kubelet[2978]: I1002 19:19:54.957961 2978 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-run\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:54.962606 kubelet[2978]: I1002 19:19:54.957985 2978 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-host-proc-sys-net\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:54.963095 kubelet[2978]: I1002 19:19:54.958057 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cni-path" (OuterVolumeSpecName: "cni-path") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.963095 kubelet[2978]: I1002 19:19:54.959330 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.963095 kubelet[2978]: W1002 19:19:54.959678 2978 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/0f4c4953-fc35-4587-8d90-8aa4beeb98b6/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:19:54.963095 kubelet[2978]: I1002 19:19:54.962685 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:54.973814 systemd[1]: var-lib-kubelet-pods-0f4c4953\x2dfc35\x2d4587\x2d8d90\x2d8aa4beeb98b6-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:19:54.980274 kubelet[2978]: I1002 19:19:54.979678 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:19:54.989558 kubelet[2978]: I1002 19:19:54.986803 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:19:54.992156 systemd[1]: var-lib-kubelet-pods-0f4c4953\x2dfc35\x2d4587\x2d8d90\x2d8aa4beeb98b6-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:19:54.999897 kubelet[2978]: I1002 19:19:54.995953 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:19:54.998322 systemd[1]: var-lib-kubelet-pods-0f4c4953\x2dfc35\x2d4587\x2d8d90\x2d8aa4beeb98b6-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:19:55.002193 kubelet[2978]: I1002 19:19:55.002143 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-kube-api-access-cwk98" (OuterVolumeSpecName: "kube-api-access-cwk98") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "kube-api-access-cwk98". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:19:55.002676 kubelet[2978]: I1002 19:19:55.002644 2978 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "0f4c4953-fc35-4587-8d90-8aa4beeb98b6" (UID: "0f4c4953-fc35-4587-8d90-8aa4beeb98b6"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:19:55.059097 kubelet[2978]: I1002 19:19:55.059060 2978 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-clustermesh-secrets\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:55.059349 kubelet[2978]: I1002 19:19:55.059329 2978 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-ipsec-secrets\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:55.059481 kubelet[2978]: I1002 19:19:55.059460 2978 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-cwk98\" (UniqueName: \"kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-kube-api-access-cwk98\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:55.059623 kubelet[2978]: I1002 19:19:55.059588 2978 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-bpf-maps\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:55.059758 kubelet[2978]: I1002 19:19:55.059738 2978 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-hubble-tls\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:55.059885 kubelet[2978]: I1002 19:19:55.059864 2978 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cilium-config-path\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:55.060036 kubelet[2978]: I1002 19:19:55.060015 2978 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-xtables-lock\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:55.060168 kubelet[2978]: I1002 19:19:55.060149 2978 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0f4c4953-fc35-4587-8d90-8aa4beeb98b6-cni-path\") on node \"ip-172-31-22-247\" DevicePath \"\"" Oct 2 19:19:55.340779 kubelet[2978]: I1002 19:19:55.340722 2978 scope.go:115] "RemoveContainer" containerID="75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90" Oct 2 19:19:55.343404 env[1657]: time="2023-10-02T19:19:55.342961375Z" level=info msg="RemoveContainer for \"75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90\"" Oct 2 19:19:55.348197 env[1657]: time="2023-10-02T19:19:55.348139593Z" level=info msg="RemoveContainer for \"75c5e49fdcdb4613ba2c9ea703bbe598d9f7979e2d294e7d2f034c9604cc6d90\" returns successfully" Oct 2 19:19:55.356388 systemd[1]: Removed slice kubepods-burstable-pod0f4c4953_fc35_4587_8d90_8aa4beeb98b6.slice. Oct 2 19:19:55.452934 kubelet[2978]: I1002 19:19:55.452871 2978 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=0f4c4953-fc35-4587-8d90-8aa4beeb98b6 path="/var/lib/kubelet/pods/0f4c4953-fc35-4587-8d90-8aa4beeb98b6/volumes" Oct 2 19:19:55.695290 systemd[1]: var-lib-kubelet-pods-0f4c4953\x2dfc35\x2d4587\x2d8d90\x2d8aa4beeb98b6-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dcwk98.mount: Deactivated successfully.