Oct 2 19:13:13.185065 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:13:13.185104 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:13:13.185127 kernel: efi: EFI v2.70 by EDK II Oct 2 19:13:13.185142 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:13:13.185155 kernel: ACPI: Early table checksum verification disabled Oct 2 19:13:13.185169 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:13:13.185184 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:13:13.185213 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:13:13.185232 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:13:13.185247 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:13:13.185266 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:13:13.185280 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:13:13.185294 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:13:13.185308 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:13:13.185325 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:13:13.185343 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:13:13.185358 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:13:13.185372 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:13:13.185386 kernel: printk: bootconsole [uart0] enabled Oct 2 19:13:13.185400 kernel: NUMA: Failed to initialise from firmware Oct 2 19:13:13.185415 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:13:13.185430 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:13:13.185444 kernel: Zone ranges: Oct 2 19:13:13.185458 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:13:13.185473 kernel: DMA32 empty Oct 2 19:13:13.185487 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:13:13.185505 kernel: Movable zone start for each node Oct 2 19:13:13.185519 kernel: Early memory node ranges Oct 2 19:13:13.185534 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:13:13.185548 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:13:13.185562 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:13:13.185576 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:13:13.185591 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:13:13.185605 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:13:13.185619 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:13:13.185633 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:13:13.185647 kernel: psci: probing for conduit method from ACPI. Oct 2 19:13:13.185662 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:13:13.185680 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:13:13.185694 kernel: psci: Trusted OS migration not required Oct 2 19:13:13.185715 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:13:13.185730 kernel: ACPI: SRAT not present Oct 2 19:13:13.185746 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:13:13.185765 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:13:13.185780 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:13:13.185796 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:13:13.185811 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:13:13.185826 kernel: CPU features: detected: Spectre-v2 Oct 2 19:13:13.185841 kernel: CPU features: detected: Spectre-v3a Oct 2 19:13:13.185856 kernel: CPU features: detected: Spectre-BHB Oct 2 19:13:13.185871 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:13:13.185901 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:13:13.185942 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:13:13.185958 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:13:13.185979 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:13:13.185994 kernel: Policy zone: Normal Oct 2 19:13:13.186012 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:13:13.186028 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:13:13.186043 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:13:13.186059 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:13:13.186074 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:13:13.186089 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:13:13.186106 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:13:13.186121 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:13:13.186140 kernel: trace event string verifier disabled Oct 2 19:13:13.186155 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:13:13.186171 kernel: rcu: RCU event tracing is enabled. Oct 2 19:13:13.186187 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:13:13.186202 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:13:13.186217 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:13:13.186233 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:13:13.186248 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:13:13.186263 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:13:13.186278 kernel: GICv3: 96 SPIs implemented Oct 2 19:13:13.186292 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:13:13.186308 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:13:13.186326 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:13:13.186341 kernel: GICv3: 16 PPIs implemented Oct 2 19:13:13.186356 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:13:13.186371 kernel: ACPI: SRAT not present Oct 2 19:13:13.186386 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:13:13.186401 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:13:13.186416 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:13:13.186431 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:13:13.186447 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:13:13.186462 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:13:13.186477 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:13:13.186495 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:13:13.186511 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:13:13.186526 kernel: Console: colour dummy device 80x25 Oct 2 19:13:13.186542 kernel: printk: console [tty1] enabled Oct 2 19:13:13.186557 kernel: ACPI: Core revision 20210730 Oct 2 19:13:13.186572 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:13:13.186588 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:13:13.186603 kernel: LSM: Security Framework initializing Oct 2 19:13:13.186619 kernel: SELinux: Initializing. Oct 2 19:13:13.186634 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.186653 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.186669 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:13:13.186684 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:13:13.186699 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:13:13.186714 kernel: Remapping and enabling EFI services. Oct 2 19:13:13.186729 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:13:13.186744 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:13:13.186760 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:13:13.186775 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:13:13.186795 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:13:13.186810 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:13:13.186825 kernel: SMP: Total of 2 processors activated. Oct 2 19:13:13.186841 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:13:13.186856 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:13:13.186871 kernel: CPU features: detected: CRC32 instructions Oct 2 19:13:13.189930 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:13:13.189976 kernel: alternatives: patching kernel code Oct 2 19:13:13.189993 kernel: devtmpfs: initialized Oct 2 19:13:13.190017 kernel: KASLR disabled due to lack of seed Oct 2 19:13:13.190034 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:13:13.190051 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:13:13.190077 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:13:13.190096 kernel: SMBIOS 3.0.0 present. Oct 2 19:13:13.190113 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:13:13.190129 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:13:13.190145 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:13:13.190161 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:13:13.190177 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:13:13.190193 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:13:13.190209 kernel: audit: type=2000 audit(0.248:1): state=initialized audit_enabled=0 res=1 Oct 2 19:13:13.190230 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:13:13.190246 kernel: cpuidle: using governor menu Oct 2 19:13:13.190262 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:13:13.190279 kernel: ASID allocator initialised with 32768 entries Oct 2 19:13:13.190294 kernel: ACPI: bus type PCI registered Oct 2 19:13:13.190315 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:13:13.190331 kernel: Serial: AMBA PL011 UART driver Oct 2 19:13:13.190347 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:13:13.190363 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:13:13.190379 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:13:13.190395 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:13:13.190411 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:13:13.190427 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:13:13.190443 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:13:13.190463 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:13:13.190479 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:13:13.190495 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:13:13.190511 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:13:13.190527 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:13:13.190543 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:13:13.190559 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:13:13.190575 kernel: ACPI: Interpreter enabled Oct 2 19:13:13.190591 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:13:13.190611 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:13:13.190628 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:13:13.191078 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:13:13.191280 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:13:13.191476 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:13:13.198150 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:13:13.198374 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:13:13.198407 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:13:13.198425 kernel: acpiphp: Slot [1] registered Oct 2 19:13:13.198442 kernel: acpiphp: Slot [2] registered Oct 2 19:13:13.198458 kernel: acpiphp: Slot [3] registered Oct 2 19:13:13.198497 kernel: acpiphp: Slot [4] registered Oct 2 19:13:13.198525 kernel: acpiphp: Slot [5] registered Oct 2 19:13:13.198557 kernel: acpiphp: Slot [6] registered Oct 2 19:13:13.198575 kernel: acpiphp: Slot [7] registered Oct 2 19:13:13.198591 kernel: acpiphp: Slot [8] registered Oct 2 19:13:13.198614 kernel: acpiphp: Slot [9] registered Oct 2 19:13:13.198634 kernel: acpiphp: Slot [10] registered Oct 2 19:13:13.198652 kernel: acpiphp: Slot [11] registered Oct 2 19:13:13.198668 kernel: acpiphp: Slot [12] registered Oct 2 19:13:13.198685 kernel: acpiphp: Slot [13] registered Oct 2 19:13:13.198703 kernel: acpiphp: Slot [14] registered Oct 2 19:13:13.198720 kernel: acpiphp: Slot [15] registered Oct 2 19:13:13.198736 kernel: acpiphp: Slot [16] registered Oct 2 19:13:13.198752 kernel: acpiphp: Slot [17] registered Oct 2 19:13:13.198768 kernel: acpiphp: Slot [18] registered Oct 2 19:13:13.198788 kernel: acpiphp: Slot [19] registered Oct 2 19:13:13.198804 kernel: acpiphp: Slot [20] registered Oct 2 19:13:13.198820 kernel: acpiphp: Slot [21] registered Oct 2 19:13:13.198836 kernel: acpiphp: Slot [22] registered Oct 2 19:13:13.198852 kernel: acpiphp: Slot [23] registered Oct 2 19:13:13.198869 kernel: acpiphp: Slot [24] registered Oct 2 19:13:13.198916 kernel: acpiphp: Slot [25] registered Oct 2 19:13:13.198940 kernel: acpiphp: Slot [26] registered Oct 2 19:13:13.198956 kernel: acpiphp: Slot [27] registered Oct 2 19:13:13.198978 kernel: acpiphp: Slot [28] registered Oct 2 19:13:13.198994 kernel: acpiphp: Slot [29] registered Oct 2 19:13:13.199010 kernel: acpiphp: Slot [30] registered Oct 2 19:13:13.199026 kernel: acpiphp: Slot [31] registered Oct 2 19:13:13.199041 kernel: PCI host bridge to bus 0000:00 Oct 2 19:13:13.199255 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:13:13.199432 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:13:13.199606 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:13:13.199785 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:13:13.200024 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:13:13.200238 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:13:13.200435 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:13:13.200643 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:13:13.200838 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:13:13.201063 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:13:13.201291 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:13:13.201488 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:13:13.201680 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:13:13.201872 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:13:13.207643 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:13:13.207846 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:13:13.208080 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:13:13.209623 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:13:13.209848 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:13:13.212178 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:13:13.212418 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:13:13.212717 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:13:13.212944 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:13:13.212976 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:13:13.212995 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:13:13.213012 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:13:13.213029 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:13:13.213045 kernel: iommu: Default domain type: Translated Oct 2 19:13:13.213062 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:13:13.213078 kernel: vgaarb: loaded Oct 2 19:13:13.213094 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:13:13.213110 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:13:13.213130 kernel: PTP clock support registered Oct 2 19:13:13.213147 kernel: Registered efivars operations Oct 2 19:13:13.213163 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:13:13.213179 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:13:13.213195 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:13:13.213231 kernel: pnp: PnP ACPI init Oct 2 19:13:13.213450 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:13:13.213476 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:13:13.213493 kernel: NET: Registered PF_INET protocol family Oct 2 19:13:13.213514 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:13:13.213531 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:13:13.213548 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:13:13.213564 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:13:13.213580 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:13:13.213597 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:13:13.213613 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.213630 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:13:13.213646 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:13:13.213666 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:13:13.213682 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:13:13.213698 kernel: kvm [1]: HYP mode not available Oct 2 19:13:13.213715 kernel: Initialise system trusted keyrings Oct 2 19:13:13.213731 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:13:13.213748 kernel: Key type asymmetric registered Oct 2 19:13:13.213764 kernel: Asymmetric key parser 'x509' registered Oct 2 19:13:13.213780 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:13:13.213796 kernel: io scheduler mq-deadline registered Oct 2 19:13:13.213816 kernel: io scheduler kyber registered Oct 2 19:13:13.213833 kernel: io scheduler bfq registered Oct 2 19:13:13.214062 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:13:13.214090 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:13:13.214107 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:13:13.214124 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:13:13.214142 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:13:13.214339 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:13:13.214370 kernel: printk: console [ttyS0] disabled Oct 2 19:13:13.214388 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:13:13.214404 kernel: printk: console [ttyS0] enabled Oct 2 19:13:13.214421 kernel: printk: bootconsole [uart0] disabled Oct 2 19:13:13.214437 kernel: thunder_xcv, ver 1.0 Oct 2 19:13:13.214453 kernel: thunder_bgx, ver 1.0 Oct 2 19:13:13.214469 kernel: nicpf, ver 1.0 Oct 2 19:13:13.214484 kernel: nicvf, ver 1.0 Oct 2 19:13:13.230311 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:13:13.230528 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:13:12 UTC (1696273992) Oct 2 19:13:13.230554 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:13:13.230571 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:13:13.230587 kernel: Segment Routing with IPv6 Oct 2 19:13:13.230604 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:13:13.230620 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:13:13.230637 kernel: Key type dns_resolver registered Oct 2 19:13:13.230654 kernel: registered taskstats version 1 Oct 2 19:13:13.230674 kernel: Loading compiled-in X.509 certificates Oct 2 19:13:13.230691 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:13:13.230708 kernel: Key type .fscrypt registered Oct 2 19:13:13.230724 kernel: Key type fscrypt-provisioning registered Oct 2 19:13:13.230740 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:13:13.230756 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:13:13.230773 kernel: ima: No architecture policies found Oct 2 19:13:13.230789 kernel: Freeing unused kernel memory: 34560K Oct 2 19:13:13.230805 kernel: Run /init as init process Oct 2 19:13:13.230825 kernel: with arguments: Oct 2 19:13:13.230841 kernel: /init Oct 2 19:13:13.230857 kernel: with environment: Oct 2 19:13:13.230872 kernel: HOME=/ Oct 2 19:13:13.230943 kernel: TERM=linux Oct 2 19:13:13.230964 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:13:13.230986 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:13:13.231023 systemd[1]: Detected virtualization amazon. Oct 2 19:13:13.231047 systemd[1]: Detected architecture arm64. Oct 2 19:13:13.231065 systemd[1]: Running in initrd. Oct 2 19:13:13.231083 systemd[1]: No hostname configured, using default hostname. Oct 2 19:13:13.231101 systemd[1]: Hostname set to . Oct 2 19:13:13.231119 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:13:13.231137 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:13:13.231154 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:13:13.231171 systemd[1]: Reached target cryptsetup.target. Oct 2 19:13:13.231192 systemd[1]: Reached target paths.target. Oct 2 19:13:13.231210 systemd[1]: Reached target slices.target. Oct 2 19:13:13.231228 systemd[1]: Reached target swap.target. Oct 2 19:13:13.231245 systemd[1]: Reached target timers.target. Oct 2 19:13:13.231263 systemd[1]: Listening on iscsid.socket. Oct 2 19:13:13.231281 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:13:13.231299 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:13:13.231317 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:13:13.231338 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:13:13.231356 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:13:13.231374 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:13:13.231391 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:13:13.231409 systemd[1]: Reached target sockets.target. Oct 2 19:13:13.231426 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:13:13.231444 systemd[1]: Finished network-cleanup.service. Oct 2 19:13:13.231461 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:13:13.231479 systemd[1]: Starting systemd-journald.service... Oct 2 19:13:13.231502 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:13:13.231520 systemd[1]: Starting systemd-resolved.service... Oct 2 19:13:13.231537 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:13:13.231555 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:13:13.231572 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:13:13.231590 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:13:13.231608 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:13:13.231625 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:13:13.231643 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:13:13.231665 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:13:13.231682 kernel: Bridge firewalling registered Oct 2 19:13:13.231698 kernel: SCSI subsystem initialized Oct 2 19:13:13.231715 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:13:13.231731 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:13:13.231747 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:13:13.231764 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:13:13.231783 kernel: audit: type=1130 audit(1696273993.219:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.231804 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:13:13.231826 systemd-journald[309]: Journal started Oct 2 19:13:13.231952 systemd-journald[309]: Runtime Journal (/run/log/journal/ec296268413583aafe3237c19a4361ac) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:13:13.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.106322 systemd-modules-load[310]: Inserted module 'overlay' Oct 2 19:13:13.161910 systemd-modules-load[310]: Inserted module 'br_netfilter' Oct 2 19:13:13.212745 systemd-modules-load[310]: Inserted module 'dm_multipath' Oct 2 19:13:13.247324 systemd[1]: Started systemd-journald.service. Oct 2 19:13:13.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.249411 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:13:13.254114 systemd-resolved[311]: Positive Trust Anchors: Oct 2 19:13:13.254128 systemd-resolved[311]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:13:13.254177 systemd-resolved[311]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:13:13.294065 kernel: audit: type=1130 audit(1696273993.246:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.296362 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:13:13.304987 kernel: audit: type=1130 audit(1696273993.292:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.308366 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:13:13.318551 kernel: audit: type=1130 audit(1696273993.305:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.369377 dracut-cmdline[332]: dracut-dracut-053 Oct 2 19:13:13.380379 dracut-cmdline[332]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:13:13.605920 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:13:13.619928 kernel: iscsi: registered transport (tcp) Oct 2 19:13:13.646812 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:13:13.646909 kernel: QLogic iSCSI HBA Driver Oct 2 19:13:13.842704 systemd-resolved[311]: Defaulting to hostname 'linux'. Oct 2 19:13:13.845108 kernel: random: crng init done Oct 2 19:13:13.849054 systemd[1]: Started systemd-resolved.service. Oct 2 19:13:13.861442 kernel: audit: type=1130 audit(1696273993.849:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.851031 systemd[1]: Reached target nss-lookup.target. Oct 2 19:13:13.909689 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:13:13.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:13.914333 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:13:13.923293 kernel: audit: type=1130 audit(1696273993.911:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.007934 kernel: raid6: neonx8 gen() 6424 MB/s Oct 2 19:13:14.025920 kernel: raid6: neonx8 xor() 4697 MB/s Oct 2 19:13:14.043919 kernel: raid6: neonx4 gen() 6468 MB/s Oct 2 19:13:14.061919 kernel: raid6: neonx4 xor() 4831 MB/s Oct 2 19:13:14.079919 kernel: raid6: neonx2 gen() 5774 MB/s Oct 2 19:13:14.097919 kernel: raid6: neonx2 xor() 4478 MB/s Oct 2 19:13:14.115920 kernel: raid6: neonx1 gen() 4463 MB/s Oct 2 19:13:14.133919 kernel: raid6: neonx1 xor() 3648 MB/s Oct 2 19:13:14.151918 kernel: raid6: int64x8 gen() 3407 MB/s Oct 2 19:13:14.169921 kernel: raid6: int64x8 xor() 2082 MB/s Oct 2 19:13:14.187918 kernel: raid6: int64x4 gen() 3786 MB/s Oct 2 19:13:14.205920 kernel: raid6: int64x4 xor() 2191 MB/s Oct 2 19:13:14.223919 kernel: raid6: int64x2 gen() 3588 MB/s Oct 2 19:13:14.241919 kernel: raid6: int64x2 xor() 1946 MB/s Oct 2 19:13:14.259919 kernel: raid6: int64x1 gen() 2767 MB/s Oct 2 19:13:14.279436 kernel: raid6: int64x1 xor() 1451 MB/s Oct 2 19:13:14.279466 kernel: raid6: using algorithm neonx4 gen() 6468 MB/s Oct 2 19:13:14.279490 kernel: raid6: .... xor() 4831 MB/s, rmw enabled Oct 2 19:13:14.281247 kernel: raid6: using neon recovery algorithm Oct 2 19:13:14.299927 kernel: xor: measuring software checksum speed Oct 2 19:13:14.302916 kernel: 8regs : 9332 MB/sec Oct 2 19:13:14.302946 kernel: 32regs : 11107 MB/sec Oct 2 19:13:14.309068 kernel: arm64_neon : 9566 MB/sec Oct 2 19:13:14.309104 kernel: xor: using function: 32regs (11107 MB/sec) Oct 2 19:13:14.398930 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:13:14.436606 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:13:14.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.440716 systemd[1]: Starting systemd-udevd.service... Oct 2 19:13:14.453613 kernel: audit: type=1130 audit(1696273994.437:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.453721 kernel: audit: type=1334 audit(1696273994.438:9): prog-id=7 op=LOAD Oct 2 19:13:14.454075 kernel: audit: type=1334 audit(1696273994.438:10): prog-id=8 op=LOAD Oct 2 19:13:14.438000 audit: BPF prog-id=7 op=LOAD Oct 2 19:13:14.438000 audit: BPF prog-id=8 op=LOAD Oct 2 19:13:14.482117 systemd-udevd[508]: Using default interface naming scheme 'v252'. Oct 2 19:13:14.493093 systemd[1]: Started systemd-udevd.service. Oct 2 19:13:14.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.498020 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:13:14.560013 dracut-pre-trigger[513]: rd.md=0: removing MD RAID activation Oct 2 19:13:14.667377 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:13:14.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.671446 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:13:14.787317 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:13:14.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:14.928268 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:13:14.928336 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:13:14.944504 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:13:14.944780 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:13:14.954606 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:13:14.954667 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:13:14.966920 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:04:b3:b8:9c:3d Oct 2 19:13:14.967240 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:13:14.973631 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:13:14.973684 kernel: GPT:9289727 != 16777215 Oct 2 19:13:14.975916 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:13:14.977244 kernel: GPT:9289727 != 16777215 Oct 2 19:13:14.979145 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:13:14.980689 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:14.984837 (udev-worker)[575]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:15.057932 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (562) Oct 2 19:13:15.117938 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:13:15.213024 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:13:15.278506 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:13:15.290796 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:13:15.294947 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:13:15.301160 systemd[1]: Starting disk-uuid.service... Oct 2 19:13:15.321865 disk-uuid[673]: Primary Header is updated. Oct 2 19:13:15.321865 disk-uuid[673]: Secondary Entries is updated. Oct 2 19:13:15.321865 disk-uuid[673]: Secondary Header is updated. Oct 2 19:13:15.330923 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:15.337988 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:15.346931 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:16.345925 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:13:16.346139 disk-uuid[674]: The operation has completed successfully. Oct 2 19:13:16.629876 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:13:16.630468 systemd[1]: Finished disk-uuid.service. Oct 2 19:13:16.636719 systemd[1]: Starting verity-setup.service... Oct 2 19:13:16.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.684952 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:13:16.780968 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:13:16.799299 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:13:16.812876 systemd[1]: Finished verity-setup.service. Oct 2 19:13:16.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.817912 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 19:13:16.817951 kernel: audit: type=1130 audit(1696273996.814:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:16.896943 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:13:16.898106 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:13:16.901260 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:13:16.903424 systemd[1]: Starting ignition-setup.service... Oct 2 19:13:16.929577 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:13:16.959616 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:16.959683 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:16.961903 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:16.975912 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:17.012437 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:13:17.065388 systemd[1]: Finished ignition-setup.service. Oct 2 19:13:17.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.067790 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:13:17.087230 kernel: audit: type=1130 audit(1696273997.063:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.288763 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:13:17.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.303000 audit: BPF prog-id=9 op=LOAD Oct 2 19:13:17.308050 kernel: audit: type=1130 audit(1696273997.290:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.308107 kernel: audit: type=1334 audit(1696273997.303:19): prog-id=9 op=LOAD Oct 2 19:13:17.306728 systemd[1]: Starting systemd-networkd.service... Oct 2 19:13:17.364837 systemd-networkd[1186]: lo: Link UP Oct 2 19:13:17.364862 systemd-networkd[1186]: lo: Gained carrier Oct 2 19:13:17.368424 systemd-networkd[1186]: Enumeration completed Oct 2 19:13:17.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.369041 systemd-networkd[1186]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:13:17.369105 systemd[1]: Started systemd-networkd.service. Oct 2 19:13:17.371046 systemd[1]: Reached target network.target. Oct 2 19:13:17.394597 kernel: audit: type=1130 audit(1696273997.369:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.383492 systemd[1]: Starting iscsiuio.service... Oct 2 19:13:17.401814 systemd-networkd[1186]: eth0: Link UP Oct 2 19:13:17.401834 systemd-networkd[1186]: eth0: Gained carrier Oct 2 19:13:17.403678 systemd[1]: Started iscsiuio.service. Oct 2 19:13:17.419956 kernel: audit: type=1130 audit(1696273997.408:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.418467 systemd[1]: Starting iscsid.service... Oct 2 19:13:17.428137 systemd-networkd[1186]: eth0: DHCPv4 address 172.31.29.254/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:13:17.437054 iscsid[1191]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:13:17.437054 iscsid[1191]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:13:17.437054 iscsid[1191]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:13:17.437054 iscsid[1191]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:13:17.437054 iscsid[1191]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:13:17.437054 iscsid[1191]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:13:17.468869 systemd[1]: Started iscsid.service. Oct 2 19:13:17.493437 kernel: audit: type=1130 audit(1696273997.467:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.470480 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:13:17.509294 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:13:17.514716 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:13:17.529594 kernel: audit: type=1130 audit(1696273997.513:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.523592 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:13:17.525438 systemd[1]: Reached target remote-fs.target. Oct 2 19:13:17.533967 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:13:17.563962 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:13:17.574222 kernel: audit: type=1130 audit(1696273997.562:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.851453 ignition[1110]: Ignition 2.14.0 Oct 2 19:13:17.851483 ignition[1110]: Stage: fetch-offline Oct 2 19:13:17.851864 ignition[1110]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.851976 ignition[1110]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.872882 ignition[1110]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.873837 ignition[1110]: Ignition finished successfully Oct 2 19:13:17.878856 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:13:17.895546 kernel: audit: type=1130 audit(1696273997.879:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:17.882134 systemd[1]: Starting ignition-fetch.service... Oct 2 19:13:17.920628 ignition[1210]: Ignition 2.14.0 Oct 2 19:13:17.920656 ignition[1210]: Stage: fetch Oct 2 19:13:17.921040 ignition[1210]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:17.921097 ignition[1210]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:17.937266 ignition[1210]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:17.939777 ignition[1210]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.947262 ignition[1210]: INFO : PUT result: OK Oct 2 19:13:17.950252 ignition[1210]: DEBUG : parsed url from cmdline: "" Oct 2 19:13:17.950252 ignition[1210]: INFO : no config URL provided Oct 2 19:13:17.950252 ignition[1210]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:13:17.956158 ignition[1210]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:13:17.956158 ignition[1210]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:17.956158 ignition[1210]: INFO : PUT result: OK Oct 2 19:13:17.956158 ignition[1210]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:13:17.965390 ignition[1210]: INFO : GET result: OK Oct 2 19:13:17.966931 ignition[1210]: DEBUG : parsing config with SHA512: 3b77c5e7fb13bfa4a309f39ffaf7eb1aae47d2ff1621226bee21132eb959f0a2a036e85611c1fa3d82a0f57b6d5f9d5dee1bc0e301dcde1369698a9740eb2261 Oct 2 19:13:18.006131 unknown[1210]: fetched base config from "system" Oct 2 19:13:18.006170 unknown[1210]: fetched base config from "system" Oct 2 19:13:18.006193 unknown[1210]: fetched user config from "aws" Oct 2 19:13:18.012576 ignition[1210]: fetch: fetch complete Oct 2 19:13:18.012605 ignition[1210]: fetch: fetch passed Oct 2 19:13:18.012703 ignition[1210]: Ignition finished successfully Oct 2 19:13:18.019369 systemd[1]: Finished ignition-fetch.service. Oct 2 19:13:18.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.023799 systemd[1]: Starting ignition-kargs.service... Oct 2 19:13:18.056177 ignition[1216]: Ignition 2.14.0 Oct 2 19:13:18.056204 ignition[1216]: Stage: kargs Oct 2 19:13:18.056556 ignition[1216]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:18.056614 ignition[1216]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.070684 ignition[1216]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.073032 ignition[1216]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.076513 ignition[1216]: INFO : PUT result: OK Oct 2 19:13:18.081708 ignition[1216]: kargs: kargs passed Oct 2 19:13:18.082690 ignition[1216]: Ignition finished successfully Oct 2 19:13:18.086239 systemd[1]: Finished ignition-kargs.service. Oct 2 19:13:18.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.090669 systemd[1]: Starting ignition-disks.service... Oct 2 19:13:18.119628 ignition[1222]: Ignition 2.14.0 Oct 2 19:13:18.120187 ignition[1222]: Stage: disks Oct 2 19:13:18.120541 ignition[1222]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:18.120592 ignition[1222]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.136339 ignition[1222]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.138681 ignition[1222]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.142163 ignition[1222]: INFO : PUT result: OK Oct 2 19:13:18.147473 ignition[1222]: disks: disks passed Oct 2 19:13:18.147571 ignition[1222]: Ignition finished successfully Oct 2 19:13:18.152006 systemd[1]: Finished ignition-disks.service. Oct 2 19:13:18.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.154203 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:13:18.156085 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:13:18.157770 systemd[1]: Reached target local-fs.target. Oct 2 19:13:18.159361 systemd[1]: Reached target sysinit.target. Oct 2 19:13:18.160959 systemd[1]: Reached target basic.target. Oct 2 19:13:18.177786 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:13:18.243728 systemd-fsck[1230]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:13:18.253383 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:13:18.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.257635 systemd[1]: Mounting sysroot.mount... Oct 2 19:13:18.289954 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:13:18.292260 systemd[1]: Mounted sysroot.mount. Oct 2 19:13:18.292873 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:13:18.305038 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:13:18.316867 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:13:18.316956 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:13:18.317011 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:13:18.326836 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:13:18.345697 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:13:18.373482 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:13:18.393943 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1247) Oct 2 19:13:18.400270 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:18.400335 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:18.406002 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:18.412921 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:18.415115 initrd-setup-root[1252]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:13:18.419969 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:13:18.447778 initrd-setup-root[1278]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:13:18.465595 initrd-setup-root[1286]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:13:18.484325 initrd-setup-root[1294]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:13:18.707840 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:13:18.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.712400 systemd[1]: Starting ignition-mount.service... Oct 2 19:13:18.720922 systemd[1]: Starting sysroot-boot.service... Oct 2 19:13:18.748824 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:13:18.749018 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:13:18.778179 systemd[1]: Finished sysroot-boot.service. Oct 2 19:13:18.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.801526 ignition[1315]: INFO : Ignition 2.14.0 Oct 2 19:13:18.805053 ignition[1315]: INFO : Stage: mount Oct 2 19:13:18.805053 ignition[1315]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:18.805053 ignition[1315]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.819688 ignition[1315]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.822431 ignition[1315]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.825957 ignition[1315]: INFO : PUT result: OK Oct 2 19:13:18.831544 ignition[1315]: INFO : mount: mount passed Oct 2 19:13:18.833240 ignition[1315]: INFO : Ignition finished successfully Oct 2 19:13:18.835736 systemd[1]: Finished ignition-mount.service. Oct 2 19:13:18.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:18.840206 systemd[1]: Starting ignition-files.service... Oct 2 19:13:18.863122 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:13:18.877070 systemd-networkd[1186]: eth0: Gained IPv6LL Oct 2 19:13:18.887940 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1322) Oct 2 19:13:18.893575 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:13:18.893619 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:13:18.893643 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:13:18.902927 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:13:18.907484 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:13:18.941515 ignition[1341]: INFO : Ignition 2.14.0 Oct 2 19:13:18.941515 ignition[1341]: INFO : Stage: files Oct 2 19:13:18.944856 ignition[1341]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:18.944856 ignition[1341]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:18.963542 ignition[1341]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:18.966590 ignition[1341]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:18.969653 ignition[1341]: INFO : PUT result: OK Oct 2 19:13:18.974919 ignition[1341]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:13:18.979353 ignition[1341]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:13:18.979353 ignition[1341]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:13:19.015276 ignition[1341]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:13:19.021403 ignition[1341]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:13:19.025410 unknown[1341]: wrote ssh authorized keys file for user: core Oct 2 19:13:19.027622 ignition[1341]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:13:19.031241 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:13:19.035062 ignition[1341]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:13:19.350872 ignition[1341]: INFO : GET result: OK Oct 2 19:13:19.868970 ignition[1341]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:13:19.873800 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:13:19.873800 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:13:19.873800 ignition[1341]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:13:20.112779 ignition[1341]: INFO : GET result: OK Oct 2 19:13:20.362400 ignition[1341]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:13:20.369171 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:13:20.369171 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:13:20.369171 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:13:20.369171 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:13:20.369171 ignition[1341]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:20.391563 ignition[1341]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3705898019" Oct 2 19:13:20.398306 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1346) Oct 2 19:13:20.398351 ignition[1341]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3705898019": device or resource busy Oct 2 19:13:20.398351 ignition[1341]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3705898019", trying btrfs: device or resource busy Oct 2 19:13:20.398351 ignition[1341]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3705898019" Oct 2 19:13:20.411385 ignition[1341]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3705898019" Oct 2 19:13:20.425749 ignition[1341]: INFO : op(3): [started] unmounting "/mnt/oem3705898019" Oct 2 19:13:20.428137 ignition[1341]: INFO : op(3): [finished] unmounting "/mnt/oem3705898019" Oct 2 19:13:20.429808 systemd[1]: mnt-oem3705898019.mount: Deactivated successfully. Oct 2 19:13:20.432793 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:13:20.437074 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:13:20.437074 ignition[1341]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:13:20.539131 ignition[1341]: INFO : GET result: OK Oct 2 19:13:22.199858 ignition[1341]: DEBUG : file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Oct 2 19:13:22.204870 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:13:22.204870 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:13:22.204870 ignition[1341]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:13:22.249563 ignition[1341]: INFO : GET result: OK Oct 2 19:13:24.133164 ignition[1341]: DEBUG : file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Oct 2 19:13:24.138198 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:13:24.138198 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:13:24.138198 ignition[1341]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:13:24.198741 ignition[1341]: INFO : GET result: OK Oct 2 19:13:25.297278 ignition[1341]: DEBUG : file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Oct 2 19:13:25.302467 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:13:25.302467 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:13:25.302467 ignition[1341]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:13:25.540143 ignition[1341]: INFO : GET result: OK Oct 2 19:13:25.726120 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:13:25.729845 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:13:25.733665 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:13:25.737367 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:13:25.737367 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:13:25.737367 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:13:25.737367 ignition[1341]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:25.756458 ignition[1341]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1846272687" Oct 2 19:13:25.759342 ignition[1341]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1846272687": device or resource busy Oct 2 19:13:25.759342 ignition[1341]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1846272687", trying btrfs: device or resource busy Oct 2 19:13:25.759342 ignition[1341]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1846272687" Oct 2 19:13:25.769037 ignition[1341]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1846272687" Oct 2 19:13:25.777487 ignition[1341]: INFO : op(6): [started] unmounting "/mnt/oem1846272687" Oct 2 19:13:25.781824 systemd[1]: mnt-oem1846272687.mount: Deactivated successfully. Oct 2 19:13:25.786991 ignition[1341]: INFO : op(6): [finished] unmounting "/mnt/oem1846272687" Oct 2 19:13:25.790193 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:13:25.793988 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:13:25.793988 ignition[1341]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:25.809845 ignition[1341]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2759933894" Oct 2 19:13:25.812732 ignition[1341]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2759933894": device or resource busy Oct 2 19:13:25.812732 ignition[1341]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2759933894", trying btrfs: device or resource busy Oct 2 19:13:25.812732 ignition[1341]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2759933894" Oct 2 19:13:25.812732 ignition[1341]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2759933894" Oct 2 19:13:25.824981 ignition[1341]: INFO : op(9): [started] unmounting "/mnt/oem2759933894" Oct 2 19:13:25.827226 ignition[1341]: INFO : op(9): [finished] unmounting "/mnt/oem2759933894" Oct 2 19:13:25.829489 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:13:25.833255 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:13:25.839016 ignition[1341]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:13:25.856854 ignition[1341]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2370389049" Oct 2 19:13:25.859743 ignition[1341]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2370389049": device or resource busy Oct 2 19:13:25.859743 ignition[1341]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2370389049", trying btrfs: device or resource busy Oct 2 19:13:25.859743 ignition[1341]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2370389049" Oct 2 19:13:25.871222 ignition[1341]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2370389049" Oct 2 19:13:25.879952 ignition[1341]: INFO : op(c): [started] unmounting "/mnt/oem2370389049" Oct 2 19:13:25.884192 systemd[1]: mnt-oem2370389049.mount: Deactivated successfully. Oct 2 19:13:25.887714 ignition[1341]: INFO : op(c): [finished] unmounting "/mnt/oem2370389049" Oct 2 19:13:25.890025 ignition[1341]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:13:25.890025 ignition[1341]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:13:25.890025 ignition[1341]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:13:25.890025 ignition[1341]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:13:25.890025 ignition[1341]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:13:25.907957 ignition[1341]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:13:25.911946 ignition[1341]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:13:25.911946 ignition[1341]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:13:25.911946 ignition[1341]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:13:25.911946 ignition[1341]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:13:25.911946 ignition[1341]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:13:25.932961 ignition[1341]: INFO : files: files passed Oct 2 19:13:25.932961 ignition[1341]: INFO : Ignition finished successfully Oct 2 19:13:26.037777 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:13:26.037821 kernel: audit: type=1130 audit(1696274005.953:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:25.951811 systemd[1]: Finished ignition-files.service. Oct 2 19:13:25.960614 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:13:25.962473 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:13:25.963903 systemd[1]: Starting ignition-quench.service... Oct 2 19:13:26.052651 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:13:26.072756 kernel: audit: type=1130 audit(1696274006.053:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.072795 kernel: audit: type=1131 audit(1696274006.053:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.052840 systemd[1]: Finished ignition-quench.service. Oct 2 19:13:26.078642 initrd-setup-root-after-ignition[1366]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:13:26.083640 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:13:26.111199 kernel: audit: type=1130 audit(1696274006.084:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.085923 systemd[1]: Reached target ignition-complete.target. Oct 2 19:13:26.112629 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:13:26.164120 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:13:26.166166 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:13:26.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.175207 systemd[1]: Reached target initrd-fs.target. Oct 2 19:13:26.187561 kernel: audit: type=1130 audit(1696274006.168:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.187607 kernel: audit: type=1131 audit(1696274006.173:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.187654 systemd[1]: Reached target initrd.target. Oct 2 19:13:26.189448 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:13:26.190936 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:13:26.232600 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:13:26.259048 kernel: audit: type=1130 audit(1696274006.232:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.236395 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:13:26.272127 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:13:26.274139 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:13:26.279428 systemd[1]: Stopped target timers.target. Oct 2 19:13:26.282824 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:13:26.284066 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:13:26.288635 systemd[1]: Stopped target initrd.target. Oct 2 19:13:26.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.299019 kernel: audit: type=1131 audit(1696274006.287:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.299454 systemd[1]: Stopped target basic.target. Oct 2 19:13:26.302929 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:13:26.306788 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:13:26.310552 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:13:26.314287 systemd[1]: Stopped target remote-fs.target. Oct 2 19:13:26.317546 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:13:26.321200 systemd[1]: Stopped target sysinit.target. Oct 2 19:13:26.324453 systemd[1]: Stopped target local-fs.target. Oct 2 19:13:26.327819 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:13:26.331434 systemd[1]: Stopped target swap.target. Oct 2 19:13:26.334487 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:13:26.336614 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:13:26.340312 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:13:26.343771 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:13:26.353239 kernel: audit: type=1131 audit(1696274006.338:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.353204 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:13:26.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.356991 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:13:26.368683 kernel: audit: type=1131 audit(1696274006.355:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.357286 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:13:26.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.368880 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:13:26.373352 systemd[1]: Stopped ignition-files.service. Oct 2 19:13:26.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.378485 systemd[1]: Stopping ignition-mount.service... Oct 2 19:13:26.382072 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:13:26.383801 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:13:26.384339 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:13:26.386818 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:13:26.387234 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:13:26.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.424271 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:13:26.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.424502 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:13:26.435013 ignition[1379]: INFO : Ignition 2.14.0 Oct 2 19:13:26.435013 ignition[1379]: INFO : Stage: umount Oct 2 19:13:26.435013 ignition[1379]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:26.435013 ignition[1379]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:13:26.467803 ignition[1379]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:13:26.470501 ignition[1379]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:13:26.474338 ignition[1379]: INFO : PUT result: OK Oct 2 19:13:26.480190 ignition[1379]: INFO : umount: umount passed Oct 2 19:13:26.480190 ignition[1379]: INFO : Ignition finished successfully Oct 2 19:13:26.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.480086 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:13:26.481874 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:13:26.492278 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:13:26.494282 systemd[1]: Stopped ignition-mount.service. Oct 2 19:13:26.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.496216 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:13:26.496324 systemd[1]: Stopped ignition-disks.service. Oct 2 19:13:26.498160 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:13:26.498260 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:13:26.500871 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:13:26.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.501006 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:13:26.503253 systemd[1]: Stopped target network.target. Oct 2 19:13:26.506052 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:13:26.506171 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:13:26.508156 systemd[1]: Stopped target paths.target. Oct 2 19:13:26.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.509726 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:13:26.512991 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:13:26.521607 systemd[1]: Stopped target slices.target. Oct 2 19:13:26.524947 systemd[1]: Stopped target sockets.target. Oct 2 19:13:26.526689 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:13:26.526762 systemd[1]: Closed iscsid.socket. Oct 2 19:13:26.528296 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:13:26.528355 systemd[1]: Closed iscsiuio.socket. Oct 2 19:13:26.529905 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:13:26.530015 systemd[1]: Stopped ignition-setup.service. Oct 2 19:13:26.531808 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:13:26.531931 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:13:26.535084 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:13:26.537523 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:13:26.547270 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:13:26.547494 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:13:26.556840 systemd-networkd[1186]: eth0: DHCPv6 lease lost Oct 2 19:13:26.581000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:13:26.583646 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:13:26.585770 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:13:26.587000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:13:26.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.589606 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:13:26.589706 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:13:26.595826 systemd[1]: Stopping network-cleanup.service... Oct 2 19:13:26.608053 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:13:26.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.608190 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:13:26.611783 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:13:26.611914 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:13:26.613974 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:13:26.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.614086 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:13:26.618313 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:13:26.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.631576 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:13:26.631831 systemd[1]: Stopped network-cleanup.service. Oct 2 19:13:26.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.640924 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:13:26.641270 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:13:26.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.644272 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:13:26.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:26.644359 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:13:26.646570 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:13:26.646659 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:13:26.648498 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:13:26.648687 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:13:26.652319 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:13:26.652436 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:13:26.654849 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:13:26.655029 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:13:26.659096 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:13:26.660820 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:13:26.660991 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:13:26.669457 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:13:26.669570 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:13:26.673412 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:13:26.673528 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:13:26.689120 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:13:26.690779 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:13:26.695305 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:13:26.728234 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:13:26.759787 systemd[1]: Switching root. Oct 2 19:13:26.791073 iscsid[1191]: iscsid shutting down. Oct 2 19:13:26.795099 systemd-journald[309]: Received SIGTERM from PID 1 (systemd). Oct 2 19:13:26.795227 systemd-journald[309]: Journal stopped Oct 2 19:13:32.722362 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:13:32.722965 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:13:32.723003 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:13:32.723035 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:13:32.723134 kernel: SELinux: policy capability open_perms=1 Oct 2 19:13:32.723169 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:13:32.723200 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:13:32.723232 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:13:32.723261 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:13:32.723292 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:13:32.723328 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:13:32.723363 systemd[1]: Successfully loaded SELinux policy in 94.059ms. Oct 2 19:13:32.723644 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.018ms. Oct 2 19:13:32.723687 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:13:32.723721 systemd[1]: Detected virtualization amazon. Oct 2 19:13:32.723753 systemd[1]: Detected architecture arm64. Oct 2 19:13:32.723784 systemd[1]: Detected first boot. Oct 2 19:13:32.723816 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:13:32.723846 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:13:32.723876 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:13:32.723934 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:13:32.723972 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:13:32.724065 kernel: kauditd_printk_skb: 38 callbacks suppressed Oct 2 19:13:32.724097 kernel: audit: type=1334 audit(1696274012.136:81): prog-id=12 op=LOAD Oct 2 19:13:32.724127 kernel: audit: type=1334 audit(1696274012.136:82): prog-id=3 op=UNLOAD Oct 2 19:13:32.724156 kernel: audit: type=1334 audit(1696274012.138:83): prog-id=13 op=LOAD Oct 2 19:13:32.724187 kernel: audit: type=1334 audit(1696274012.140:84): prog-id=14 op=LOAD Oct 2 19:13:32.724218 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:13:32.724252 kernel: audit: type=1334 audit(1696274012.140:85): prog-id=4 op=UNLOAD Oct 2 19:13:32.724280 kernel: audit: type=1334 audit(1696274012.140:86): prog-id=5 op=UNLOAD Oct 2 19:13:32.724310 systemd[1]: Stopped iscsiuio.service. Oct 2 19:13:32.724348 kernel: audit: type=1131 audit(1696274012.145:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.724378 kernel: audit: type=1334 audit(1696274012.156:88): prog-id=12 op=UNLOAD Oct 2 19:13:32.724409 kernel: audit: type=1131 audit(1696274012.169:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.724438 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:13:32.724471 systemd[1]: Stopped iscsid.service. Oct 2 19:13:32.724506 kernel: audit: type=1131 audit(1696274012.182:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.737727 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:13:32.737796 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:13:32.737829 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:13:32.737862 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:13:32.737937 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:13:32.737973 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:13:32.738011 systemd[1]: Created slice system-getty.slice. Oct 2 19:13:32.738044 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:13:32.738078 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:13:32.738109 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:13:32.738209 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:13:32.738244 systemd[1]: Created slice user.slice. Oct 2 19:13:32.738274 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:13:32.738303 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:13:32.738336 systemd[1]: Set up automount boot.automount. Oct 2 19:13:32.738368 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:13:32.738405 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:13:32.738437 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:13:32.738466 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:13:32.738495 systemd[1]: Reached target integritysetup.target. Oct 2 19:13:32.738525 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:13:32.738556 systemd[1]: Reached target remote-fs.target. Oct 2 19:13:32.738586 systemd[1]: Reached target slices.target. Oct 2 19:13:32.738615 systemd[1]: Reached target swap.target. Oct 2 19:13:32.738645 systemd[1]: Reached target torcx.target. Oct 2 19:13:32.738678 systemd[1]: Reached target veritysetup.target. Oct 2 19:13:32.738709 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:13:32.738741 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:13:32.738770 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:13:32.738800 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:13:32.738830 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:13:32.738861 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:13:32.738910 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:13:32.738945 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:13:32.738982 systemd[1]: Mounting media.mount... Oct 2 19:13:32.739012 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:13:32.739042 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:13:32.739073 systemd[1]: Mounting tmp.mount... Oct 2 19:13:32.739102 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:13:32.739132 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:13:32.739162 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:13:32.739192 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:13:32.739291 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:13:32.739327 systemd[1]: Starting modprobe@drm.service... Oct 2 19:13:32.739360 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:13:32.739390 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:13:32.739422 systemd[1]: Starting modprobe@loop.service... Oct 2 19:13:32.739457 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:13:32.739487 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:13:32.739520 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:13:32.739550 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:13:32.739579 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:13:32.739613 systemd[1]: Stopped systemd-journald.service. Oct 2 19:13:32.739645 systemd[1]: Starting systemd-journald.service... Oct 2 19:13:32.739675 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:13:32.739708 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:13:32.739737 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:13:32.739770 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:13:32.739800 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:13:32.739831 systemd[1]: Stopped verity-setup.service. Oct 2 19:13:32.739861 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:13:32.742707 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:13:32.742777 systemd[1]: Mounted media.mount. Oct 2 19:13:32.742811 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:13:32.742843 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:13:32.742875 systemd[1]: Mounted tmp.mount. Oct 2 19:13:32.743328 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:13:32.743368 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:13:32.743399 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:13:32.743429 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:13:32.743462 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:13:32.743492 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:13:32.743522 systemd[1]: Finished modprobe@drm.service. Oct 2 19:13:32.744476 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:13:32.744514 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:13:32.744550 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:13:32.744580 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:13:32.744655 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:13:32.744689 systemd[1]: Reached target network-pre.target. Oct 2 19:13:32.744722 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:13:32.744754 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:13:32.744785 kernel: fuse: init (API version 7.34) Oct 2 19:13:32.744819 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:13:32.744852 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:13:32.744914 kernel: loop: module loaded Oct 2 19:13:32.744955 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:13:32.745032 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:13:32.745068 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:13:32.745099 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:13:32.745130 systemd[1]: Finished modprobe@loop.service. Oct 2 19:13:32.745176 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:13:32.747587 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:13:32.747649 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:13:32.747681 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:13:32.747719 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:13:32.747753 systemd-journald[1487]: Journal started Oct 2 19:13:32.747850 systemd-journald[1487]: Runtime Journal (/run/log/journal/ec296268413583aafe3237c19a4361ac) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:13:27.627000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:13:27.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:13:27.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:13:27.785000 audit: BPF prog-id=10 op=LOAD Oct 2 19:13:27.785000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:13:27.785000 audit: BPF prog-id=11 op=LOAD Oct 2 19:13:27.785000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:13:32.136000 audit: BPF prog-id=12 op=LOAD Oct 2 19:13:32.136000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:13:32.138000 audit: BPF prog-id=13 op=LOAD Oct 2 19:13:32.140000 audit: BPF prog-id=14 op=LOAD Oct 2 19:13:32.140000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:13:32.140000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:13:32.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.156000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:13:32.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.753734 systemd[1]: Started systemd-journald.service. Oct 2 19:13:32.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.471000 audit: BPF prog-id=15 op=LOAD Oct 2 19:13:32.471000 audit: BPF prog-id=16 op=LOAD Oct 2 19:13:32.471000 audit: BPF prog-id=17 op=LOAD Oct 2 19:13:32.476000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:13:32.476000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:13:32.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.692000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:13:32.692000 audit[1487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffec88a640 a2=4000 a3=1 items=0 ppid=1 pid=1487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:32.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.692000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:13:32.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.134060 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:13:32.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:28.007048 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:13:32.146457 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:13:28.016742 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:13:32.757052 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:13:28.016793 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:13:32.761270 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:13:28.016861 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:13:32.763319 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:13:28.016910 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:13:28.016982 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:13:28.017014 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:13:28.017442 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:13:28.017524 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:13:28.017559 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:13:28.018435 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:13:28.018515 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:13:28.018578 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:13:28.018618 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:13:28.018663 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:13:28.018701 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:28Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:13:31.280317 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:31Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:31.280852 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:31Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:31.281117 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:31Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:31.281568 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:31Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:13:31.281673 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:31Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:13:31.281804 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:13:31Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:13:32.816427 systemd-journald[1487]: Time spent on flushing to /var/log/journal/ec296268413583aafe3237c19a4361ac is 78.831ms for 1145 entries. Oct 2 19:13:32.816427 systemd-journald[1487]: System Journal (/var/log/journal/ec296268413583aafe3237c19a4361ac) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:13:32.921142 systemd-journald[1487]: Received client request to flush runtime journal. Oct 2 19:13:32.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.839816 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:13:32.923668 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:13:32.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.928469 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:13:32.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.934937 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:13:32.962768 udevadm[1525]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:13:32.969228 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:13:32.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:32.975530 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:13:33.099622 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:13:33.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.105872 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:13:33.261337 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:13:33.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.719078 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:13:33.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.722000 audit: BPF prog-id=18 op=LOAD Oct 2 19:13:33.722000 audit: BPF prog-id=19 op=LOAD Oct 2 19:13:33.722000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:13:33.722000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:13:33.725577 systemd[1]: Starting systemd-udevd.service... Oct 2 19:13:33.771065 systemd-udevd[1534]: Using default interface naming scheme 'v252'. Oct 2 19:13:33.811976 systemd[1]: Started systemd-udevd.service. Oct 2 19:13:33.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.820000 audit: BPF prog-id=20 op=LOAD Oct 2 19:13:33.823590 systemd[1]: Starting systemd-networkd.service... Oct 2 19:13:33.837000 audit: BPF prog-id=21 op=LOAD Oct 2 19:13:33.837000 audit: BPF prog-id=22 op=LOAD Oct 2 19:13:33.837000 audit: BPF prog-id=23 op=LOAD Oct 2 19:13:33.850883 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:13:33.930280 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:13:33.978975 systemd[1]: Started systemd-userdbd.service. Oct 2 19:13:33.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:33.995044 (udev-worker)[1547]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:34.158785 systemd-networkd[1548]: lo: Link UP Oct 2 19:13:34.158810 systemd-networkd[1548]: lo: Gained carrier Oct 2 19:13:34.159802 systemd-networkd[1548]: Enumeration completed Oct 2 19:13:34.159997 systemd[1]: Started systemd-networkd.service. Oct 2 19:13:34.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.165961 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:13:34.172270 systemd-networkd[1548]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:13:34.177935 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:13:34.178276 systemd-networkd[1548]: eth0: Link UP Oct 2 19:13:34.178572 systemd-networkd[1548]: eth0: Gained carrier Oct 2 19:13:34.192242 systemd-networkd[1548]: eth0: DHCPv4 address 172.31.29.254/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:13:34.260942 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1551) Oct 2 19:13:34.470792 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:13:34.477694 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:13:34.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.481793 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:13:34.507486 lvm[1653]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:13:34.546910 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:13:34.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.549017 systemd[1]: Reached target cryptsetup.target. Oct 2 19:13:34.553080 systemd[1]: Starting lvm2-activation.service... Oct 2 19:13:34.567591 lvm[1654]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:13:34.606061 systemd[1]: Finished lvm2-activation.service. Oct 2 19:13:34.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.608086 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:13:34.610111 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:13:34.610175 systemd[1]: Reached target local-fs.target. Oct 2 19:13:34.611844 systemd[1]: Reached target machines.target. Oct 2 19:13:34.615669 systemd[1]: Starting ldconfig.service... Oct 2 19:13:34.618007 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:13:34.618127 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:34.620382 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:13:34.625330 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:13:34.631260 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:13:34.633309 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:13:34.633439 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:13:34.636874 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:13:34.672880 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1656 (bootctl) Oct 2 19:13:34.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.675160 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:13:34.697803 systemd-tmpfiles[1659]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:13:34.704388 systemd-tmpfiles[1659]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:13:34.705292 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:13:34.711313 systemd-tmpfiles[1659]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:13:34.792251 systemd-fsck[1666]: fsck.fat 4.2 (2021-01-31) Oct 2 19:13:34.792251 systemd-fsck[1666]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:13:34.798441 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:13:34.803170 systemd[1]: Mounting boot.mount... Oct 2 19:13:34.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.836556 systemd[1]: Mounted boot.mount. Oct 2 19:13:34.864440 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:13:34.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:35.052945 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:13:35.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:35.057708 systemd[1]: Starting audit-rules.service... Oct 2 19:13:35.061516 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:13:35.067040 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:13:35.068000 audit: BPF prog-id=24 op=LOAD Oct 2 19:13:35.073684 systemd[1]: Starting systemd-resolved.service... Oct 2 19:13:35.074000 audit: BPF prog-id=25 op=LOAD Oct 2 19:13:35.079266 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:13:35.084704 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:13:35.121493 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:13:35.123667 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:13:35.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:35.132000 audit[1685]: SYSTEM_BOOT pid=1685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:13:35.141500 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:13:35.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:35.173625 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:13:35.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:35.278917 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:13:35.280943 systemd[1]: Reached target time-set.target. Oct 2 19:13:35.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:35.287000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:13:35.287000 audit[1700]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff36a0220 a2=420 a3=0 items=0 ppid=1680 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:35.287000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:13:35.289653 augenrules[1700]: No rules Oct 2 19:13:35.291716 systemd[1]: Finished audit-rules.service. Oct 2 19:13:35.298413 systemd-resolved[1683]: Positive Trust Anchors: Oct 2 19:13:35.298439 systemd-resolved[1683]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:13:35.298491 systemd-resolved[1683]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:13:35.317498 systemd-resolved[1683]: Defaulting to hostname 'linux'. Oct 2 19:13:35.321091 systemd[1]: Started systemd-resolved.service. Oct 2 19:13:35.323000 systemd[1]: Reached target network.target. Oct 2 19:13:35.324691 systemd[1]: Reached target nss-lookup.target. Oct 2 19:13:34.944749 systemd-resolved[1683]: Clock change detected. Flushing caches. Oct 2 19:13:35.338909 systemd-journald[1487]: Time jumped backwards, rotating. Oct 2 19:13:34.951063 systemd-timesyncd[1684]: Contacted time server 45.79.35.159:123 (0.flatcar.pool.ntp.org). Oct 2 19:13:34.951178 systemd-timesyncd[1684]: Initial clock synchronization to Mon 2023-10-02 19:13:34.944549 UTC. Oct 2 19:13:34.988220 systemd-networkd[1548]: eth0: Gained IPv6LL Oct 2 19:13:34.992569 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:13:34.994779 systemd[1]: Reached target network-online.target. Oct 2 19:13:36.830166 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:13:36.831186 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:13:37.096780 ldconfig[1655]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:13:37.103026 systemd[1]: Finished ldconfig.service. Oct 2 19:13:37.107100 systemd[1]: Starting systemd-update-done.service... Oct 2 19:13:37.129306 systemd[1]: Finished systemd-update-done.service. Oct 2 19:13:37.131380 systemd[1]: Reached target sysinit.target. Oct 2 19:13:37.133212 systemd[1]: Started motdgen.path. Oct 2 19:13:37.134732 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:13:37.137281 systemd[1]: Started logrotate.timer. Oct 2 19:13:37.139031 systemd[1]: Started mdadm.timer. Oct 2 19:13:37.140416 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:13:37.142158 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:13:37.142208 systemd[1]: Reached target paths.target. Oct 2 19:13:37.143721 systemd[1]: Reached target timers.target. Oct 2 19:13:37.145703 systemd[1]: Listening on dbus.socket. Oct 2 19:13:37.149010 systemd[1]: Starting docker.socket... Oct 2 19:13:37.159953 systemd[1]: Listening on sshd.socket. Oct 2 19:13:37.161804 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:37.162661 systemd[1]: Listening on docker.socket. Oct 2 19:13:37.164483 systemd[1]: Reached target sockets.target. Oct 2 19:13:37.166182 systemd[1]: Reached target basic.target. Oct 2 19:13:37.167814 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:13:37.167881 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:13:37.170513 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:13:37.174719 systemd[1]: Starting containerd.service... Oct 2 19:13:37.189225 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:13:37.194519 systemd[1]: Starting dbus.service... Oct 2 19:13:37.203194 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:13:37.210704 systemd[1]: Starting extend-filesystems.service... Oct 2 19:13:37.215185 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:13:37.218859 systemd[1]: Starting motdgen.service... Oct 2 19:13:37.227301 systemd[1]: Started nvidia.service. Oct 2 19:13:37.237049 jq[1721]: false Oct 2 19:13:37.232526 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:13:37.237509 systemd[1]: Starting prepare-critools.service... Oct 2 19:13:37.242525 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:13:37.246661 systemd[1]: Starting sshd-keygen.service... Oct 2 19:13:37.257909 systemd[1]: Starting systemd-logind.service... Oct 2 19:13:37.260191 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:13:37.260329 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:13:37.261264 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:13:37.262865 systemd[1]: Starting update-engine.service... Oct 2 19:13:37.268217 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:13:37.298110 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:13:37.298485 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:13:37.395858 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:13:37.396260 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:13:37.437836 dbus-daemon[1720]: [system] SELinux support is enabled Oct 2 19:13:37.438895 jq[1731]: true Oct 2 19:13:37.442642 systemd[1]: Started dbus.service. Oct 2 19:13:37.447805 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:13:37.447875 systemd[1]: Reached target system-config.target. Oct 2 19:13:37.451296 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:13:37.451352 systemd[1]: Reached target user-config.target. Oct 2 19:13:37.454804 tar[1733]: ./ Oct 2 19:13:37.470213 tar[1733]: ./loopback Oct 2 19:13:37.480933 tar[1737]: crictl Oct 2 19:13:37.491974 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:13:37.492368 systemd[1]: Finished motdgen.service. Oct 2 19:13:37.510202 dbus-daemon[1720]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1548 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:13:37.516587 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:13:37.587347 jq[1748]: true Oct 2 19:13:37.670745 extend-filesystems[1722]: Found nvme0n1 Oct 2 19:13:37.670745 extend-filesystems[1722]: Found nvme0n1p1 Oct 2 19:13:37.674335 extend-filesystems[1722]: Found nvme0n1p2 Oct 2 19:13:37.674335 extend-filesystems[1722]: Found nvme0n1p3 Oct 2 19:13:37.674335 extend-filesystems[1722]: Found usr Oct 2 19:13:37.674335 extend-filesystems[1722]: Found nvme0n1p4 Oct 2 19:13:37.674335 extend-filesystems[1722]: Found nvme0n1p6 Oct 2 19:13:37.674335 extend-filesystems[1722]: Found nvme0n1p7 Oct 2 19:13:37.674335 extend-filesystems[1722]: Found nvme0n1p9 Oct 2 19:13:37.674335 extend-filesystems[1722]: Checking size of /dev/nvme0n1p9 Oct 2 19:13:37.694281 update_engine[1730]: I1002 19:13:37.693696 1730 main.cc:92] Flatcar Update Engine starting Oct 2 19:13:37.700955 systemd[1]: Started update-engine.service. Oct 2 19:13:37.705681 systemd[1]: Started locksmithd.service. Oct 2 19:13:37.707964 update_engine[1730]: I1002 19:13:37.707682 1730 update_check_scheduler.cc:74] Next update check in 8m12s Oct 2 19:13:37.740660 amazon-ssm-agent[1717]: 2023/10/02 19:13:37 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:13:37.763058 amazon-ssm-agent[1717]: Initializing new seelog logger Oct 2 19:13:37.771810 amazon-ssm-agent[1717]: New Seelog Logger Creation Complete Oct 2 19:13:37.772158 amazon-ssm-agent[1717]: 2023/10/02 19:13:37 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:13:37.772297 amazon-ssm-agent[1717]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:13:37.772878 amazon-ssm-agent[1717]: 2023/10/02 19:13:37 processing appconfig overrides Oct 2 19:13:37.795808 extend-filesystems[1722]: Resized partition /dev/nvme0n1p9 Oct 2 19:13:37.845889 extend-filesystems[1780]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:13:37.868757 env[1746]: time="2023-10-02T19:13:37.868668278Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:13:37.873134 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:13:37.926277 tar[1733]: ./bandwidth Oct 2 19:13:37.931284 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:13:37.979076 extend-filesystems[1780]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:13:37.979076 extend-filesystems[1780]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:13:37.979076 extend-filesystems[1780]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:13:37.995689 extend-filesystems[1722]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:13:37.998845 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:13:37.999233 systemd[1]: Finished extend-filesystems.service. Oct 2 19:13:38.018763 systemd-logind[1729]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:13:38.030425 systemd-logind[1729]: New seat seat0. Oct 2 19:13:38.046751 systemd[1]: Started systemd-logind.service. Oct 2 19:13:38.055378 bash[1798]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:13:38.062680 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:13:38.071487 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:13:38.162912 env[1746]: time="2023-10-02T19:13:38.162819300Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:13:38.163894 env[1746]: time="2023-10-02T19:13:38.163715724Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:38.174624 dbus-daemon[1720]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:13:38.174864 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:13:38.177691 tar[1733]: ./ptp Oct 2 19:13:38.179236 dbus-daemon[1720]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1755 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:13:38.186360 systemd[1]: Starting polkit.service... Oct 2 19:13:38.190029 env[1746]: time="2023-10-02T19:13:38.189935556Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:38.190029 env[1746]: time="2023-10-02T19:13:38.190021848Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:38.190497 env[1746]: time="2023-10-02T19:13:38.190442508Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:38.190622 env[1746]: time="2023-10-02T19:13:38.190493904Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:38.190622 env[1746]: time="2023-10-02T19:13:38.190527528Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:13:38.190622 env[1746]: time="2023-10-02T19:13:38.190552560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:38.190789 env[1746]: time="2023-10-02T19:13:38.190729992Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:38.191442 env[1746]: time="2023-10-02T19:13:38.191376324Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:13:38.192141 env[1746]: time="2023-10-02T19:13:38.192076224Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:13:38.192141 env[1746]: time="2023-10-02T19:13:38.192133608Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:13:38.192340 env[1746]: time="2023-10-02T19:13:38.192300180Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:13:38.192340 env[1746]: time="2023-10-02T19:13:38.192331260Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:13:38.215559 env[1746]: time="2023-10-02T19:13:38.215463564Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:13:38.215559 env[1746]: time="2023-10-02T19:13:38.215551128Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:13:38.215791 env[1746]: time="2023-10-02T19:13:38.215585016Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:13:38.215791 env[1746]: time="2023-10-02T19:13:38.215663448Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.216005 env[1746]: time="2023-10-02T19:13:38.215951388Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.216072 env[1746]: time="2023-10-02T19:13:38.216007476Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.216072 env[1746]: time="2023-10-02T19:13:38.216056292Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.216618 env[1746]: time="2023-10-02T19:13:38.216567108Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.216725 env[1746]: time="2023-10-02T19:13:38.216624312Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.216725 env[1746]: time="2023-10-02T19:13:38.216659352Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.216725 env[1746]: time="2023-10-02T19:13:38.216689724Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.216886 env[1746]: time="2023-10-02T19:13:38.216720564Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:13:38.217018 env[1746]: time="2023-10-02T19:13:38.216956784Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:13:38.217247 env[1746]: time="2023-10-02T19:13:38.217197792Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:13:38.245437 env[1746]: time="2023-10-02T19:13:38.245363964Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:13:38.245584 env[1746]: time="2023-10-02T19:13:38.245451156Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.245584 env[1746]: time="2023-10-02T19:13:38.245488920Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:13:38.245692 env[1746]: time="2023-10-02T19:13:38.245650932Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.245746 env[1746]: time="2023-10-02T19:13:38.245685012Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.245746 env[1746]: time="2023-10-02T19:13:38.245718468Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.245869 env[1746]: time="2023-10-02T19:13:38.245749032Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.245869 env[1746]: time="2023-10-02T19:13:38.245778612Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.245869 env[1746]: time="2023-10-02T19:13:38.245808456Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.245869 env[1746]: time="2023-10-02T19:13:38.245837124Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.246078 env[1746]: time="2023-10-02T19:13:38.245865660Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.246078 env[1746]: time="2023-10-02T19:13:38.245900196Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:13:38.246257 env[1746]: time="2023-10-02T19:13:38.246210348Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.246324 env[1746]: time="2023-10-02T19:13:38.246258852Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.246324 env[1746]: time="2023-10-02T19:13:38.246292992Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.246429 env[1746]: time="2023-10-02T19:13:38.246322236Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:13:38.246429 env[1746]: time="2023-10-02T19:13:38.246354252Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:13:38.246429 env[1746]: time="2023-10-02T19:13:38.246380724Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:13:38.246429 env[1746]: time="2023-10-02T19:13:38.246418608Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:13:38.246626 env[1746]: time="2023-10-02T19:13:38.246483264Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:13:38.246972 env[1746]: time="2023-10-02T19:13:38.246863040Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:13:38.246972 env[1746]: time="2023-10-02T19:13:38.246974580Z" level=info msg="Connect containerd service" Oct 2 19:13:38.248408 env[1746]: time="2023-10-02T19:13:38.247216596Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:13:38.260382 env[1746]: time="2023-10-02T19:13:38.256516908Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:13:38.265705 env[1746]: time="2023-10-02T19:13:38.265640076Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:13:38.265835 env[1746]: time="2023-10-02T19:13:38.265775604Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:13:38.266234 env[1746]: time="2023-10-02T19:13:38.265876128Z" level=info msg="containerd successfully booted in 0.400843s" Oct 2 19:13:38.266020 systemd[1]: Started containerd.service. Oct 2 19:13:38.282123 polkitd[1816]: Started polkitd version 121 Oct 2 19:13:38.288645 env[1746]: time="2023-10-02T19:13:38.286869649Z" level=info msg="Start subscribing containerd event" Oct 2 19:13:38.288791 env[1746]: time="2023-10-02T19:13:38.288664729Z" level=info msg="Start recovering state" Oct 2 19:13:38.288858 env[1746]: time="2023-10-02T19:13:38.288788281Z" level=info msg="Start event monitor" Oct 2 19:13:38.288992 env[1746]: time="2023-10-02T19:13:38.288936313Z" level=info msg="Start snapshots syncer" Oct 2 19:13:38.289084 env[1746]: time="2023-10-02T19:13:38.288990889Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:13:38.289084 env[1746]: time="2023-10-02T19:13:38.289015849Z" level=info msg="Start streaming server" Oct 2 19:13:38.327918 polkitd[1816]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:13:38.332465 polkitd[1816]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:13:38.347295 polkitd[1816]: Finished loading, compiling and executing 2 rules Oct 2 19:13:38.350148 dbus-daemon[1720]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:13:38.350423 systemd[1]: Started polkit.service. Oct 2 19:13:38.358109 polkitd[1816]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:13:38.373604 coreos-metadata[1719]: Oct 02 19:13:38.373 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:13:38.375556 coreos-metadata[1719]: Oct 02 19:13:38.375 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:13:38.379332 coreos-metadata[1719]: Oct 02 19:13:38.379 INFO Fetch successful Oct 2 19:13:38.379332 coreos-metadata[1719]: Oct 02 19:13:38.379 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:13:38.381937 coreos-metadata[1719]: Oct 02 19:13:38.381 INFO Fetch successful Oct 2 19:13:38.387323 unknown[1719]: wrote ssh authorized keys file for user: core Oct 2 19:13:38.399389 systemd-resolved[1683]: System hostname changed to 'ip-172-31-29-254'. Oct 2 19:13:38.399394 systemd-hostnamed[1755]: Hostname set to (transient) Oct 2 19:13:38.436294 update-ssh-keys[1824]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:13:38.437768 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:13:38.479298 tar[1733]: ./vlan Oct 2 19:13:38.641194 tar[1733]: ./host-device Oct 2 19:13:38.701758 amazon-ssm-agent[1717]: 2023-10-02 19:13:38 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0028614278bf6732e is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0028614278bf6732e because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:13:38.701758 amazon-ssm-agent[1717]: status code: 400, request id: d67f28b0-2ece-456f-b04e-c7564251313c Oct 2 19:13:38.701758 amazon-ssm-agent[1717]: 2023-10-02 19:13:38 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:13:38.790763 tar[1733]: ./tuning Oct 2 19:13:38.906753 tar[1733]: ./vrf Oct 2 19:13:39.032196 tar[1733]: ./sbr Oct 2 19:13:39.145638 tar[1733]: ./tap Oct 2 19:13:39.290170 tar[1733]: ./dhcp Oct 2 19:13:39.525911 systemd[1]: Finished prepare-critools.service. Oct 2 19:13:39.629038 tar[1733]: ./static Oct 2 19:13:39.675539 tar[1733]: ./firewall Oct 2 19:13:39.744799 tar[1733]: ./macvlan Oct 2 19:13:39.808258 tar[1733]: ./dummy Oct 2 19:13:39.871522 tar[1733]: ./bridge Oct 2 19:13:39.939490 tar[1733]: ./ipvlan Oct 2 19:13:40.001537 tar[1733]: ./portmap Oct 2 19:13:40.060931 tar[1733]: ./host-local Oct 2 19:13:40.142420 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:13:40.183061 locksmithd[1769]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:13:44.472937 sshd_keygen[1753]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:13:44.530569 systemd[1]: Finished sshd-keygen.service. Oct 2 19:13:44.535279 systemd[1]: Starting issuegen.service... Oct 2 19:13:44.555386 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:13:44.555734 systemd[1]: Finished issuegen.service. Oct 2 19:13:44.560438 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:13:44.582322 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:13:44.586962 systemd[1]: Started getty@tty1.service. Oct 2 19:13:44.591447 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:13:44.594597 systemd[1]: Reached target getty.target. Oct 2 19:13:44.597529 systemd[1]: Reached target multi-user.target. Oct 2 19:13:44.602239 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:13:44.626245 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:13:44.626598 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:13:44.628962 systemd[1]: Startup finished in 1.178s (kernel) + 14.883s (initrd) + 17.546s (userspace) = 33.607s. Oct 2 19:13:45.062581 systemd[1]: Created slice system-sshd.slice. Oct 2 19:13:45.065385 systemd[1]: Started sshd@0-172.31.29.254:22-139.178.89.65:58818.service. Oct 2 19:13:45.271510 sshd[1943]: Accepted publickey for core from 139.178.89.65 port 58818 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:45.276329 sshd[1943]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.294564 systemd[1]: Created slice user-500.slice. Oct 2 19:13:45.297334 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:13:45.305112 systemd-logind[1729]: New session 1 of user core. Oct 2 19:13:45.324145 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:13:45.327727 systemd[1]: Starting user@500.service... Oct 2 19:13:45.339702 (systemd)[1946]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.538556 systemd[1946]: Queued start job for default target default.target. Oct 2 19:13:45.540128 systemd[1946]: Reached target paths.target. Oct 2 19:13:45.540439 systemd[1946]: Reached target sockets.target. Oct 2 19:13:45.540610 systemd[1946]: Reached target timers.target. Oct 2 19:13:45.540759 systemd[1946]: Reached target basic.target. Oct 2 19:13:45.541065 systemd[1]: Started user@500.service. Oct 2 19:13:45.542910 systemd[1]: Started session-1.scope. Oct 2 19:13:45.544443 systemd[1946]: Reached target default.target. Oct 2 19:13:45.545072 systemd[1946]: Startup finished in 187ms. Oct 2 19:13:45.702867 systemd[1]: Started sshd@1-172.31.29.254:22-139.178.89.65:58830.service. Oct 2 19:13:45.878132 sshd[1955]: Accepted publickey for core from 139.178.89.65 port 58830 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:45.881421 sshd[1955]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:45.890669 systemd-logind[1729]: New session 2 of user core. Oct 2 19:13:45.891767 systemd[1]: Started session-2.scope. Oct 2 19:13:46.038609 sshd[1955]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:46.045063 systemd-logind[1729]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:13:46.045668 systemd[1]: sshd@1-172.31.29.254:22-139.178.89.65:58830.service: Deactivated successfully. Oct 2 19:13:46.047076 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:13:46.048647 systemd-logind[1729]: Removed session 2. Oct 2 19:13:46.068775 systemd[1]: Started sshd@2-172.31.29.254:22-139.178.89.65:34762.service. Oct 2 19:13:46.245932 sshd[1961]: Accepted publickey for core from 139.178.89.65 port 34762 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.249408 sshd[1961]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.258135 systemd-logind[1729]: New session 3 of user core. Oct 2 19:13:46.259081 systemd[1]: Started session-3.scope. Oct 2 19:13:46.390325 sshd[1961]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:46.396880 systemd[1]: sshd@2-172.31.29.254:22-139.178.89.65:34762.service: Deactivated successfully. Oct 2 19:13:46.398114 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:13:46.399142 systemd-logind[1729]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:13:46.400600 systemd-logind[1729]: Removed session 3. Oct 2 19:13:46.421322 systemd[1]: Started sshd@3-172.31.29.254:22-139.178.89.65:34776.service. Oct 2 19:13:46.594786 sshd[1967]: Accepted publickey for core from 139.178.89.65 port 34776 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.597947 sshd[1967]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.607122 systemd[1]: Started session-4.scope. Oct 2 19:13:46.607161 systemd-logind[1729]: New session 4 of user core. Oct 2 19:13:46.751214 sshd[1967]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:46.757515 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:13:46.758708 systemd-logind[1729]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:13:46.759137 systemd[1]: sshd@3-172.31.29.254:22-139.178.89.65:34776.service: Deactivated successfully. Oct 2 19:13:46.761072 systemd-logind[1729]: Removed session 4. Oct 2 19:13:46.782162 systemd[1]: Started sshd@4-172.31.29.254:22-139.178.89.65:34790.service. Oct 2 19:13:46.962759 sshd[1973]: Accepted publickey for core from 139.178.89.65 port 34790 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:46.965932 sshd[1973]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:46.974818 systemd[1]: Started session-5.scope. Oct 2 19:13:46.975585 systemd-logind[1729]: New session 5 of user core. Oct 2 19:13:47.139510 sudo[1976]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:13:47.140491 sudo[1976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.154238 dbus-daemon[1720]: avc: received setenforce notice (enforcing=1) Oct 2 19:13:47.158010 sudo[1976]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.183164 sshd[1973]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:47.189498 systemd-logind[1729]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:13:47.190213 systemd[1]: sshd@4-172.31.29.254:22-139.178.89.65:34790.service: Deactivated successfully. Oct 2 19:13:47.191456 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:13:47.192961 systemd-logind[1729]: Removed session 5. Oct 2 19:13:47.211927 systemd[1]: Started sshd@5-172.31.29.254:22-139.178.89.65:34796.service. Oct 2 19:13:47.385481 sshd[1980]: Accepted publickey for core from 139.178.89.65 port 34796 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:47.388831 sshd[1980]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:47.397945 systemd[1]: Started session-6.scope. Oct 2 19:13:47.399186 systemd-logind[1729]: New session 6 of user core. Oct 2 19:13:47.518795 sudo[1984]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:13:47.519849 sudo[1984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.527334 sudo[1984]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.541024 sudo[1983]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:13:47.541519 sudo[1983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:47.565583 systemd[1]: Stopping audit-rules.service... Oct 2 19:13:47.569000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:13:47.571223 auditctl[1987]: No rules Oct 2 19:13:47.572643 kernel: kauditd_printk_skb: 68 callbacks suppressed Oct 2 19:13:47.572700 kernel: audit: type=1305 audit(1696274027.569:155): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:13:47.575581 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:13:47.576132 systemd[1]: Stopped audit-rules.service. Oct 2 19:13:47.569000 audit[1987]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe76b4480 a2=420 a3=0 items=0 ppid=1 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.579672 systemd[1]: Starting audit-rules.service... Oct 2 19:13:47.589523 kernel: audit: type=1300 audit(1696274027.569:155): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe76b4480 a2=420 a3=0 items=0 ppid=1 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.569000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:13:47.593589 kernel: audit: type=1327 audit(1696274027.569:155): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:13:47.593675 kernel: audit: type=1131 audit(1696274027.575:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.648115 augenrules[2004]: No rules Oct 2 19:13:47.649863 systemd[1]: Finished audit-rules.service. Oct 2 19:13:47.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.658994 sudo[1983]: pam_unix(sudo:session): session closed for user root Oct 2 19:13:47.658000 audit[1983]: USER_END pid=1983 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.669444 kernel: audit: type=1130 audit(1696274027.649:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.669507 kernel: audit: type=1106 audit(1696274027.658:158): pid=1983 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.669549 kernel: audit: type=1104 audit(1696274027.658:159): pid=1983 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.658000 audit[1983]: CRED_DISP pid=1983 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.682247 sshd[1980]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:47.683000 audit[1980]: USER_END pid=1980 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.684000 audit[1980]: CRED_DISP pid=1980 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.708945 kernel: audit: type=1106 audit(1696274027.683:160): pid=1980 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.709070 kernel: audit: type=1104 audit(1696274027.684:161): pid=1980 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.700191 systemd[1]: sshd@5-172.31.29.254:22-139.178.89.65:34796.service: Deactivated successfully. Oct 2 19:13:47.701338 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:13:47.708182 systemd-logind[1729]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:13:47.718408 kernel: audit: type=1131 audit(1696274027.697:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.254:22-139.178.89.65:34796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.254:22-139.178.89.65:34796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.718964 systemd[1]: Started sshd@6-172.31.29.254:22-139.178.89.65:34806.service. Oct 2 19:13:47.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.254:22-139.178.89.65:34806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:47.720532 systemd-logind[1729]: Removed session 6. Oct 2 19:13:47.891000 audit[2010]: USER_ACCT pid=2010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.892765 sshd[2010]: Accepted publickey for core from 139.178.89.65 port 34806 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:13:47.894000 audit[2010]: CRED_ACQ pid=2010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.894000 audit[2010]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce886ad0 a2=3 a3=1 items=0 ppid=1 pid=2010 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:47.894000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:47.896471 sshd[2010]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:47.905193 systemd-logind[1729]: New session 7 of user core. Oct 2 19:13:47.905749 systemd[1]: Started session-7.scope. Oct 2 19:13:47.914000 audit[2010]: USER_START pid=2010 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:47.920000 audit[2012]: CRED_ACQ pid=2012 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:48.023000 audit[2013]: USER_ACCT pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.025345 sudo[2013]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:13:48.024000 audit[2013]: CRED_REFR pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.026363 sudo[2013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:13:48.029000 audit[2013]: USER_START pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.763516 systemd[1]: Starting docker.service... Oct 2 19:13:48.878747 env[2028]: time="2023-10-02T19:13:48.878677141Z" level=info msg="Starting up" Oct 2 19:13:48.882964 env[2028]: time="2023-10-02T19:13:48.882853057Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:13:48.882964 env[2028]: time="2023-10-02T19:13:48.882895453Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:13:48.882964 env[2028]: time="2023-10-02T19:13:48.882932557Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:13:48.882964 env[2028]: time="2023-10-02T19:13:48.882956917Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:13:48.887556 env[2028]: time="2023-10-02T19:13:48.887511061Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:13:48.887729 env[2028]: time="2023-10-02T19:13:48.887701009Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:13:48.887858 env[2028]: time="2023-10-02T19:13:48.887824813Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:13:48.887962 env[2028]: time="2023-10-02T19:13:48.887934781Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:13:48.898121 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1369193858-merged.mount: Deactivated successfully. Oct 2 19:13:48.933214 env[2028]: time="2023-10-02T19:13:48.933144901Z" level=info msg="Loading containers: start." Oct 2 19:13:49.074000 audit[2059]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.074000 audit[2059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc2ab3110 a2=0 a3=1 items=0 ppid=2028 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.074000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:13:49.081000 audit[2061]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.081000 audit[2061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffffc5205a0 a2=0 a3=1 items=0 ppid=2028 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.081000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:13:49.088000 audit[2063]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.088000 audit[2063]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdfb167f0 a2=0 a3=1 items=0 ppid=2028 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.088000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:13:49.096000 audit[2065]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.096000 audit[2065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc4405eb0 a2=0 a3=1 items=0 ppid=2028 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.096000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:13:49.104000 audit[2067]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.104000 audit[2067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd23f80f0 a2=0 a3=1 items=0 ppid=2028 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.104000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:13:49.145000 audit[2072]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.145000 audit[2072]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffffc9b100 a2=0 a3=1 items=0 ppid=2028 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.145000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:13:49.161000 audit[2074]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.161000 audit[2074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe23480c0 a2=0 a3=1 items=0 ppid=2028 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.161000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:13:49.168000 audit[2076]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.168000 audit[2076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd0510e90 a2=0 a3=1 items=0 ppid=2028 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.168000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:13:49.174000 audit[2078]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.174000 audit[2078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffc0763ce0 a2=0 a3=1 items=0 ppid=2028 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.174000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.194000 audit[2082]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.194000 audit[2082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffa5b2b10 a2=0 a3=1 items=0 ppid=2028 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.194000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.198000 audit[2083]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.198000 audit[2083]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd2929470 a2=0 a3=1 items=0 ppid=2028 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.198000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.213017 kernel: Initializing XFRM netlink socket Oct 2 19:13:49.257291 env[2028]: time="2023-10-02T19:13:49.257243987Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:13:49.262446 (udev-worker)[2039]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:13:49.296000 audit[2092]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.296000 audit[2092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff0e55b20 a2=0 a3=1 items=0 ppid=2028 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.296000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:13:49.316000 audit[2095]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.316000 audit[2095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff5a10260 a2=0 a3=1 items=0 ppid=2028 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.316000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:13:49.326000 audit[2098]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.326000 audit[2098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcbefdca0 a2=0 a3=1 items=0 ppid=2028 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.326000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:13:49.334000 audit[2100]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.334000 audit[2100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd9494300 a2=0 a3=1 items=0 ppid=2028 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.334000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:13:49.341000 audit[2102]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.341000 audit[2102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe2dda3b0 a2=0 a3=1 items=0 ppid=2028 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.341000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:13:49.349000 audit[2104]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.349000 audit[2104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc3d6ec60 a2=0 a3=1 items=0 ppid=2028 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.349000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:13:49.356000 audit[2106]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.356000 audit[2106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd8fa31e0 a2=0 a3=1 items=0 ppid=2028 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.356000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:13:49.374000 audit[2109]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.374000 audit[2109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffffe085da0 a2=0 a3=1 items=0 ppid=2028 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.374000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:13:49.381000 audit[2111]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.381000 audit[2111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffebcf9be0 a2=0 a3=1 items=0 ppid=2028 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.381000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:13:49.388000 audit[2113]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2113 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.388000 audit[2113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc1155e60 a2=0 a3=1 items=0 ppid=2028 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.388000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:13:49.395000 audit[2115]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.395000 audit[2115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcfcf7e40 a2=0 a3=1 items=0 ppid=2028 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.395000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:13:49.397588 systemd-networkd[1548]: docker0: Link UP Oct 2 19:13:49.430000 audit[2119]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.430000 audit[2119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffee10afc0 a2=0 a3=1 items=0 ppid=2028 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.430000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.434000 audit[2120]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:13:49.434000 audit[2120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff7beaf90 a2=0 a3=1 items=0 ppid=2028 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:49.434000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:13:49.436192 env[2028]: time="2023-10-02T19:13:49.436142640Z" level=info msg="Loading containers: done." Oct 2 19:13:49.462835 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1572341580-merged.mount: Deactivated successfully. Oct 2 19:13:49.473786 env[2028]: time="2023-10-02T19:13:49.473708568Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:13:49.474159 env[2028]: time="2023-10-02T19:13:49.474109860Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:13:49.474343 env[2028]: time="2023-10-02T19:13:49.474299628Z" level=info msg="Daemon has completed initialization" Oct 2 19:13:49.507715 systemd[1]: Started docker.service. Oct 2 19:13:49.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:49.518136 env[2028]: time="2023-10-02T19:13:49.518041968Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:13:49.570275 systemd[1]: Reloading. Oct 2 19:13:49.710738 /usr/lib/systemd/system-generators/torcx-generator[2166]: time="2023-10-02T19:13:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:13:49.713098 /usr/lib/systemd/system-generators/torcx-generator[2166]: time="2023-10-02T19:13:49Z" level=info msg="torcx already run" Oct 2 19:13:49.983028 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:13:49.983068 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:13:50.026068 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit: BPF prog-id=34 op=LOAD Oct 2 19:13:50.173000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit: BPF prog-id=35 op=LOAD Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.173000 audit: BPF prog-id=36 op=LOAD Oct 2 19:13:50.173000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:13:50.173000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.177000 audit: BPF prog-id=37 op=LOAD Oct 2 19:13:50.177000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:13:50.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit: BPF prog-id=38 op=LOAD Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.178000 audit: BPF prog-id=39 op=LOAD Oct 2 19:13:50.178000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:13:50.178000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:13:50.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit: BPF prog-id=40 op=LOAD Oct 2 19:13:50.180000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit: BPF prog-id=41 op=LOAD Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.180000 audit: BPF prog-id=42 op=LOAD Oct 2 19:13:50.180000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:13:50.180000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit: BPF prog-id=43 op=LOAD Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.186000 audit: BPF prog-id=44 op=LOAD Oct 2 19:13:50.186000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:13:50.186000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.187000 audit: BPF prog-id=45 op=LOAD Oct 2 19:13:50.187000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.189000 audit: BPF prog-id=46 op=LOAD Oct 2 19:13:50.189000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.191000 audit: BPF prog-id=47 op=LOAD Oct 2 19:13:50.191000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit: BPF prog-id=48 op=LOAD Oct 2 19:13:50.194000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit: BPF prog-id=49 op=LOAD Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.194000 audit: BPF prog-id=50 op=LOAD Oct 2 19:13:50.194000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:13:50.194000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:50.195000 audit: BPF prog-id=51 op=LOAD Oct 2 19:13:50.195000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:13:50.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:50.216855 systemd[1]: Started kubelet.service. Oct 2 19:13:50.405549 kubelet[2221]: E1002 19:13:50.405450 2221 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:13:50.410754 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:13:50.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:13:50.411127 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:13:50.679883 env[1746]: time="2023-10-02T19:13:50.679747706Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 19:13:51.309938 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3417604356.mount: Deactivated successfully. Oct 2 19:13:54.096769 env[1746]: time="2023-10-02T19:13:54.096701199Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.099602 env[1746]: time="2023-10-02T19:13:54.099540291Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.102791 env[1746]: time="2023-10-02T19:13:54.102729639Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.106013 env[1746]: time="2023-10-02T19:13:54.105937791Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:54.107560 env[1746]: time="2023-10-02T19:13:54.107497419Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c\"" Oct 2 19:13:54.136658 env[1746]: time="2023-10-02T19:13:54.136540311Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 19:13:57.139536 env[1746]: time="2023-10-02T19:13:57.139471062Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.142792 env[1746]: time="2023-10-02T19:13:57.142728078Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.146760 env[1746]: time="2023-10-02T19:13:57.146679978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.150350 env[1746]: time="2023-10-02T19:13:57.150299910Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:57.154871 env[1746]: time="2023-10-02T19:13:57.152593662Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c\"" Oct 2 19:13:57.185826 env[1746]: time="2023-10-02T19:13:57.185763090Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 19:13:59.327809 env[1746]: time="2023-10-02T19:13:59.327741177Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.330727 env[1746]: time="2023-10-02T19:13:59.330665637Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.334295 env[1746]: time="2023-10-02T19:13:59.334244577Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.337132 env[1746]: time="2023-10-02T19:13:59.337084989Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:13:59.338655 env[1746]: time="2023-10-02T19:13:59.338609397Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7\"" Oct 2 19:13:59.368645 env[1746]: time="2023-10-02T19:13:59.368573301Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 19:14:00.548877 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:14:00.549029 kernel: audit: type=1130 audit(1696274040.544:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.545326 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:14:00.545664 systemd[1]: Stopped kubelet.service. Oct 2 19:14:00.548291 systemd[1]: Started kubelet.service. Oct 2 19:14:00.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.567083 kernel: audit: type=1131 audit(1696274040.544:406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.567197 kernel: audit: type=1130 audit(1696274040.547:407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:00.708067 kubelet[2256]: E1002 19:14:00.707970 2256 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:14:00.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:00.716116 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:14:00.716422 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:14:00.725041 kernel: audit: type=1131 audit(1696274040.715:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:00.899616 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2350963442.mount: Deactivated successfully. Oct 2 19:14:01.775231 env[1746]: time="2023-10-02T19:14:01.775143277Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.801940 env[1746]: time="2023-10-02T19:14:01.801873757Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.831202 env[1746]: time="2023-10-02T19:14:01.831129554Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.876565 env[1746]: time="2023-10-02T19:14:01.876479030Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:01.877745 env[1746]: time="2023-10-02T19:14:01.877678502Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa\"" Oct 2 19:14:01.905516 env[1746]: time="2023-10-02T19:14:01.905424110Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:14:02.433370 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2848287232.mount: Deactivated successfully. Oct 2 19:14:02.442691 env[1746]: time="2023-10-02T19:14:02.442610473Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.446940 env[1746]: time="2023-10-02T19:14:02.446864293Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.450515 env[1746]: time="2023-10-02T19:14:02.450455173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.453291 env[1746]: time="2023-10-02T19:14:02.453239209Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:02.454413 env[1746]: time="2023-10-02T19:14:02.454365301Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:14:02.483075 env[1746]: time="2023-10-02T19:14:02.483024433Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 19:14:08.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:08.434163 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:14:08.444044 kernel: audit: type=1131 audit(1696274048.433:409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:08.462000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:14:08.462000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:14:08.468839 kernel: audit: type=1334 audit(1696274048.462:410): prog-id=42 op=UNLOAD Oct 2 19:14:08.468930 kernel: audit: type=1334 audit(1696274048.462:411): prog-id=41 op=UNLOAD Oct 2 19:14:08.462000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:14:08.471736 kernel: audit: type=1334 audit(1696274048.462:412): prog-id=40 op=UNLOAD Oct 2 19:14:09.299413 env[1746]: time="2023-10-02T19:14:09.299332979Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:09.302500 env[1746]: time="2023-10-02T19:14:09.302412935Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:09.306624 env[1746]: time="2023-10-02T19:14:09.306574086Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:09.311067 env[1746]: time="2023-10-02T19:14:09.310997714Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:09.314045 env[1746]: time="2023-10-02T19:14:09.313573200Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 19:14:09.343888 env[1746]: time="2023-10-02T19:14:09.343826421Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:14:09.929373 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount941562747.mount: Deactivated successfully. Oct 2 19:14:10.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.795342 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:14:10.816957 kernel: audit: type=1130 audit(1696274050.794:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.817078 kernel: audit: type=1131 audit(1696274050.794:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.795672 systemd[1]: Stopped kubelet.service. Oct 2 19:14:10.806031 systemd[1]: Started kubelet.service. Oct 2 19:14:10.827837 kernel: audit: type=1130 audit(1696274050.805:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:10.965015 kubelet[2281]: E1002 19:14:10.964926 2281 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 19:14:10.970271 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:14:10.970608 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:14:10.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:10.980015 kernel: audit: type=1131 audit(1696274050.970:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:14:10.985933 env[1746]: time="2023-10-02T19:14:10.985865628Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:10.990138 env[1746]: time="2023-10-02T19:14:10.989344869Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:10.992614 env[1746]: time="2023-10-02T19:14:10.992552466Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:10.995910 env[1746]: time="2023-10-02T19:14:10.995860351Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:10.997574 env[1746]: time="2023-10-02T19:14:10.997509037Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:14:18.963071 systemd[1]: Stopped kubelet.service. Oct 2 19:14:18.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:18.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:18.981179 kernel: audit: type=1130 audit(1696274058.962:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:18.981323 kernel: audit: type=1131 audit(1696274058.962:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:19.008344 systemd[1]: Reloading. Oct 2 19:14:19.180448 /usr/lib/systemd/system-generators/torcx-generator[2373]: time="2023-10-02T19:14:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:14:19.185114 /usr/lib/systemd/system-generators/torcx-generator[2373]: time="2023-10-02T19:14:19Z" level=info msg="torcx already run" Oct 2 19:14:19.433776 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:14:19.434043 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:14:19.476509 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.639319 kernel: audit: type=1400 audit(1696274059.621:419): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.639399 kernel: audit: type=1400 audit(1696274059.621:420): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.642087 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:14:19.642156 kernel: audit: type=1400 audit(1696274059.621:421): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.651729 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:14:19.651876 kernel: audit: type=1400 audit(1696274059.621:422): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.660588 kernel: audit: backlog limit exceeded Oct 2 19:14:19.660676 kernel: audit: type=1400 audit(1696274059.621:423): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit: BPF prog-id=52 op=LOAD Oct 2 19:14:19.628000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit: BPF prog-id=53 op=LOAD Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.628000 audit: BPF prog-id=54 op=LOAD Oct 2 19:14:19.628000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:14:19.628000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit: BPF prog-id=55 op=LOAD Oct 2 19:14:19.638000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit: BPF prog-id=56 op=LOAD Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.638000 audit: BPF prog-id=57 op=LOAD Oct 2 19:14:19.638000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:14:19.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.667000 audit: BPF prog-id=58 op=LOAD Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.671000 audit: BPF prog-id=59 op=LOAD Oct 2 19:14:19.671000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:14:19.671000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit: BPF prog-id=60 op=LOAD Oct 2 19:14:19.673000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.674000 audit: BPF prog-id=61 op=LOAD Oct 2 19:14:19.674000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.677000 audit: BPF prog-id=62 op=LOAD Oct 2 19:14:19.677000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit: BPF prog-id=63 op=LOAD Oct 2 19:14:19.679000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit: BPF prog-id=64 op=LOAD Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.679000 audit: BPF prog-id=65 op=LOAD Oct 2 19:14:19.679000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:14:19.679000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:19.680000 audit: BPF prog-id=66 op=LOAD Oct 2 19:14:19.681000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:14:19.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:19.716645 systemd[1]: Started kubelet.service. Oct 2 19:14:19.850898 kubelet[2429]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:19.850898 kubelet[2429]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:14:19.850898 kubelet[2429]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:19.851520 kubelet[2429]: I1002 19:14:19.851205 2429 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:14:21.401001 kubelet[2429]: I1002 19:14:21.400939 2429 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:14:21.401745 kubelet[2429]: I1002 19:14:21.401720 2429 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:14:21.402233 kubelet[2429]: I1002 19:14:21.402207 2429 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:14:21.412028 kubelet[2429]: I1002 19:14:21.411962 2429 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:14:21.414176 kubelet[2429]: E1002 19:14:21.414122 2429 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.29.254:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.421493 kubelet[2429]: W1002 19:14:21.421459 2429 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:14:21.423063 kubelet[2429]: I1002 19:14:21.423037 2429 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:14:21.423888 kubelet[2429]: I1002 19:14:21.423865 2429 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:14:21.424264 kubelet[2429]: I1002 19:14:21.424234 2429 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:14:21.424660 kubelet[2429]: I1002 19:14:21.424635 2429 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:14:21.424783 kubelet[2429]: I1002 19:14:21.424762 2429 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:14:21.425116 kubelet[2429]: I1002 19:14:21.425094 2429 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:21.426381 kubelet[2429]: I1002 19:14:21.426352 2429 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:14:21.426554 kubelet[2429]: W1002 19:14:21.426476 2429 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.254:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-254&limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.426640 kubelet[2429]: E1002 19:14:21.426569 2429 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.254:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-254&limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.426804 kubelet[2429]: I1002 19:14:21.426782 2429 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:14:21.426946 kubelet[2429]: I1002 19:14:21.426926 2429 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:14:21.428158 kubelet[2429]: I1002 19:14:21.428118 2429 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:14:21.430240 kubelet[2429]: I1002 19:14:21.430190 2429 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:14:21.430815 kubelet[2429]: W1002 19:14:21.430775 2429 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:14:21.432028 kubelet[2429]: I1002 19:14:21.431961 2429 server.go:1232] "Started kubelet" Oct 2 19:14:21.432232 kubelet[2429]: W1002 19:14:21.432164 2429 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.254:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.432311 kubelet[2429]: E1002 19:14:21.432243 2429 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.254:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.438000 audit[2429]: AVC avc: denied { mac_admin } for pid=2429 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:21.438000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:21.438000 audit[2429]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000df49f0 a1=4000dcc7c8 a2=4000df49c0 a3=25 items=0 ppid=1 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.438000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:21.438000 audit[2429]: AVC avc: denied { mac_admin } for pid=2429 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:21.438000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:21.438000 audit[2429]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40003a7f00 a1=4000dcc7e0 a2=4000df4a80 a3=25 items=0 ppid=1 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.438000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:21.440764 kubelet[2429]: I1002 19:14:21.439884 2429 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:14:21.440764 kubelet[2429]: I1002 19:14:21.439965 2429 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:14:21.440764 kubelet[2429]: I1002 19:14:21.440113 2429 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:14:21.442513 kubelet[2429]: E1002 19:14:21.442328 2429 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-254.178a6045895be28b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-254", UID:"ip-172-31-29-254", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-254"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 14, 21, 431923339, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 14, 21, 431923339, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-29-254"}': 'Post "https://172.31.29.254:6443/api/v1/namespaces/default/events": dial tcp 172.31.29.254:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:14:21.445863 kubelet[2429]: I1002 19:14:21.445765 2429 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:14:21.448483 kubelet[2429]: I1002 19:14:21.448427 2429 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:14:21.449110 kubelet[2429]: I1002 19:14:21.449082 2429 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:14:21.449664 kubelet[2429]: I1002 19:14:21.449636 2429 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:14:21.450796 kubelet[2429]: I1002 19:14:21.450762 2429 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:14:21.453065 kubelet[2429]: E1002 19:14:21.453028 2429 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.254:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-254?timeout=10s\": dial tcp 172.31.29.254:6443: connect: connection refused" interval="200ms" Oct 2 19:14:21.453000 audit[2439]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:21.453000 audit[2439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff39a0460 a2=0 a3=1 items=0 ppid=2429 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.453000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:14:21.456304 kubelet[2429]: E1002 19:14:21.456271 2429 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:14:21.456537 kubelet[2429]: E1002 19:14:21.456513 2429 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:14:21.457306 kubelet[2429]: W1002 19:14:21.457268 2429 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.29.254:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.457525 kubelet[2429]: E1002 19:14:21.457500 2429 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.29.254:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.458048 kubelet[2429]: I1002 19:14:21.458017 2429 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:14:21.458217 kubelet[2429]: I1002 19:14:21.458194 2429 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:14:21.460000 audit[2440]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:21.460000 audit[2440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8037530 a2=0 a3=1 items=0 ppid=2429 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.460000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:14:21.482000 audit[2443]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:21.482000 audit[2443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffed614220 a2=0 a3=1 items=0 ppid=2429 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.482000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:21.489000 audit[2448]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:21.489000 audit[2448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc6f76740 a2=0 a3=1 items=0 ppid=2429 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.489000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:21.509044 kubelet[2429]: I1002 19:14:21.508973 2429 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:14:21.509274 kubelet[2429]: I1002 19:14:21.509253 2429 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:14:21.509399 kubelet[2429]: I1002 19:14:21.509379 2429 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:21.512245 kubelet[2429]: I1002 19:14:21.512207 2429 policy_none.go:49] "None policy: Start" Oct 2 19:14:21.513632 kubelet[2429]: I1002 19:14:21.513603 2429 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:14:21.513840 kubelet[2429]: I1002 19:14:21.513818 2429 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:14:21.517000 audit[2452]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:21.517000 audit[2452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffea08a210 a2=0 a3=1 items=0 ppid=2429 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.517000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:14:21.519308 kubelet[2429]: I1002 19:14:21.519271 2429 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:14:21.521000 audit[2453]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2453 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:21.521000 audit[2453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffbb49bc0 a2=0 a3=1 items=0 ppid=2429 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:14:21.523099 kubelet[2429]: I1002 19:14:21.522959 2429 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:14:21.523099 kubelet[2429]: I1002 19:14:21.523085 2429 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:14:21.523231 kubelet[2429]: I1002 19:14:21.523120 2429 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:14:21.523231 kubelet[2429]: E1002 19:14:21.523199 2429 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:14:21.523000 audit[2454]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:21.523000 audit[2454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe353eb80 a2=0 a3=1 items=0 ppid=2429 pid=2454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.523000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:14:21.525000 audit[2455]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2455 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:21.525000 audit[2455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd499af50 a2=0 a3=1 items=0 ppid=2429 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.525000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:14:21.528000 audit[2456]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:21.528000 audit[2456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb8d9f50 a2=0 a3=1 items=0 ppid=2429 pid=2456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.528000 audit[2457]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2457 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:21.528000 audit[2457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff86aa000 a2=0 a3=1 items=0 ppid=2429 pid=2457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:14:21.528000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:14:21.531000 audit[2458]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=2458 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:21.531000 audit[2458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdfd22ed0 a2=0 a3=1 items=0 ppid=2429 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.531000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:14:21.532000 audit[2459]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:21.532000 audit[2459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe23b6eb0 a2=0 a3=1 items=0 ppid=2429 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.532000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:14:21.534911 kubelet[2429]: W1002 19:14:21.534844 2429 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.254:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.535164 kubelet[2429]: E1002 19:14:21.535142 2429 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.254:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:21.540724 systemd[1]: Created slice kubepods.slice. Oct 2 19:14:21.550546 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:14:21.552835 kubelet[2429]: I1002 19:14:21.552786 2429 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-254" Oct 2 19:14:21.553539 kubelet[2429]: E1002 19:14:21.553499 2429 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.254:6443/api/v1/nodes\": dial tcp 172.31.29.254:6443: connect: connection refused" node="ip-172-31-29-254" Oct 2 19:14:21.564858 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:14:21.567724 kubelet[2429]: I1002 19:14:21.567676 2429 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:14:21.566000 audit[2429]: AVC avc: denied { mac_admin } for pid=2429 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:21.566000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:21.566000 audit[2429]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ccb290 a1=4000f92288 a2=4000ccb260 a3=25 items=0 ppid=1 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:21.566000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:21.568255 kubelet[2429]: I1002 19:14:21.567787 2429 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:14:21.568255 kubelet[2429]: I1002 19:14:21.568118 2429 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:14:21.571071 kubelet[2429]: E1002 19:14:21.571015 2429 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-29-254\" not found" Oct 2 19:14:21.623910 kubelet[2429]: I1002 19:14:21.623876 2429 topology_manager.go:215] "Topology Admit Handler" podUID="2cb60d30701d06248a3ac7be31231756" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:21.626593 kubelet[2429]: I1002 19:14:21.626540 2429 topology_manager.go:215] "Topology Admit Handler" podUID="249810b35df2c3008873ad0094ada0ae" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-29-254" Oct 2 19:14:21.628741 kubelet[2429]: I1002 19:14:21.628708 2429 topology_manager.go:215] "Topology Admit Handler" podUID="1013fcdec14173c01f77fedccc974a7e" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-29-254" Oct 2 19:14:21.638911 systemd[1]: Created slice kubepods-burstable-pod2cb60d30701d06248a3ac7be31231756.slice. Oct 2 19:14:21.655038 kubelet[2429]: E1002 19:14:21.653879 2429 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.254:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-254?timeout=10s\": dial tcp 172.31.29.254:6443: connect: connection refused" interval="400ms" Oct 2 19:14:21.654183 systemd[1]: Created slice kubepods-burstable-pod249810b35df2c3008873ad0094ada0ae.slice. Oct 2 19:14:21.678144 systemd[1]: Created slice kubepods-burstable-pod1013fcdec14173c01f77fedccc974a7e.slice. Oct 2 19:14:21.756406 kubelet[2429]: I1002 19:14:21.756353 2429 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-254" Oct 2 19:14:21.756901 kubelet[2429]: E1002 19:14:21.756875 2429 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.254:6443/api/v1/nodes\": dial tcp 172.31.29.254:6443: connect: connection refused" node="ip-172-31-29-254" Oct 2 19:14:21.760217 kubelet[2429]: I1002 19:14:21.760188 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:21.760430 kubelet[2429]: I1002 19:14:21.760408 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1013fcdec14173c01f77fedccc974a7e-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-254\" (UID: \"1013fcdec14173c01f77fedccc974a7e\") " pod="kube-system/kube-apiserver-ip-172-31-29-254" Oct 2 19:14:21.760609 kubelet[2429]: I1002 19:14:21.760588 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:21.760757 kubelet[2429]: I1002 19:14:21.760737 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:21.760912 kubelet[2429]: I1002 19:14:21.760889 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:21.761138 kubelet[2429]: I1002 19:14:21.761116 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/249810b35df2c3008873ad0094ada0ae-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-254\" (UID: \"249810b35df2c3008873ad0094ada0ae\") " pod="kube-system/kube-scheduler-ip-172-31-29-254" Oct 2 19:14:21.761309 kubelet[2429]: I1002 19:14:21.761288 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1013fcdec14173c01f77fedccc974a7e-ca-certs\") pod \"kube-apiserver-ip-172-31-29-254\" (UID: \"1013fcdec14173c01f77fedccc974a7e\") " pod="kube-system/kube-apiserver-ip-172-31-29-254" Oct 2 19:14:21.761459 kubelet[2429]: I1002 19:14:21.761439 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1013fcdec14173c01f77fedccc974a7e-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-254\" (UID: \"1013fcdec14173c01f77fedccc974a7e\") " pod="kube-system/kube-apiserver-ip-172-31-29-254" Oct 2 19:14:21.761606 kubelet[2429]: I1002 19:14:21.761586 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:21.950209 env[1746]: time="2023-10-02T19:14:21.950068599Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-254,Uid:2cb60d30701d06248a3ac7be31231756,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:21.965568 env[1746]: time="2023-10-02T19:14:21.965492152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-254,Uid:249810b35df2c3008873ad0094ada0ae,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:21.983188 env[1746]: time="2023-10-02T19:14:21.983112499Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-254,Uid:1013fcdec14173c01f77fedccc974a7e,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:22.056452 kubelet[2429]: E1002 19:14:22.056400 2429 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.254:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-254?timeout=10s\": dial tcp 172.31.29.254:6443: connect: connection refused" interval="800ms" Oct 2 19:14:22.159556 kubelet[2429]: I1002 19:14:22.159049 2429 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-254" Oct 2 19:14:22.159556 kubelet[2429]: E1002 19:14:22.159488 2429 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.254:6443/api/v1/nodes\": dial tcp 172.31.29.254:6443: connect: connection refused" node="ip-172-31-29-254" Oct 2 19:14:22.452356 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1248071596.mount: Deactivated successfully. Oct 2 19:14:22.463718 env[1746]: time="2023-10-02T19:14:22.463661599Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.465522 env[1746]: time="2023-10-02T19:14:22.465478499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.469829 env[1746]: time="2023-10-02T19:14:22.469776105Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.471973 env[1746]: time="2023-10-02T19:14:22.471920996Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.476215 env[1746]: time="2023-10-02T19:14:22.476167769Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.478934 env[1746]: time="2023-10-02T19:14:22.478880501Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.480404 env[1746]: time="2023-10-02T19:14:22.480352513Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.481929 env[1746]: time="2023-10-02T19:14:22.481885858Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.489788 env[1746]: time="2023-10-02T19:14:22.489723914Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.491267 env[1746]: time="2023-10-02T19:14:22.491216003Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.492803 env[1746]: time="2023-10-02T19:14:22.492736484Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.497532 env[1746]: time="2023-10-02T19:14:22.497279663Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:22.510394 kubelet[2429]: W1002 19:14:22.510218 2429 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.254:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-254&limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:22.510394 kubelet[2429]: E1002 19:14:22.510326 2429 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.254:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-254&limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:22.566587 env[1746]: time="2023-10-02T19:14:22.566461527Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:22.566777 env[1746]: time="2023-10-02T19:14:22.566537872Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:22.566777 env[1746]: time="2023-10-02T19:14:22.566566589Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:22.567207 env[1746]: time="2023-10-02T19:14:22.567118169Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b1b5ee46615071afb4d32fe46eeb6c36717e7ca00e00340adafbbf648faefff9 pid=2468 runtime=io.containerd.runc.v2 Oct 2 19:14:22.577019 kubelet[2429]: W1002 19:14:22.576931 2429 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.254:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:22.577290 kubelet[2429]: E1002 19:14:22.577251 2429 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.254:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:22.601057 env[1746]: time="2023-10-02T19:14:22.600915757Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:22.601263 env[1746]: time="2023-10-02T19:14:22.601022080Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:22.601263 env[1746]: time="2023-10-02T19:14:22.601049380Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:22.601673 env[1746]: time="2023-10-02T19:14:22.601525539Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:22.601934 env[1746]: time="2023-10-02T19:14:22.601870426Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:22.602122 env[1746]: time="2023-10-02T19:14:22.601890755Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9833d0a62c041d9f6cdbb0bfabd002cc7e1c0d9c3fa504cb04e5ef95400a231f pid=2493 runtime=io.containerd.runc.v2 Oct 2 19:14:22.602382 env[1746]: time="2023-10-02T19:14:22.602316044Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:22.603551 env[1746]: time="2023-10-02T19:14:22.603441488Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3861ebdd20fd3b3ee9051c944dfc290fed33105767b2c7e1d3a5dfed6bb43c8d pid=2495 runtime=io.containerd.runc.v2 Oct 2 19:14:22.619912 systemd[1]: Started cri-containerd-b1b5ee46615071afb4d32fe46eeb6c36717e7ca00e00340adafbbf648faefff9.scope. Oct 2 19:14:22.663521 systemd[1]: Started cri-containerd-3861ebdd20fd3b3ee9051c944dfc290fed33105767b2c7e1d3a5dfed6bb43c8d.scope. Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.674000 audit: BPF prog-id=67 op=LOAD Oct 2 19:14:22.675000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.675000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2468 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623565653436363135303731616662346433326665343665656236 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2468 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623565653436363135303731616662346433326665343665656236 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.676000 audit: BPF prog-id=68 op=LOAD Oct 2 19:14:22.676000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2468 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623565653436363135303731616662346433326665343665656236 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.677000 audit: BPF prog-id=69 op=LOAD Oct 2 19:14:22.677000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2468 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623565653436363135303731616662346433326665343665656236 Oct 2 19:14:22.678000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:14:22.679000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.679000 audit: BPF prog-id=70 op=LOAD Oct 2 19:14:22.679000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2468 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623565653436363135303731616662346433326665343665656236 Oct 2 19:14:22.701176 systemd[1]: Started cri-containerd-9833d0a62c041d9f6cdbb0bfabd002cc7e1c0d9c3fa504cb04e5ef95400a231f.scope. Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.728000 audit: BPF prog-id=71 op=LOAD Oct 2 19:14:22.730000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.730000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2495 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363165626464323066643362336565393035316339343464666332 Oct 2 19:14:22.730000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.730000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2495 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363165626464323066643362336565393035316339343464666332 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.731000 audit: BPF prog-id=72 op=LOAD Oct 2 19:14:22.731000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2495 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363165626464323066643362336565393035316339343464666332 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.732000 audit: BPF prog-id=73 op=LOAD Oct 2 19:14:22.732000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2495 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363165626464323066643362336565393035316339343464666332 Oct 2 19:14:22.733000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:14:22.734000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { perfmon } for pid=2522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit[2522]: AVC avc: denied { bpf } for pid=2522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.734000 audit: BPF prog-id=74 op=LOAD Oct 2 19:14:22.734000 audit[2522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2495 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338363165626464323066643362336565393035316339343464666332 Oct 2 19:14:22.790137 env[1746]: time="2023-10-02T19:14:22.790055679Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-254,Uid:1013fcdec14173c01f77fedccc974a7e,Namespace:kube-system,Attempt:0,} returns sandbox id \"b1b5ee46615071afb4d32fe46eeb6c36717e7ca00e00340adafbbf648faefff9\"" Oct 2 19:14:22.799402 env[1746]: time="2023-10-02T19:14:22.799329987Z" level=info msg="CreateContainer within sandbox \"b1b5ee46615071afb4d32fe46eeb6c36717e7ca00e00340adafbbf648faefff9\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.804000 audit: BPF prog-id=75 op=LOAD Oct 2 19:14:22.806000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.806000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001cdb38 a2=10 a3=0 items=0 ppid=2493 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938333364306136326330343164396636636462623062666162643030 Oct 2 19:14:22.806000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.806000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001cd5a0 a2=3c a3=0 items=0 ppid=2493 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938333364306136326330343164396636636462623062666162643030 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.807000 audit: BPF prog-id=76 op=LOAD Oct 2 19:14:22.807000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001cd8e0 a2=78 a3=0 items=0 ppid=2493 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938333364306136326330343164396636636462623062666162643030 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.811000 audit: BPF prog-id=77 op=LOAD Oct 2 19:14:22.811000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001cd670 a2=78 a3=0 items=0 ppid=2493 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938333364306136326330343164396636636462623062666162643030 Oct 2 19:14:22.814000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:14:22.814000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:22.814000 audit: BPF prog-id=78 op=LOAD Oct 2 19:14:22.814000 audit[2524]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001cdb40 a2=78 a3=0 items=0 ppid=2493 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938333364306136326330343164396636636462623062666162643030 Oct 2 19:14:22.838469 env[1746]: time="2023-10-02T19:14:22.838395858Z" level=info msg="CreateContainer within sandbox \"b1b5ee46615071afb4d32fe46eeb6c36717e7ca00e00340adafbbf648faefff9\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"5da991ee7d53784fce102077069cdc3623196c0eac951da1b8844d350badb437\"" Oct 2 19:14:22.840729 env[1746]: time="2023-10-02T19:14:22.840667268Z" level=info msg="StartContainer for \"5da991ee7d53784fce102077069cdc3623196c0eac951da1b8844d350badb437\"" Oct 2 19:14:22.844450 env[1746]: time="2023-10-02T19:14:22.844397370Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-254,Uid:249810b35df2c3008873ad0094ada0ae,Namespace:kube-system,Attempt:0,} returns sandbox id \"3861ebdd20fd3b3ee9051c944dfc290fed33105767b2c7e1d3a5dfed6bb43c8d\"" Oct 2 19:14:22.853194 env[1746]: time="2023-10-02T19:14:22.853116953Z" level=info msg="CreateContainer within sandbox \"3861ebdd20fd3b3ee9051c944dfc290fed33105767b2c7e1d3a5dfed6bb43c8d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:14:22.857825 kubelet[2429]: E1002 19:14:22.857773 2429 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.29.254:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-254?timeout=10s\": dial tcp 172.31.29.254:6443: connect: connection refused" interval="1.6s" Oct 2 19:14:22.896170 env[1746]: time="2023-10-02T19:14:22.896100310Z" level=info msg="CreateContainer within sandbox \"3861ebdd20fd3b3ee9051c944dfc290fed33105767b2c7e1d3a5dfed6bb43c8d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963\"" Oct 2 19:14:22.897347 env[1746]: time="2023-10-02T19:14:22.897284784Z" level=info msg="StartContainer for \"9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963\"" Oct 2 19:14:22.901356 env[1746]: time="2023-10-02T19:14:22.901296016Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-254,Uid:2cb60d30701d06248a3ac7be31231756,Namespace:kube-system,Attempt:0,} returns sandbox id \"9833d0a62c041d9f6cdbb0bfabd002cc7e1c0d9c3fa504cb04e5ef95400a231f\"" Oct 2 19:14:22.905316 env[1746]: time="2023-10-02T19:14:22.905249898Z" level=info msg="CreateContainer within sandbox \"9833d0a62c041d9f6cdbb0bfabd002cc7e1c0d9c3fa504cb04e5ef95400a231f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:14:22.912017 kubelet[2429]: W1002 19:14:22.911871 2429 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.29.254:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:22.912017 kubelet[2429]: E1002 19:14:22.912017 2429 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.29.254:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:22.932102 systemd[1]: Started cri-containerd-5da991ee7d53784fce102077069cdc3623196c0eac951da1b8844d350badb437.scope. Oct 2 19:14:22.941011 env[1746]: time="2023-10-02T19:14:22.936924112Z" level=info msg="CreateContainer within sandbox \"9833d0a62c041d9f6cdbb0bfabd002cc7e1c0d9c3fa504cb04e5ef95400a231f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296\"" Oct 2 19:14:22.941011 env[1746]: time="2023-10-02T19:14:22.939013742Z" level=info msg="StartContainer for \"a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296\"" Oct 2 19:14:22.961551 kubelet[2429]: I1002 19:14:22.961441 2429 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-254" Oct 2 19:14:22.968308 kubelet[2429]: E1002 19:14:22.967798 2429 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.254:6443/api/v1/nodes\": dial tcp 172.31.29.254:6443: connect: connection refused" node="ip-172-31-29-254" Oct 2 19:14:22.968308 kubelet[2429]: W1002 19:14:22.968272 2429 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.254:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:22.968538 kubelet[2429]: E1002 19:14:22.968351 2429 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.254:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:23.003206 systemd[1]: Started cri-containerd-9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963.scope. Oct 2 19:14:23.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.012000 audit: BPF prog-id=79 op=LOAD Oct 2 19:14:23.013000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.013000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2468 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613939316565376435333738346663653130323037373036396364 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2468 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613939316565376435333738346663653130323037373036396364 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.014000 audit: BPF prog-id=80 op=LOAD Oct 2 19:14:23.014000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2468 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613939316565376435333738346663653130323037373036396364 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.016000 audit: BPF prog-id=81 op=LOAD Oct 2 19:14:23.016000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2468 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613939316565376435333738346663653130323037373036396364 Oct 2 19:14:23.017000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:14:23.017000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.017000 audit: BPF prog-id=82 op=LOAD Oct 2 19:14:23.017000 audit[2587]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2468 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613939316565376435333738346663653130323037373036396364 Oct 2 19:14:23.023058 update_engine[1730]: I1002 19:14:23.021553 1730 update_attempter.cc:505] Updating boot flags... Oct 2 19:14:23.070737 systemd[1]: Started cri-containerd-a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296.scope. Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.119000 audit: BPF prog-id=83 op=LOAD Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2495 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965356437346536336235366439393263366339306663313364376136 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2495 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965356437346536336235366439393263366339306663313364376136 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit: BPF prog-id=84 op=LOAD Oct 2 19:14:23.123000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2495 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965356437346536336235366439393263366339306663313364376136 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit: BPF prog-id=85 op=LOAD Oct 2 19:14:23.123000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2495 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965356437346536336235366439393263366339306663313364376136 Oct 2 19:14:23.123000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:14:23.123000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.123000 audit: BPF prog-id=86 op=LOAD Oct 2 19:14:23.123000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2495 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965356437346536336235366439393263366339306663313364376136 Oct 2 19:14:23.157487 env[1746]: time="2023-10-02T19:14:23.157267840Z" level=info msg="StartContainer for \"5da991ee7d53784fce102077069cdc3623196c0eac951da1b8844d350badb437\" returns successfully" Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.198000 audit: BPF prog-id=87 op=LOAD Oct 2 19:14:23.199000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.199000 audit[2630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2493 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303231353832343135353238303138303932306266616463333666 Oct 2 19:14:23.199000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.199000 audit[2630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2493 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303231353832343135353238303138303932306266616463333666 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit: BPF prog-id=88 op=LOAD Oct 2 19:14:23.200000 audit[2630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2493 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303231353832343135353238303138303932306266616463333666 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit: BPF prog-id=89 op=LOAD Oct 2 19:14:23.200000 audit[2630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2493 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303231353832343135353238303138303932306266616463333666 Oct 2 19:14:23.200000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:14:23.200000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:23.200000 audit: BPF prog-id=90 op=LOAD Oct 2 19:14:23.200000 audit[2630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2493 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303231353832343135353238303138303932306266616463333666 Oct 2 19:14:23.324110 env[1746]: time="2023-10-02T19:14:23.324028160Z" level=info msg="StartContainer for \"9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963\" returns successfully" Oct 2 19:14:23.356401 env[1746]: time="2023-10-02T19:14:23.356220585Z" level=info msg="StartContainer for \"a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296\" returns successfully" Oct 2 19:14:23.465292 kubelet[2429]: E1002 19:14:23.465212 2429 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.29.254:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.29.254:6443: connect: connection refused Oct 2 19:14:24.570427 kubelet[2429]: I1002 19:14:24.570393 2429 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-254" Oct 2 19:14:26.391000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.394307 kernel: kauditd_printk_skb: 569 callbacks suppressed Oct 2 19:14:26.394439 kernel: audit: type=1400 audit(1696274066.391:708): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.392000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.417198 kernel: audit: type=1400 audit(1696274066.392:709): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:26.392000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400040e1e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:26.434126 kernel: audit: type=1300 audit(1696274066.392:709): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400040e1e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:26.392000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:26.448299 kernel: audit: type=1327 audit(1696274066.392:709): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:26.391000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40009a20c0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:26.460529 kernel: audit: type=1300 audit(1696274066.391:708): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40009a20c0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:26.391000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:26.470840 kernel: audit: type=1327 audit(1696274066.391:708): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:27.106000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.106000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4004f833e0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:14:27.132955 kernel: audit: type=1400 audit(1696274067.106:710): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.133115 kernel: audit: type=1300 audit(1696274067.106:710): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4004f833e0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:14:27.106000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:27.147123 kernel: audit: type=1327 audit(1696274067.106:710): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:27.106000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.159674 kernel: audit: type=1400 audit(1696274067.106:711): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.106000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400740af00 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:14:27.106000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:27.109000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=4808 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.109000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400740af90 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:14:27.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:27.126000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=4814 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.126000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=400755a180 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:14:27.126000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:27.145000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.145000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=4005c6b360 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:14:27.145000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:27.146000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:27.146000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=67 a1=4003f6a330 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:14:27.146000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:14:27.435262 kubelet[2429]: I1002 19:14:27.435105 2429 apiserver.go:52] "Watching apiserver" Oct 2 19:14:27.503852 kubelet[2429]: E1002 19:14:27.503787 2429 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-29-254\" not found" node="ip-172-31-29-254" Oct 2 19:14:27.542010 kubelet[2429]: I1002 19:14:27.541949 2429 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-29-254" Oct 2 19:14:27.559181 kubelet[2429]: I1002 19:14:27.559122 2429 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:14:27.594398 kubelet[2429]: E1002 19:14:27.594205 2429 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-254.178a6045895be28b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-254", UID:"ip-172-31-29-254", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-254"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 14, 21, 431923339, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 14, 21, 431923339, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-29-254"}': 'namespaces "default" not found' (will not retry!) Oct 2 19:14:27.662117 kubelet[2429]: E1002 19:14:27.661902 2429 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-254.178a60458ad2cab9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-254", UID:"ip-172-31-29-254", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-254"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 14, 21, 456493241, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 14, 21, 456493241, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-29-254"}': 'namespaces "default" not found' (will not retry!) Oct 2 19:14:30.408958 systemd[1]: Reloading. Oct 2 19:14:30.564661 /usr/lib/systemd/system-generators/torcx-generator[2816]: time="2023-10-02T19:14:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:14:30.569411 /usr/lib/systemd/system-generators/torcx-generator[2816]: time="2023-10-02T19:14:30Z" level=info msg="torcx already run" Oct 2 19:14:30.858800 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:14:30.858842 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:14:30.903510 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.089000 audit: BPF prog-id=91 op=LOAD Oct 2 19:14:31.090000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.093000 audit: BPF prog-id=92 op=LOAD Oct 2 19:14:31.093000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:14:31.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit: BPF prog-id=93 op=LOAD Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.094000 audit: BPF prog-id=94 op=LOAD Oct 2 19:14:31.094000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:14:31.094000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:14:31.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit: BPF prog-id=95 op=LOAD Oct 2 19:14:31.099000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit: BPF prog-id=96 op=LOAD Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.100000 audit: BPF prog-id=97 op=LOAD Oct 2 19:14:31.100000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:14:31.100000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.102000 audit: BPF prog-id=98 op=LOAD Oct 2 19:14:31.102000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.105000 audit: BPF prog-id=99 op=LOAD Oct 2 19:14:31.105000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.114000 audit: BPF prog-id=100 op=LOAD Oct 2 19:14:31.114000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.117000 audit: BPF prog-id=101 op=LOAD Oct 2 19:14:31.117000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit: BPF prog-id=102 op=LOAD Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.118000 audit: BPF prog-id=103 op=LOAD Oct 2 19:14:31.118000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:14:31.118000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.119000 audit: BPF prog-id=104 op=LOAD Oct 2 19:14:31.119000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.121000 audit: BPF prog-id=105 op=LOAD Oct 2 19:14:31.121000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:14:31.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.122000 audit: BPF prog-id=106 op=LOAD Oct 2 19:14:31.122000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.125000 audit: BPF prog-id=107 op=LOAD Oct 2 19:14:31.125000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.127000 audit: BPF prog-id=108 op=LOAD Oct 2 19:14:31.128000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit: BPF prog-id=109 op=LOAD Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.128000 audit: BPF prog-id=110 op=LOAD Oct 2 19:14:31.128000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:14:31.128000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.129000 audit: BPF prog-id=111 op=LOAD Oct 2 19:14:31.129000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:14:31.170288 kubelet[2429]: I1002 19:14:31.169771 2429 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:14:31.170294 systemd[1]: Stopping kubelet.service... Oct 2 19:14:31.196380 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:14:31.196815 systemd[1]: Stopped kubelet.service. Oct 2 19:14:31.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:31.196925 systemd[1]: kubelet.service: Consumed 2.328s CPU time. Oct 2 19:14:31.202954 systemd[1]: Started kubelet.service. Oct 2 19:14:31.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:31.369000 audit[2878]: USER_ACCT pid=2878 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:31.370000 audit[2878]: CRED_REFR pid=2878 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:31.371162 sudo[2878]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:14:31.372668 sudo[2878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:14:31.378000 audit[2878]: USER_START pid=2878 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:31.432003 kubelet[2868]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:31.432505 kubelet[2868]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:14:31.432619 kubelet[2868]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:14:31.433003 kubelet[2868]: I1002 19:14:31.432921 2868 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:14:31.460122 kubelet[2868]: I1002 19:14:31.460068 2868 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 19:14:31.460350 kubelet[2868]: I1002 19:14:31.460326 2868 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:14:31.460853 kubelet[2868]: I1002 19:14:31.460826 2868 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 19:14:31.464177 kubelet[2868]: I1002 19:14:31.464140 2868 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:14:31.468286 kubelet[2868]: I1002 19:14:31.468230 2868 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:14:31.478836 kubelet[2868]: W1002 19:14:31.478801 2868 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:14:31.480374 kubelet[2868]: I1002 19:14:31.480340 2868 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:14:31.481087 kubelet[2868]: I1002 19:14:31.481060 2868 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:14:31.481740 kubelet[2868]: I1002 19:14:31.481705 2868 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 19:14:31.482079 kubelet[2868]: I1002 19:14:31.482055 2868 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 19:14:31.482196 kubelet[2868]: I1002 19:14:31.482172 2868 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 19:14:31.482353 kubelet[2868]: I1002 19:14:31.482333 2868 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:31.482954 kubelet[2868]: I1002 19:14:31.482932 2868 kubelet.go:393] "Attempting to sync node with API server" Oct 2 19:14:31.483172 kubelet[2868]: I1002 19:14:31.483150 2868 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:14:31.483350 kubelet[2868]: I1002 19:14:31.483329 2868 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:14:31.483555 kubelet[2868]: I1002 19:14:31.483531 2868 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:14:31.486760 kubelet[2868]: I1002 19:14:31.486723 2868 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:14:31.488312 kubelet[2868]: I1002 19:14:31.488284 2868 server.go:1232] "Started kubelet" Oct 2 19:14:31.502106 kernel: kauditd_printk_skb: 263 callbacks suppressed Oct 2 19:14:31.502222 kernel: audit: type=1400 audit(1696274071.491:965): avc: denied { mac_admin } for pid=2868 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.491000 audit[2868]: AVC avc: denied { mac_admin } for pid=2868 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.491000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:31.506590 kernel: audit: type=1401 audit(1696274071.491:965): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:31.509080 kubelet[2868]: I1002 19:14:31.509043 2868 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:14:31.509321 kubelet[2868]: I1002 19:14:31.509299 2868 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:14:31.509454 kubelet[2868]: I1002 19:14:31.509433 2868 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:14:31.526857 kernel: audit: type=1300 audit(1696274071.491:965): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bfc900 a1=4000b33338 a2=4000bfc8d0 a3=25 items=0 ppid=1 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:31.491000 audit[2868]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bfc900 a1=4000b33338 a2=4000bfc8d0 a3=25 items=0 ppid=1 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:31.527789 kubelet[2868]: I1002 19:14:31.527754 2868 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:14:31.529201 kubelet[2868]: I1002 19:14:31.529169 2868 server.go:462] "Adding debug handlers to kubelet server" Oct 2 19:14:31.543665 kubelet[2868]: I1002 19:14:31.543627 2868 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:14:31.544170 kubelet[2868]: I1002 19:14:31.544146 2868 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 19:14:31.562009 kernel: audit: type=1327 audit(1696274071.491:965): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:31.491000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:31.562404 kubelet[2868]: I1002 19:14:31.562366 2868 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 19:14:31.563221 kubelet[2868]: I1002 19:14:31.563194 2868 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:14:31.563639 kubelet[2868]: I1002 19:14:31.563617 2868 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 19:14:31.578249 kernel: audit: type=1400 audit(1696274071.508:966): avc: denied { mac_admin } for pid=2868 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.508000 audit[2868]: AVC avc: denied { mac_admin } for pid=2868 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.587781 kernel: audit: type=1401 audit(1696274071.508:966): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:31.508000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:31.613015 kernel: audit: type=1300 audit(1696274071.508:966): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bb8880 a1=4000b33350 a2=4000bfc990 a3=25 items=0 ppid=1 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:31.508000 audit[2868]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bb8880 a1=4000b33350 a2=4000bfc990 a3=25 items=0 ppid=1 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:31.613253 kubelet[2868]: E1002 19:14:31.597609 2868 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:14:31.613253 kubelet[2868]: E1002 19:14:31.597686 2868 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:14:31.632442 kernel: audit: type=1327 audit(1696274071.508:966): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:31.508000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:31.724629 kubelet[2868]: E1002 19:14:31.724571 2868 container_manager_linux.go:881] "Unable to get rootfs data from cAdvisor interface" err="unable to find data in memory cache" Oct 2 19:14:31.739275 kubelet[2868]: I1002 19:14:31.739239 2868 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 19:14:31.755818 kubelet[2868]: I1002 19:14:31.754805 2868 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 19:14:31.755818 kubelet[2868]: I1002 19:14:31.754950 2868 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 19:14:31.755818 kubelet[2868]: I1002 19:14:31.755019 2868 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 19:14:31.755818 kubelet[2868]: E1002 19:14:31.755112 2868 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:14:31.756317 kubelet[2868]: I1002 19:14:31.756282 2868 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-254" Oct 2 19:14:31.799182 kubelet[2868]: I1002 19:14:31.797606 2868 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-29-254" Oct 2 19:14:31.799182 kubelet[2868]: I1002 19:14:31.797752 2868 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-29-254" Oct 2 19:14:31.856060 kubelet[2868]: E1002 19:14:31.855310 2868 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:14:31.965598 kubelet[2868]: I1002 19:14:31.964866 2868 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:14:31.965598 kubelet[2868]: I1002 19:14:31.964907 2868 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:14:31.965598 kubelet[2868]: I1002 19:14:31.965176 2868 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:14:31.965598 kubelet[2868]: I1002 19:14:31.965532 2868 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:14:31.965598 kubelet[2868]: I1002 19:14:31.965577 2868 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 19:14:31.965598 kubelet[2868]: I1002 19:14:31.965604 2868 policy_none.go:49] "None policy: Start" Oct 2 19:14:31.969045 kubelet[2868]: I1002 19:14:31.969009 2868 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:14:31.969263 kubelet[2868]: I1002 19:14:31.969240 2868 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:14:31.969607 kubelet[2868]: I1002 19:14:31.969587 2868 state_mem.go:75] "Updated machine memory state" Oct 2 19:14:31.985284 kubelet[2868]: I1002 19:14:31.985221 2868 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:14:31.984000 audit[2868]: AVC avc: denied { mac_admin } for pid=2868 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.993501 kubelet[2868]: I1002 19:14:31.985482 2868 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:14:31.993501 kubelet[2868]: I1002 19:14:31.989020 2868 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:14:31.984000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:31.998513 kernel: audit: type=1400 audit(1696274071.984:967): avc: denied { mac_admin } for pid=2868 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:31.984000 audit[2868]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400110d4a0 a1=40011730e0 a2=400110d470 a3=25 items=0 ppid=1 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:31.984000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:14:32.005277 kernel: audit: type=1401 audit(1696274071.984:967): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:14:32.065257 kubelet[2868]: I1002 19:14:32.065188 2868 topology_manager.go:215] "Topology Admit Handler" podUID="1013fcdec14173c01f77fedccc974a7e" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-29-254" Oct 2 19:14:32.065452 kubelet[2868]: I1002 19:14:32.065359 2868 topology_manager.go:215] "Topology Admit Handler" podUID="2cb60d30701d06248a3ac7be31231756" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:32.065452 kubelet[2868]: I1002 19:14:32.065432 2868 topology_manager.go:215] "Topology Admit Handler" podUID="249810b35df2c3008873ad0094ada0ae" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-29-254" Oct 2 19:14:32.079284 kubelet[2868]: I1002 19:14:32.079217 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:32.079476 kubelet[2868]: I1002 19:14:32.079308 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:32.079476 kubelet[2868]: I1002 19:14:32.079360 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1013fcdec14173c01f77fedccc974a7e-ca-certs\") pod \"kube-apiserver-ip-172-31-29-254\" (UID: \"1013fcdec14173c01f77fedccc974a7e\") " pod="kube-system/kube-apiserver-ip-172-31-29-254" Oct 2 19:14:32.079476 kubelet[2868]: I1002 19:14:32.079405 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1013fcdec14173c01f77fedccc974a7e-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-254\" (UID: \"1013fcdec14173c01f77fedccc974a7e\") " pod="kube-system/kube-apiserver-ip-172-31-29-254" Oct 2 19:14:32.079476 kubelet[2868]: I1002 19:14:32.079453 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:32.079718 kubelet[2868]: I1002 19:14:32.079495 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:32.079718 kubelet[2868]: I1002 19:14:32.079536 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/249810b35df2c3008873ad0094ada0ae-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-254\" (UID: \"249810b35df2c3008873ad0094ada0ae\") " pod="kube-system/kube-scheduler-ip-172-31-29-254" Oct 2 19:14:32.079718 kubelet[2868]: I1002 19:14:32.079579 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1013fcdec14173c01f77fedccc974a7e-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-254\" (UID: \"1013fcdec14173c01f77fedccc974a7e\") " pod="kube-system/kube-apiserver-ip-172-31-29-254" Oct 2 19:14:32.079718 kubelet[2868]: I1002 19:14:32.079624 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2cb60d30701d06248a3ac7be31231756-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-254\" (UID: \"2cb60d30701d06248a3ac7be31231756\") " pod="kube-system/kube-controller-manager-ip-172-31-29-254" Oct 2 19:14:32.361000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:32.361000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400065c140 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:32.361000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:32.366000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:32.366000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400065c260 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:32.366000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:32.369000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:32.369000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040f9e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:32.369000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:32.373000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:32.373000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400065c7e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:32.373000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:32.484593 kubelet[2868]: I1002 19:14:32.484520 2868 apiserver.go:52] "Watching apiserver" Oct 2 19:14:32.563547 kubelet[2868]: I1002 19:14:32.563479 2868 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:14:32.585016 sudo[2878]: pam_unix(sudo:session): session closed for user root Oct 2 19:14:32.584000 audit[2878]: USER_END pid=2878 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:32.584000 audit[2878]: CRED_DISP pid=2878 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:32.877076 kubelet[2868]: I1002 19:14:32.877030 2868 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-29-254" podStartSLOduration=0.876883462 podCreationTimestamp="2023-10-02 19:14:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:32.86317382 +0000 UTC m=+1.619788479" watchObservedRunningTime="2023-10-02 19:14:32.876883462 +0000 UTC m=+1.633498109" Oct 2 19:14:32.891191 kubelet[2868]: I1002 19:14:32.891150 2868 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-29-254" podStartSLOduration=0.891097613 podCreationTimestamp="2023-10-02 19:14:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:32.877687195 +0000 UTC m=+1.634301830" watchObservedRunningTime="2023-10-02 19:14:32.891097613 +0000 UTC m=+1.647712272" Oct 2 19:14:32.909574 kubelet[2868]: I1002 19:14:32.909532 2868 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-29-254" podStartSLOduration=0.90947946 podCreationTimestamp="2023-10-02 19:14:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:32.891924927 +0000 UTC m=+1.648539562" watchObservedRunningTime="2023-10-02 19:14:32.90947946 +0000 UTC m=+1.666094083" Oct 2 19:14:35.148959 sudo[2013]: pam_unix(sudo:session): session closed for user root Oct 2 19:14:35.148000 audit[2013]: USER_END pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:35.148000 audit[2013]: CRED_DISP pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:14:35.172801 sshd[2010]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:35.174000 audit[2010]: USER_END pid=2010 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:14:35.174000 audit[2010]: CRED_DISP pid=2010 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:14:35.179620 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:14:35.179962 systemd[1]: session-7.scope: Consumed 12.020s CPU time. Oct 2 19:14:35.180887 systemd[1]: sshd@6-172.31.29.254:22-139.178.89.65:34806.service: Deactivated successfully. Oct 2 19:14:35.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.254:22-139.178.89.65:34806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:35.182671 systemd-logind[1729]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:14:35.184942 systemd-logind[1729]: Removed session 7. Oct 2 19:14:42.563000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=4839 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:14:42.566901 kernel: kauditd_printk_skb: 21 callbacks suppressed Oct 2 19:14:42.567028 kernel: audit: type=1400 audit(1696274082.563:979): avc: denied { watch } for pid=2658 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=4839 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:14:42.563000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001288000 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:42.592077 kernel: audit: type=1300 audit(1696274082.563:979): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001288000 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:14:42.563000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:42.602931 kernel: audit: type=1327 audit(1696274082.563:979): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:43.076241 kubelet[2868]: I1002 19:14:43.076200 2868 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:14:43.077301 env[1746]: time="2023-10-02T19:14:43.077250036Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:14:43.078207 kubelet[2868]: I1002 19:14:43.078168 2868 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:14:43.856283 kubelet[2868]: I1002 19:14:43.856236 2868 topology_manager.go:215] "Topology Admit Handler" podUID="fce980fe-ac04-43a9-9576-69e041983ad7" podNamespace="kube-system" podName="kube-proxy-ssdhn" Oct 2 19:14:43.870636 systemd[1]: Created slice kubepods-besteffort-podfce980fe_ac04_43a9_9576_69e041983ad7.slice. Oct 2 19:14:43.883092 kubelet[2868]: I1002 19:14:43.883029 2868 topology_manager.go:215] "Topology Admit Handler" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" podNamespace="kube-system" podName="cilium-rjtsx" Oct 2 19:14:43.899152 systemd[1]: Created slice kubepods-burstable-podb39fa124_82b4_4e9f_9749_88aacfec9988.slice. Oct 2 19:14:43.901354 kubelet[2868]: W1002 19:14:43.901152 2868 reflector.go:535] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-29-254" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-254' and this object Oct 2 19:14:43.901556 kubelet[2868]: E1002 19:14:43.901362 2868 reflector.go:147] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-29-254" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-254' and this object Oct 2 19:14:43.901556 kubelet[2868]: W1002 19:14:43.901541 2868 reflector.go:535] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-29-254" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-254' and this object Oct 2 19:14:43.901680 kubelet[2868]: E1002 19:14:43.901596 2868 reflector.go:147] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-29-254" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-254' and this object Oct 2 19:14:43.901744 kubelet[2868]: W1002 19:14:43.901682 2868 reflector.go:535] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-29-254" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-254' and this object Oct 2 19:14:43.901744 kubelet[2868]: E1002 19:14:43.901706 2868 reflector.go:147] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-29-254" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-254' and this object Oct 2 19:14:43.949939 kubelet[2868]: I1002 19:14:43.949896 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-host-proc-sys-net\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.950196 kubelet[2868]: I1002 19:14:43.950172 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-host-proc-sys-kernel\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.950376 kubelet[2868]: I1002 19:14:43.950353 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fce980fe-ac04-43a9-9576-69e041983ad7-xtables-lock\") pod \"kube-proxy-ssdhn\" (UID: \"fce980fe-ac04-43a9-9576-69e041983ad7\") " pod="kube-system/kube-proxy-ssdhn" Oct 2 19:14:43.950520 kubelet[2868]: I1002 19:14:43.950499 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fce980fe-ac04-43a9-9576-69e041983ad7-lib-modules\") pod \"kube-proxy-ssdhn\" (UID: \"fce980fe-ac04-43a9-9576-69e041983ad7\") " pod="kube-system/kube-proxy-ssdhn" Oct 2 19:14:43.950677 kubelet[2868]: I1002 19:14:43.950654 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-bpf-maps\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.950837 kubelet[2868]: I1002 19:14:43.950815 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-hostproc\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.951034 kubelet[2868]: I1002 19:14:43.951009 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-config-path\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.951224 kubelet[2868]: I1002 19:14:43.951202 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/fce980fe-ac04-43a9-9576-69e041983ad7-kube-proxy\") pod \"kube-proxy-ssdhn\" (UID: \"fce980fe-ac04-43a9-9576-69e041983ad7\") " pod="kube-system/kube-proxy-ssdhn" Oct 2 19:14:43.951389 kubelet[2868]: I1002 19:14:43.951367 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-scbkr\" (UniqueName: \"kubernetes.io/projected/fce980fe-ac04-43a9-9576-69e041983ad7-kube-api-access-scbkr\") pod \"kube-proxy-ssdhn\" (UID: \"fce980fe-ac04-43a9-9576-69e041983ad7\") " pod="kube-system/kube-proxy-ssdhn" Oct 2 19:14:43.951594 kubelet[2868]: I1002 19:14:43.951572 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cni-path\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.951759 kubelet[2868]: I1002 19:14:43.951738 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-etc-cni-netd\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.951914 kubelet[2868]: I1002 19:14:43.951894 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-hubble-tls\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.952101 kubelet[2868]: I1002 19:14:43.952076 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-run\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.952288 kubelet[2868]: I1002 19:14:43.952265 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-cgroup\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.952456 kubelet[2868]: I1002 19:14:43.952432 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-lib-modules\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.952643 kubelet[2868]: I1002 19:14:43.952620 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-xtables-lock\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.952813 kubelet[2868]: I1002 19:14:43.952791 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b39fa124-82b4-4e9f-9749-88aacfec9988-clustermesh-secrets\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:43.952994 kubelet[2868]: I1002 19:14:43.952957 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-skvmh\" (UniqueName: \"kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-kube-api-access-skvmh\") pod \"cilium-rjtsx\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " pod="kube-system/cilium-rjtsx" Oct 2 19:14:44.042740 kubelet[2868]: I1002 19:14:44.042688 2868 topology_manager.go:215] "Topology Admit Handler" podUID="bc5e324c-c669-4702-bb42-56b941fc2b71" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-4qktg" Oct 2 19:14:44.053953 systemd[1]: Created slice kubepods-besteffort-podbc5e324c_c669_4702_bb42_56b941fc2b71.slice. Oct 2 19:14:44.158109 kubelet[2868]: I1002 19:14:44.157927 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc5e324c-c669-4702-bb42-56b941fc2b71-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-4qktg\" (UID: \"bc5e324c-c669-4702-bb42-56b941fc2b71\") " pod="kube-system/cilium-operator-6bc8ccdb58-4qktg" Oct 2 19:14:44.159700 kubelet[2868]: I1002 19:14:44.158078 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cj8gq\" (UniqueName: \"kubernetes.io/projected/bc5e324c-c669-4702-bb42-56b941fc2b71-kube-api-access-cj8gq\") pod \"cilium-operator-6bc8ccdb58-4qktg\" (UID: \"bc5e324c-c669-4702-bb42-56b941fc2b71\") " pod="kube-system/cilium-operator-6bc8ccdb58-4qktg" Oct 2 19:14:44.184036 env[1746]: time="2023-10-02T19:14:44.183804833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-ssdhn,Uid:fce980fe-ac04-43a9-9576-69e041983ad7,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:44.235001 env[1746]: time="2023-10-02T19:14:44.234062791Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:44.235001 env[1746]: time="2023-10-02T19:14:44.234532461Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:44.235001 env[1746]: time="2023-10-02T19:14:44.234561550Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:44.235850 env[1746]: time="2023-10-02T19:14:44.235731940Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cbb2536f4267faef7160c8cee572e9510afe446b70b5ef09c285485a763540ac pid=2941 runtime=io.containerd.runc.v2 Oct 2 19:14:44.292280 systemd[1]: Started cri-containerd-cbb2536f4267faef7160c8cee572e9510afe446b70b5ef09c285485a763540ac.scope. Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351255 kernel: audit: type=1400 audit(1696274084.334:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351382 kernel: audit: type=1400 audit(1696274084.334:981): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.359061 kernel: audit: type=1400 audit(1696274084.334:982): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.367392 kernel: audit: type=1400 audit(1696274084.334:983): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.375410 kernel: audit: type=1400 audit(1696274084.334:984): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.384185 kernel: audit: type=1400 audit(1696274084.334:985): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.392358 kernel: audit: type=1400 audit(1696274084.334:986): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.334000 audit: BPF prog-id=112 op=LOAD Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623235333666343236376661656637313630633863656535373265 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623235333666343236376661656637313630633863656535373265 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.343000 audit: BPF prog-id=113 op=LOAD Oct 2 19:14:44.343000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623235333666343236376661656637313630633863656535373265 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.351000 audit: BPF prog-id=114 op=LOAD Oct 2 19:14:44.351000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623235333666343236376661656637313630633863656535373265 Oct 2 19:14:44.358000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:14:44.358000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { perfmon } for pid=2951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit[2951]: AVC avc: denied { bpf } for pid=2951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.358000 audit: BPF prog-id=115 op=LOAD Oct 2 19:14:44.358000 audit[2951]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2941 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623235333666343236376661656637313630633863656535373265 Oct 2 19:14:44.426896 env[1746]: time="2023-10-02T19:14:44.423823924Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-ssdhn,Uid:fce980fe-ac04-43a9-9576-69e041983ad7,Namespace:kube-system,Attempt:0,} returns sandbox id \"cbb2536f4267faef7160c8cee572e9510afe446b70b5ef09c285485a763540ac\"" Oct 2 19:14:44.434165 env[1746]: time="2023-10-02T19:14:44.434107379Z" level=info msg="CreateContainer within sandbox \"cbb2536f4267faef7160c8cee572e9510afe446b70b5ef09c285485a763540ac\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:14:44.460013 env[1746]: time="2023-10-02T19:14:44.459918028Z" level=info msg="CreateContainer within sandbox \"cbb2536f4267faef7160c8cee572e9510afe446b70b5ef09c285485a763540ac\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"c5f6c53977a3cf009540c6417bc45a08eb1d29f31619b91f4088c16bb94ddfe7\"" Oct 2 19:14:44.463445 env[1746]: time="2023-10-02T19:14:44.463382746Z" level=info msg="StartContainer for \"c5f6c53977a3cf009540c6417bc45a08eb1d29f31619b91f4088c16bb94ddfe7\"" Oct 2 19:14:44.521039 systemd[1]: Started cri-containerd-c5f6c53977a3cf009540c6417bc45a08eb1d29f31619b91f4088c16bb94ddfe7.scope. Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2941 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663663353339373761336366303039353430633634313762633435 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.578000 audit: BPF prog-id=116 op=LOAD Oct 2 19:14:44.578000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2941 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663663353339373761336366303039353430633634313762633435 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit: BPF prog-id=117 op=LOAD Oct 2 19:14:44.579000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2941 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663663353339373761336366303039353430633634313762633435 Oct 2 19:14:44.579000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:14:44.579000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:44.579000 audit: BPF prog-id=118 op=LOAD Oct 2 19:14:44.579000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2941 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335663663353339373761336366303039353430633634313762633435 Oct 2 19:14:44.617846 env[1746]: time="2023-10-02T19:14:44.617707500Z" level=info msg="StartContainer for \"c5f6c53977a3cf009540c6417bc45a08eb1d29f31619b91f4088c16bb94ddfe7\" returns successfully" Oct 2 19:14:44.790000 audit[3033]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3033 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.790000 audit[3033]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdb73b6d0 a2=0 a3=ffffb85516c0 items=0 ppid=2992 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.790000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:14:44.794000 audit[3034]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=3034 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.794000 audit[3034]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe5688450 a2=0 a3=ffff9b29c6c0 items=0 ppid=2992 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.794000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:14:44.797000 audit[3035]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=3035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.797000 audit[3035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4187d80 a2=0 a3=ffffb40786c0 items=0 ppid=2992 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.797000 audit[3036]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=3036 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.797000 audit[3036]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4d0ef10 a2=0 a3=ffff937896c0 items=0 ppid=2992 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.797000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:14:44.797000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:14:44.801000 audit[3037]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=3037 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:44.801000 audit[3037]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffce037bf0 a2=0 a3=ffffada716c0 items=0 ppid=2992 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.801000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:14:44.809000 audit[3038]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.809000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1e1a900 a2=0 a3=ffff89a236c0 items=0 ppid=2992 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.809000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:14:44.907000 audit[3039]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3039 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.907000 audit[3039]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffed277ab0 a2=0 a3=ffffab26d6c0 items=0 ppid=2992 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:14:44.916000 audit[3041]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.916000 audit[3041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdadd19b0 a2=0 a3=ffff88cd56c0 items=0 ppid=2992 pid=3041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:14:44.929000 audit[3044]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.929000 audit[3044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffedb6840 a2=0 a3=ffff8d7e46c0 items=0 ppid=2992 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.929000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:14:44.933000 audit[3045]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.933000 audit[3045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd250720 a2=0 a3=ffff9049b6c0 items=0 ppid=2992 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.933000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:14:44.942000 audit[3047]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.942000 audit[3047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcfbe32d0 a2=0 a3=ffff87d386c0 items=0 ppid=2992 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.942000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:14:44.946000 audit[3048]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.946000 audit[3048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffb90ed0 a2=0 a3=ffffa00e26c0 items=0 ppid=2992 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.946000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:14:44.957000 audit[3050]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.957000 audit[3050]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe5499e50 a2=0 a3=ffff9df856c0 items=0 ppid=2992 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.957000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:14:44.970000 audit[3053]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.970000 audit[3053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe480fc20 a2=0 a3=ffff801b46c0 items=0 ppid=2992 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.970000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:14:44.973000 audit[3054]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.973000 audit[3054]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca204be0 a2=0 a3=ffff98a2f6c0 items=0 ppid=2992 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:14:44.982000 audit[3056]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.982000 audit[3056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff4d377a0 a2=0 a3=ffff8c6f26c0 items=0 ppid=2992 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.982000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:14:44.985000 audit[3057]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.985000 audit[3057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc8495f0 a2=0 a3=ffff941776c0 items=0 ppid=2992 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.985000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:14:44.994000 audit[3059]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:44.994000 audit[3059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd5f65f50 a2=0 a3=ffff7ff936c0 items=0 ppid=2992 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:44.994000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:45.006000 audit[3062]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:45.006000 audit[3062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc08d8b80 a2=0 a3=ffffa37a76c0 items=0 ppid=2992 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.006000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:45.019000 audit[3065]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:45.019000 audit[3065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffff1e9580 a2=0 a3=ffffa99596c0 items=0 ppid=2992 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.019000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:14:45.022000 audit[3066]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:45.022000 audit[3066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdf296910 a2=0 a3=ffffaa61f6c0 items=0 ppid=2992 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.022000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:14:45.030000 audit[3068]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:45.030000 audit[3068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd53fe860 a2=0 a3=ffffb3b0d6c0 items=0 ppid=2992 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.030000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:45.042000 audit[3071]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:45.042000 audit[3071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff048b580 a2=0 a3=ffff955746c0 items=0 ppid=2992 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.042000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:45.048000 audit[3072]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:45.048000 audit[3072]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd0a1710 a2=0 a3=ffffbca906c0 items=0 ppid=2992 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.048000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:14:45.058391 kubelet[2868]: E1002 19:14:45.057594 2868 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:14:45.058391 kubelet[2868]: E1002 19:14:45.057726 2868 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-config-path podName:b39fa124-82b4-4e9f-9749-88aacfec9988 nodeName:}" failed. No retries permitted until 2023-10-02 19:14:45.557693928 +0000 UTC m=+14.314308551 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-config-path") pod "cilium-rjtsx" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:14:45.059333 kubelet[2868]: E1002 19:14:45.059302 2868 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:14:45.059567 kubelet[2868]: E1002 19:14:45.059543 2868 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-rjtsx: failed to sync secret cache: timed out waiting for the condition Oct 2 19:14:45.059896 kubelet[2868]: E1002 19:14:45.059874 2868 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-hubble-tls podName:b39fa124-82b4-4e9f-9749-88aacfec9988 nodeName:}" failed. No retries permitted until 2023-10-02 19:14:45.559841735 +0000 UTC m=+14.316456358 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-hubble-tls") pod "cilium-rjtsx" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:14:45.060000 audit[3074]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:14:45.060000 audit[3074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffde31e300 a2=0 a3=ffff90b606c0 items=0 ppid=2992 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.060000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:14:45.111000 audit[3081]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3081 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:14:45.111000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffee75e0e0 a2=0 a3=ffff86ef96c0 items=0 ppid=2992 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.111000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:45.141684 systemd[1]: run-containerd-runc-k8s.io-cbb2536f4267faef7160c8cee572e9510afe446b70b5ef09c285485a763540ac-runc.3zndBt.mount: Deactivated successfully. Oct 2 19:14:45.147000 audit[3081]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3081 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:14:45.147000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffee75e0e0 a2=0 a3=ffff86ef96c0 items=0 ppid=2992 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.147000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:45.153000 audit[3088]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.153000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdca1eb00 a2=0 a3=ffffb1b1e6c0 items=0 ppid=2992 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:14:45.166000 audit[3090]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3090 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.166000 audit[3090]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd2b77c10 a2=0 a3=ffff91f846c0 items=0 ppid=2992 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:14:45.178000 audit[3093]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3093 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.178000 audit[3093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc0d9af60 a2=0 a3=ffff8f8f46c0 items=0 ppid=2992 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.178000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:14:45.183000 audit[3094]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3094 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.183000 audit[3094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc9cab7f0 a2=0 a3=ffff8b0e16c0 items=0 ppid=2992 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:14:45.192000 audit[3096]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.192000 audit[3096]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe7f9c6c0 a2=0 a3=ffff83d196c0 items=0 ppid=2992 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.192000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:14:45.196000 audit[3097]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3097 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.196000 audit[3097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcfe063b0 a2=0 a3=ffff92aa16c0 items=0 ppid=2992 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.196000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:14:45.205000 audit[3099]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3099 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.205000 audit[3099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd9a3b170 a2=0 a3=ffff861f86c0 items=0 ppid=2992 pid=3099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.205000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:14:45.218000 audit[3102]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.218000 audit[3102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffffc33bf20 a2=0 a3=ffff935af6c0 items=0 ppid=2992 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.218000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:14:45.222000 audit[3103]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3103 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.222000 audit[3103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd9ff2c60 a2=0 a3=ffff88d906c0 items=0 ppid=2992 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.222000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:14:45.232000 audit[3105]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.232000 audit[3105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc0399450 a2=0 a3=ffff9807c6c0 items=0 ppid=2992 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:14:45.236000 audit[3106]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.236000 audit[3106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb8ebde0 a2=0 a3=ffff814656c0 items=0 ppid=2992 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.236000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:14:45.244000 audit[3108]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.244000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe70080f0 a2=0 a3=ffffbaec56c0 items=0 ppid=2992 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.244000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:14:45.257000 audit[3111]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3111 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.257000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff6d7ed60 a2=0 a3=ffff96f7d6c0 items=0 ppid=2992 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.257000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:14:45.268793 env[1746]: time="2023-10-02T19:14:45.268272594Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-4qktg,Uid:bc5e324c-c669-4702-bb42-56b941fc2b71,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:45.275000 audit[3114]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3114 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.275000 audit[3114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffee586820 a2=0 a3=ffffa8e6d6c0 items=0 ppid=2992 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:14:45.287000 audit[3115]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.287000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff4ce4690 a2=0 a3=ffffa3a1b6c0 items=0 ppid=2992 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.287000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:14:45.304000 audit[3121]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3121 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.304000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe992f110 a2=0 a3=ffff8604f6c0 items=0 ppid=2992 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.304000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:45.319608 env[1746]: time="2023-10-02T19:14:45.319448396Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:45.319608 env[1746]: time="2023-10-02T19:14:45.319582821Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:45.319804 env[1746]: time="2023-10-02T19:14:45.319647465Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:45.320109 env[1746]: time="2023-10-02T19:14:45.320025935Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a pid=3126 runtime=io.containerd.runc.v2 Oct 2 19:14:45.331000 audit[3137]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3137 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.331000 audit[3137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd72ae9d0 a2=0 a3=ffffa76246c0 items=0 ppid=2992 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:14:45.341000 audit[3138]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3138 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.341000 audit[3138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed0f3bd0 a2=0 a3=ffff9a10f6c0 items=0 ppid=2992 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.341000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:14:45.374673 systemd[1]: run-containerd-runc-k8s.io-035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a-runc.oG3S0C.mount: Deactivated successfully. Oct 2 19:14:45.379000 audit[3149]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3149 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.379000 audit[3149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffdfb73a90 a2=0 a3=ffffa7d056c0 items=0 ppid=2992 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.379000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:14:45.386842 systemd[1]: Started cri-containerd-035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a.scope. Oct 2 19:14:45.396000 audit[3150]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3150 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.396000 audit[3150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc7f6d060 a2=0 a3=ffffb402c6c0 items=0 ppid=2992 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:14:45.407000 audit[3154]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.407000 audit[3154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc3ec2f00 a2=0 a3=ffff91a176c0 items=0 ppid=2992 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.407000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:45.420000 audit[3162]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:14:45.420000 audit[3162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffa4827e0 a2=0 a3=ffffa8b616c0 items=0 ppid=2992 pid=3162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.429000 audit: BPF prog-id=119 op=LOAD Oct 2 19:14:45.430000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.430000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3126 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033356561333664343437343035356264343663343531343461326462 Oct 2 19:14:45.430000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.430000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3126 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033356561333664343437343035356264343663343531343461326462 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.431000 audit: BPF prog-id=120 op=LOAD Oct 2 19:14:45.431000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3126 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033356561333664343437343035356264343663343531343461326462 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.433000 audit: BPF prog-id=121 op=LOAD Oct 2 19:14:45.433000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3126 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033356561333664343437343035356264343663343531343461326462 Oct 2 19:14:45.434000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:14:45.434000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { perfmon } for pid=3136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit[3136]: AVC avc: denied { bpf } for pid=3136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.434000 audit: BPF prog-id=122 op=LOAD Oct 2 19:14:45.434000 audit[3136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3126 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033356561333664343437343035356264343663343531343461326462 Oct 2 19:14:45.442000 audit[3164]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:14:45.442000 audit[3164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc60052b0 a2=0 a3=ffff8bf5f6c0 items=0 ppid=2992 pid=3164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.442000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:45.443000 audit[3164]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:14:45.443000 audit[3164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc60052b0 a2=0 a3=ffff8bf5f6c0 items=0 ppid=2992 pid=3164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.443000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:14:45.499406 env[1746]: time="2023-10-02T19:14:45.499322438Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-4qktg,Uid:bc5e324c-c669-4702-bb42-56b941fc2b71,Namespace:kube-system,Attempt:0,} returns sandbox id \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\"" Oct 2 19:14:45.504516 env[1746]: time="2023-10-02T19:14:45.504455235Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:14:45.711442 env[1746]: time="2023-10-02T19:14:45.707590888Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rjtsx,Uid:b39fa124-82b4-4e9f-9749-88aacfec9988,Namespace:kube-system,Attempt:0,}" Oct 2 19:14:45.751927 env[1746]: time="2023-10-02T19:14:45.751672375Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:14:45.751927 env[1746]: time="2023-10-02T19:14:45.751806080Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:14:45.751927 env[1746]: time="2023-10-02T19:14:45.751847852Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:14:45.753270 env[1746]: time="2023-10-02T19:14:45.753066182Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271 pid=3182 runtime=io.containerd.runc.v2 Oct 2 19:14:45.782560 systemd[1]: Started cri-containerd-a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271.scope. Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.822000 audit: BPF prog-id=123 op=LOAD Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3182 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130653339353437663237383930373562636533633430666565313238 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3182 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130653339353437663237383930373562636533633430666565313238 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit: BPF prog-id=124 op=LOAD Oct 2 19:14:45.824000 audit[3192]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3182 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130653339353437663237383930373562636533633430666565313238 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.824000 audit: BPF prog-id=125 op=LOAD Oct 2 19:14:45.824000 audit[3192]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3182 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130653339353437663237383930373562636533633430666565313238 Oct 2 19:14:45.824000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:14:45.825000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { perfmon } for pid=3192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit[3192]: AVC avc: denied { bpf } for pid=3192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:45.825000 audit: BPF prog-id=126 op=LOAD Oct 2 19:14:45.825000 audit[3192]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3182 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:45.825000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130653339353437663237383930373562636533633430666565313238 Oct 2 19:14:45.864130 env[1746]: time="2023-10-02T19:14:45.864074402Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rjtsx,Uid:b39fa124-82b4-4e9f-9749-88aacfec9988,Namespace:kube-system,Attempt:0,} returns sandbox id \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\"" Oct 2 19:14:46.737287 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3220682413.mount: Deactivated successfully. Oct 2 19:14:47.718092 env[1746]: time="2023-10-02T19:14:47.718031726Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:47.721954 env[1746]: time="2023-10-02T19:14:47.721904851Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:47.725572 env[1746]: time="2023-10-02T19:14:47.725508455Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:47.728062 env[1746]: time="2023-10-02T19:14:47.727406155Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:14:47.731938 env[1746]: time="2023-10-02T19:14:47.731820950Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:14:47.735762 env[1746]: time="2023-10-02T19:14:47.735669799Z" level=info msg="CreateContainer within sandbox \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:14:47.759084 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3085834770.mount: Deactivated successfully. Oct 2 19:14:47.772121 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1099255653.mount: Deactivated successfully. Oct 2 19:14:47.778723 env[1746]: time="2023-10-02T19:14:47.778603743Z" level=info msg="CreateContainer within sandbox \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\"" Oct 2 19:14:47.782145 env[1746]: time="2023-10-02T19:14:47.780238726Z" level=info msg="StartContainer for \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\"" Oct 2 19:14:47.836847 systemd[1]: Started cri-containerd-1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197.scope. Oct 2 19:14:47.898351 kernel: kauditd_printk_skb: 360 callbacks suppressed Oct 2 19:14:47.898571 kernel: audit: type=1400 audit(1696274087.895:1091): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.906028 kernel: audit: type=1400 audit(1696274087.895:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.921372 kernel: audit: type=1400 audit(1696274087.895:1093): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.921494 kernel: audit: type=1400 audit(1696274087.895:1094): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.929551 kernel: audit: type=1400 audit(1696274087.895:1095): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.945250 kernel: audit: type=1400 audit(1696274087.895:1096): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.945446 kernel: audit: type=1400 audit(1696274087.895:1097): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.961137 kernel: audit: type=1400 audit(1696274087.895:1098): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.969530 kernel: audit: type=1400 audit(1696274087.895:1099): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.983559 kernel: audit: type=1400 audit(1696274087.897:1100): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.897000 audit: BPF prog-id=127 op=LOAD Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3126 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:47.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393135623766366662623363386331336331393336326231373766 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3126 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:47.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393135623766366662623363386331336331393336326231373766 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.908000 audit: BPF prog-id=128 op=LOAD Oct 2 19:14:47.908000 audit[3223]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3126 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:47.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393135623766366662623363386331336331393336326231373766 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.912000 audit: BPF prog-id=129 op=LOAD Oct 2 19:14:47.912000 audit[3223]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3126 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:47.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393135623766366662623363386331336331393336326231373766 Oct 2 19:14:47.912000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:14:47.913000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:14:47.913000 audit: BPF prog-id=130 op=LOAD Oct 2 19:14:47.913000 audit[3223]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3126 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:47.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393135623766366662623363386331336331393336326231373766 Oct 2 19:14:48.001792 env[1746]: time="2023-10-02T19:14:48.001731829Z" level=info msg="StartContainer for \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\" returns successfully" Oct 2 19:14:48.084000 audit[3233]: AVC avc: denied { map_create } for pid=3233 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c712 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c632,c712 tclass=bpf permissive=0 Oct 2 19:14:48.084000 audit[3233]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=40005c9768 a2=48 a3=0 items=0 ppid=3126 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c632,c712 key=(null) Oct 2 19:14:48.084000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:14:48.988054 kubelet[2868]: I1002 19:14:48.987417 2868 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-ssdhn" podStartSLOduration=5.987352144 podCreationTimestamp="2023-10-02 19:14:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:14:44.872299601 +0000 UTC m=+13.628914236" watchObservedRunningTime="2023-10-02 19:14:48.987352144 +0000 UTC m=+17.743966767" Oct 2 19:14:51.777614 kubelet[2868]: I1002 19:14:51.777573 2868 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-4qktg" podStartSLOduration=5.55061177 podCreationTimestamp="2023-10-02 19:14:44 +0000 UTC" firstStartedPulling="2023-10-02 19:14:45.501870026 +0000 UTC m=+14.258484649" lastFinishedPulling="2023-10-02 19:14:47.728735281 +0000 UTC m=+16.485349904" observedRunningTime="2023-10-02 19:14:48.991158475 +0000 UTC m=+17.747773146" watchObservedRunningTime="2023-10-02 19:14:51.777477025 +0000 UTC m=+20.534091672" Oct 2 19:14:55.078266 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3982119036.mount: Deactivated successfully. Oct 2 19:14:59.190532 env[1746]: time="2023-10-02T19:14:59.190460603Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:59.193650 env[1746]: time="2023-10-02T19:14:59.193584833Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:59.200471 env[1746]: time="2023-10-02T19:14:59.200409703Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:14:59.205176 env[1746]: time="2023-10-02T19:14:59.205100452Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:14:59.211562 env[1746]: time="2023-10-02T19:14:59.211501301Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:14:59.230333 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount708911768.mount: Deactivated successfully. Oct 2 19:14:59.241195 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3550863658.mount: Deactivated successfully. Oct 2 19:14:59.246952 env[1746]: time="2023-10-02T19:14:59.246889432Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\"" Oct 2 19:14:59.247973 env[1746]: time="2023-10-02T19:14:59.247902630Z" level=info msg="StartContainer for \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\"" Oct 2 19:14:59.304253 systemd[1]: Started cri-containerd-22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b.scope. Oct 2 19:14:59.339807 systemd[1]: cri-containerd-22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b.scope: Deactivated successfully. Oct 2 19:14:59.986730 env[1746]: time="2023-10-02T19:14:59.986654599Z" level=info msg="shim disconnected" id=22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b Oct 2 19:14:59.987046 env[1746]: time="2023-10-02T19:14:59.986731363Z" level=warning msg="cleaning up after shim disconnected" id=22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b namespace=k8s.io Oct 2 19:14:59.987046 env[1746]: time="2023-10-02T19:14:59.986760019Z" level=info msg="cleaning up dead shim" Oct 2 19:15:00.013742 env[1746]: time="2023-10-02T19:15:00.013649012Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:14:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3277 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:00.014315 env[1746]: time="2023-10-02T19:15:00.014154405Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:15:00.015303 env[1746]: time="2023-10-02T19:15:00.015232571Z" level=error msg="Failed to pipe stdout of container \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\"" error="reading from a closed fifo" Oct 2 19:15:00.015530 env[1746]: time="2023-10-02T19:15:00.015470544Z" level=error msg="Failed to pipe stderr of container \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\"" error="reading from a closed fifo" Oct 2 19:15:00.018175 env[1746]: time="2023-10-02T19:15:00.018080080Z" level=error msg="StartContainer for \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:00.018769 kubelet[2868]: E1002 19:15:00.018705 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b" Oct 2 19:15:00.019453 kubelet[2868]: E1002 19:15:00.019169 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:00.019453 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:00.019453 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:15:00.019659 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-skvmh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:00.019659 kubelet[2868]: E1002 19:15:00.019258 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:00.223709 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b-rootfs.mount: Deactivated successfully. Oct 2 19:15:00.925314 env[1746]: time="2023-10-02T19:15:00.925165371Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:15:00.958356 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2825923842.mount: Deactivated successfully. Oct 2 19:15:00.968615 env[1746]: time="2023-10-02T19:15:00.968525473Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\"" Oct 2 19:15:00.970243 env[1746]: time="2023-10-02T19:15:00.970187224Z" level=info msg="StartContainer for \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\"" Oct 2 19:15:01.022102 systemd[1]: Started cri-containerd-23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9.scope. Oct 2 19:15:01.062364 systemd[1]: cri-containerd-23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9.scope: Deactivated successfully. Oct 2 19:15:01.087972 env[1746]: time="2023-10-02T19:15:01.087879548Z" level=info msg="shim disconnected" id=23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9 Oct 2 19:15:01.087972 env[1746]: time="2023-10-02T19:15:01.087961820Z" level=warning msg="cleaning up after shim disconnected" id=23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9 namespace=k8s.io Oct 2 19:15:01.087972 env[1746]: time="2023-10-02T19:15:01.088001852Z" level=info msg="cleaning up dead shim" Oct 2 19:15:01.116577 env[1746]: time="2023-10-02T19:15:01.116477027Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3313 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:01.117074 env[1746]: time="2023-10-02T19:15:01.116955131Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:15:01.119192 env[1746]: time="2023-10-02T19:15:01.119128683Z" level=error msg="Failed to pipe stdout of container \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\"" error="reading from a closed fifo" Oct 2 19:15:01.119385 env[1746]: time="2023-10-02T19:15:01.119164479Z" level=error msg="Failed to pipe stderr of container \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\"" error="reading from a closed fifo" Oct 2 19:15:01.121825 env[1746]: time="2023-10-02T19:15:01.121708460Z" level=error msg="StartContainer for \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:01.122450 kubelet[2868]: E1002 19:15:01.122410 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9" Oct 2 19:15:01.124168 kubelet[2868]: E1002 19:15:01.123079 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:01.124168 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:01.124168 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:15:01.124168 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-skvmh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:01.124168 kubelet[2868]: E1002 19:15:01.123149 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:01.223845 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9-rootfs.mount: Deactivated successfully. Oct 2 19:15:01.924299 kubelet[2868]: I1002 19:15:01.924252 2868 scope.go:117] "RemoveContainer" containerID="22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b" Oct 2 19:15:01.925656 kubelet[2868]: I1002 19:15:01.925603 2868 scope.go:117] "RemoveContainer" containerID="22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b" Oct 2 19:15:01.928290 env[1746]: time="2023-10-02T19:15:01.927498236Z" level=info msg="RemoveContainer for \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\"" Oct 2 19:15:01.932317 env[1746]: time="2023-10-02T19:15:01.932245252Z" level=info msg="RemoveContainer for \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\"" Oct 2 19:15:01.932506 env[1746]: time="2023-10-02T19:15:01.932435657Z" level=error msg="RemoveContainer for \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\" failed" error="failed to set removing state for container \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\": container is already in removing state" Oct 2 19:15:01.932891 kubelet[2868]: E1002 19:15:01.932833 2868 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\": container is already in removing state" containerID="22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b" Oct 2 19:15:01.933042 kubelet[2868]: E1002 19:15:01.932919 2868 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b": container is already in removing state; Skipping pod "cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)" Oct 2 19:15:01.935725 env[1746]: time="2023-10-02T19:15:01.935642026Z" level=info msg="RemoveContainer for \"22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b\" returns successfully" Oct 2 19:15:01.937500 kubelet[2868]: E1002 19:15:01.937460 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:02.930557 kubelet[2868]: E1002 19:15:02.930437 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:03.095360 kubelet[2868]: W1002 19:15:03.095289 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb39fa124_82b4_4e9f_9749_88aacfec9988.slice/cri-containerd-22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b.scope WatchSource:0}: container "22231d4b9213838464d70ab87950e5c6eff2b1f48629de55f93dbbc52bc44d0b" in namespace "k8s.io": not found Oct 2 19:15:06.203746 kubelet[2868]: W1002 19:15:06.203635 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb39fa124_82b4_4e9f_9749_88aacfec9988.slice/cri-containerd-23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9.scope WatchSource:0}: task 23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9 not found: not found Oct 2 19:15:15.763237 env[1746]: time="2023-10-02T19:15:15.763162017Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:15:15.781256 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1597550312.mount: Deactivated successfully. Oct 2 19:15:15.793508 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2166282722.mount: Deactivated successfully. Oct 2 19:15:15.810972 env[1746]: time="2023-10-02T19:15:15.810907082Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\"" Oct 2 19:15:15.812185 env[1746]: time="2023-10-02T19:15:15.812105674Z" level=info msg="StartContainer for \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\"" Oct 2 19:15:15.872865 systemd[1]: Started cri-containerd-16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e.scope. Oct 2 19:15:15.909943 systemd[1]: cri-containerd-16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e.scope: Deactivated successfully. Oct 2 19:15:15.927958 env[1746]: time="2023-10-02T19:15:15.927888319Z" level=info msg="shim disconnected" id=16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e Oct 2 19:15:15.928554 env[1746]: time="2023-10-02T19:15:15.928272489Z" level=warning msg="cleaning up after shim disconnected" id=16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e namespace=k8s.io Oct 2 19:15:15.928554 env[1746]: time="2023-10-02T19:15:15.928303198Z" level=info msg="cleaning up dead shim" Oct 2 19:15:15.967657 env[1746]: time="2023-10-02T19:15:15.967545952Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3356 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:15.968444 env[1746]: time="2023-10-02T19:15:15.968364262Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:15:15.968865 env[1746]: time="2023-10-02T19:15:15.968794682Z" level=error msg="Failed to pipe stdout of container \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\"" error="reading from a closed fifo" Oct 2 19:15:15.969088 env[1746]: time="2023-10-02T19:15:15.969041507Z" level=error msg="Failed to pipe stderr of container \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\"" error="reading from a closed fifo" Oct 2 19:15:15.971666 env[1746]: time="2023-10-02T19:15:15.971599281Z" level=error msg="StartContainer for \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:15.972752 kubelet[2868]: E1002 19:15:15.972137 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e" Oct 2 19:15:15.972752 kubelet[2868]: E1002 19:15:15.972275 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:15.972752 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:15.972752 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:15:15.972752 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-skvmh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:15.972752 kubelet[2868]: E1002 19:15:15.972337 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:16.776434 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e-rootfs.mount: Deactivated successfully. Oct 2 19:15:16.970672 kubelet[2868]: I1002 19:15:16.970621 2868 scope.go:117] "RemoveContainer" containerID="23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9" Oct 2 19:15:16.971258 kubelet[2868]: I1002 19:15:16.971221 2868 scope.go:117] "RemoveContainer" containerID="23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9" Oct 2 19:15:16.976568 env[1746]: time="2023-10-02T19:15:16.976494336Z" level=info msg="RemoveContainer for \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\"" Oct 2 19:15:16.982455 env[1746]: time="2023-10-02T19:15:16.982385766Z" level=info msg="RemoveContainer for \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\" returns successfully" Oct 2 19:15:16.990352 env[1746]: time="2023-10-02T19:15:16.990167418Z" level=info msg="RemoveContainer for \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\"" Oct 2 19:15:16.990352 env[1746]: time="2023-10-02T19:15:16.990256125Z" level=info msg="RemoveContainer for \"23a290b42daca9407f75f88d23cc11bfcec85f319df5b3b84d138d5be42a9ca9\" returns successfully" Oct 2 19:15:16.991789 kubelet[2868]: E1002 19:15:16.991732 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:18.520277 systemd[1]: Started sshd@7-172.31.29.254:22-139.178.89.65:54760.service. Oct 2 19:15:18.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.254:22-139.178.89.65:54760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:18.522722 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:15:18.522841 kernel: audit: type=1130 audit(1696274118.519:1110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.254:22-139.178.89.65:54760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:18.704000 audit[3370]: USER_ACCT pid=3370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:18.715902 sshd[3370]: Accepted publickey for core from 139.178.89.65 port 54760 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:18.716459 kernel: audit: type=1101 audit(1696274118.704:1111): pid=3370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:18.716000 audit[3370]: CRED_ACQ pid=3370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:18.719027 sshd[3370]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:18.734345 kernel: audit: type=1103 audit(1696274118.716:1112): pid=3370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:18.734469 kernel: audit: type=1006 audit(1696274118.717:1113): pid=3370 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:15:18.717000 audit[3370]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee9db1d0 a2=3 a3=1 items=0 ppid=1 pid=3370 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:18.745773 kernel: audit: type=1300 audit(1696274118.717:1113): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee9db1d0 a2=3 a3=1 items=0 ppid=1 pid=3370 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:18.749769 kernel: audit: type=1327 audit(1696274118.717:1113): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:18.717000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:18.751133 systemd[1]: Started session-8.scope. Oct 2 19:15:18.752057 systemd-logind[1729]: New session 8 of user core. Oct 2 19:15:18.763000 audit[3370]: USER_START pid=3370 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:18.769000 audit[3372]: CRED_ACQ pid=3372 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:18.784907 kernel: audit: type=1105 audit(1696274118.763:1114): pid=3370 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:18.785049 kernel: audit: type=1103 audit(1696274118.769:1115): pid=3372 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:19.035372 kubelet[2868]: W1002 19:15:19.035237 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb39fa124_82b4_4e9f_9749_88aacfec9988.slice/cri-containerd-16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e.scope WatchSource:0}: task 16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e not found: not found Oct 2 19:15:19.080386 sshd[3370]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:19.081000 audit[3370]: USER_END pid=3370 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:19.081000 audit[3370]: CRED_DISP pid=3370 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:19.095627 systemd[1]: sshd@7-172.31.29.254:22-139.178.89.65:54760.service: Deactivated successfully. Oct 2 19:15:19.096887 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:15:19.104417 kernel: audit: type=1106 audit(1696274119.081:1116): pid=3370 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:19.104508 kernel: audit: type=1104 audit(1696274119.081:1117): pid=3370 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:19.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.254:22-139.178.89.65:54760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:19.105542 systemd-logind[1729]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:15:19.107535 systemd-logind[1729]: Removed session 8. Oct 2 19:15:26.392000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.396001 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:26.396087 kernel: audit: type=1400 audit(1696274126.392:1119): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.392000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040fa00 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:26.417682 kernel: audit: type=1300 audit(1696274126.392:1119): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040fa00 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:26.417805 kernel: audit: type=1327 audit(1696274126.392:1119): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:26.392000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:26.415000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.438201 kernel: audit: type=1400 audit(1696274126.415:1120): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:26.438341 kernel: audit: type=1300 audit(1696274126.415:1120): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ce3d40 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:26.415000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ce3d40 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:26.415000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:26.461327 kernel: audit: type=1327 audit(1696274126.415:1120): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:27.107000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.107000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4005d45f80 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:15:27.130087 kernel: audit: type=1400 audit(1696274127.107:1121): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.130217 kernel: audit: type=1300 audit(1696274127.107:1121): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4005d45f80 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:15:27.130264 kernel: audit: type=1327 audit(1696274127.107:1121): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:27.107000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:27.107000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.149941 kernel: audit: type=1400 audit(1696274127.107:1122): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.107000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40086a2fe0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:15:27.107000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:27.110000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=4808 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.110000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006c52000 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:15:27.110000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:27.126000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=4814 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.126000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006c523f0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:15:27.126000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:27.146000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.146000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4004b6cfa0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:15:27.146000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:27.147000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:27.147000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006c52510 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:15:27.147000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:15:27.757086 kubelet[2868]: E1002 19:15:27.757035 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:29.112046 systemd[1]: Started sshd@8-172.31.29.254:22-139.178.89.65:36682.service. Oct 2 19:15:29.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.254:22-139.178.89.65:36682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:29.293000 audit[3383]: USER_ACCT pid=3383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:29.294898 sshd[3383]: Accepted publickey for core from 139.178.89.65 port 36682 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:29.296000 audit[3383]: CRED_ACQ pid=3383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:29.297000 audit[3383]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0b3b0f0 a2=3 a3=1 items=0 ppid=1 pid=3383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:29.297000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:29.299163 sshd[3383]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:29.308774 systemd[1]: Started session-9.scope. Oct 2 19:15:29.310554 systemd-logind[1729]: New session 9 of user core. Oct 2 19:15:29.319000 audit[3383]: USER_START pid=3383 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:29.325000 audit[3385]: CRED_ACQ pid=3385 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:29.597431 sshd[3383]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:29.598000 audit[3383]: USER_END pid=3383 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:29.598000 audit[3383]: CRED_DISP pid=3383 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:29.604065 systemd-logind[1729]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:15:29.604443 systemd[1]: sshd@8-172.31.29.254:22-139.178.89.65:36682.service: Deactivated successfully. Oct 2 19:15:29.605748 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:15:29.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.254:22-139.178.89.65:36682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:29.608189 systemd-logind[1729]: Removed session 9. Oct 2 19:15:32.362000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:32.365677 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:15:32.365815 kernel: audit: type=1400 audit(1696274132.362:1136): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:32.362000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040fd80 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:32.388403 kernel: audit: type=1300 audit(1696274132.362:1136): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040fd80 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:32.388518 kernel: audit: type=1327 audit(1696274132.362:1136): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:32.362000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:32.370000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:32.407996 kernel: audit: type=1400 audit(1696274132.370:1137): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:32.408069 kernel: audit: type=1300 audit(1696274132.370:1137): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a8d980 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:32.370000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a8d980 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:32.370000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:32.430522 kernel: audit: type=1327 audit(1696274132.370:1137): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:32.430596 kernel: audit: type=1400 audit(1696274132.374:1138): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:32.374000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:32.374000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:32.449116 kernel: audit: type=1400 audit(1696274132.374:1139): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:32.374000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d5a040 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:32.461898 kernel: audit: type=1300 audit(1696274132.374:1138): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d5a040 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:32.462125 kernel: audit: type=1327 audit(1696274132.374:1138): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:32.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:32.374000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000a8daa0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:15:32.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:39.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.254:22-139.178.89.65:32800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:39.630128 systemd[1]: Started sshd@9-172.31.29.254:22-139.178.89.65:32800.service. Oct 2 19:15:39.633117 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:15:39.633223 kernel: audit: type=1130 audit(1696274139.629:1140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.254:22-139.178.89.65:32800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:39.768109 env[1746]: time="2023-10-02T19:15:39.767924670Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:15:39.784937 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1826355156.mount: Deactivated successfully. Oct 2 19:15:39.796284 env[1746]: time="2023-10-02T19:15:39.796181511Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\"" Oct 2 19:15:39.797275 env[1746]: time="2023-10-02T19:15:39.797222615Z" level=info msg="StartContainer for \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\"" Oct 2 19:15:39.828000 audit[3398]: USER_ACCT pid=3398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:39.841596 sshd[3398]: Accepted publickey for core from 139.178.89.65 port 32800 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:39.842125 kernel: audit: type=1101 audit(1696274139.828:1141): pid=3398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:39.841000 audit[3398]: CRED_ACQ pid=3398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:39.857014 systemd[1]: Started cri-containerd-23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084.scope. Oct 2 19:15:39.872039 kernel: audit: type=1103 audit(1696274139.841:1142): pid=3398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:39.872218 kernel: audit: type=1006 audit(1696274139.863:1143): pid=3398 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:15:39.875034 kernel: audit: type=1300 audit(1696274139.863:1143): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc323b8d0 a2=3 a3=1 items=0 ppid=1 pid=3398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:39.863000 audit[3398]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc323b8d0 a2=3 a3=1 items=0 ppid=1 pid=3398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:39.888738 sshd[3398]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:39.863000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:39.896131 kernel: audit: type=1327 audit(1696274139.863:1143): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:39.901728 systemd-logind[1729]: New session 10 of user core. Oct 2 19:15:39.903541 systemd[1]: Started session-10.scope. Oct 2 19:15:39.918000 audit[3398]: USER_START pid=3398 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:39.926000 audit[3426]: CRED_ACQ pid=3426 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:39.932943 systemd[1]: cri-containerd-23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084.scope: Deactivated successfully. Oct 2 19:15:39.942021 kernel: audit: type=1105 audit(1696274139.918:1144): pid=3398 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:39.942189 kernel: audit: type=1103 audit(1696274139.926:1145): pid=3426 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:39.962679 env[1746]: time="2023-10-02T19:15:39.962610223Z" level=info msg="shim disconnected" id=23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084 Oct 2 19:15:39.963078 env[1746]: time="2023-10-02T19:15:39.963037371Z" level=warning msg="cleaning up after shim disconnected" id=23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084 namespace=k8s.io Oct 2 19:15:39.963223 env[1746]: time="2023-10-02T19:15:39.963194298Z" level=info msg="cleaning up dead shim" Oct 2 19:15:39.991492 env[1746]: time="2023-10-02T19:15:39.991425303Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3427 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:39.992250 env[1746]: time="2023-10-02T19:15:39.992167337Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:15:39.995127 env[1746]: time="2023-10-02T19:15:39.995055145Z" level=error msg="Failed to pipe stdout of container \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\"" error="reading from a closed fifo" Oct 2 19:15:39.995241 env[1746]: time="2023-10-02T19:15:39.995181376Z" level=error msg="Failed to pipe stderr of container \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\"" error="reading from a closed fifo" Oct 2 19:15:39.997637 env[1746]: time="2023-10-02T19:15:39.997523869Z" level=error msg="StartContainer for \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:39.998238 kubelet[2868]: E1002 19:15:39.998011 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084" Oct 2 19:15:39.999326 kubelet[2868]: E1002 19:15:39.998188 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:39.999326 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:39.999326 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:15:39.999326 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-skvmh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:39.999326 kubelet[2868]: E1002 19:15:39.998393 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:40.030344 kubelet[2868]: I1002 19:15:40.030307 2868 scope.go:117] "RemoveContainer" containerID="16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e" Oct 2 19:15:40.031512 kubelet[2868]: I1002 19:15:40.031452 2868 scope.go:117] "RemoveContainer" containerID="16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e" Oct 2 19:15:40.050315 env[1746]: time="2023-10-02T19:15:40.050241602Z" level=info msg="RemoveContainer for \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\"" Oct 2 19:15:40.054954 env[1746]: time="2023-10-02T19:15:40.054878262Z" level=info msg="RemoveContainer for \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\"" Oct 2 19:15:40.056388 env[1746]: time="2023-10-02T19:15:40.056272016Z" level=error msg="RemoveContainer for \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\" failed" error="failed to set removing state for container \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\": container is already in removing state" Oct 2 19:15:40.059208 kubelet[2868]: E1002 19:15:40.059147 2868 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\": container is already in removing state" containerID="16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e" Oct 2 19:15:40.059536 kubelet[2868]: E1002 19:15:40.059488 2868 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e": container is already in removing state; Skipping pod "cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)" Oct 2 19:15:40.060307 kubelet[2868]: E1002 19:15:40.060278 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:15:40.067081 env[1746]: time="2023-10-02T19:15:40.067011068Z" level=info msg="RemoveContainer for \"16abddce20e3fffc6e3e333c019657b7fde6f507a44fea6b46915ba219a2090e\" returns successfully" Oct 2 19:15:40.213267 sshd[3398]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:40.214000 audit[3398]: USER_END pid=3398 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:40.215000 audit[3398]: CRED_DISP pid=3398 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:40.230401 systemd[1]: sshd@9-172.31.29.254:22-139.178.89.65:32800.service: Deactivated successfully. Oct 2 19:15:40.231648 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:15:40.238868 kernel: audit: type=1106 audit(1696274140.214:1146): pid=3398 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:40.239121 kernel: audit: type=1104 audit(1696274140.215:1147): pid=3398 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:40.239024 systemd-logind[1729]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:15:40.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.254:22-139.178.89.65:32800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:40.241215 systemd-logind[1729]: Removed session 10. Oct 2 19:15:40.780112 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084-rootfs.mount: Deactivated successfully. Oct 2 19:15:43.071762 kubelet[2868]: W1002 19:15:43.071689 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb39fa124_82b4_4e9f_9749_88aacfec9988.slice/cri-containerd-23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084.scope WatchSource:0}: task 23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084 not found: not found Oct 2 19:15:50.245701 systemd[1]: Started sshd@10-172.31.29.254:22-139.178.89.65:34982.service. Oct 2 19:15:50.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.254:22-139.178.89.65:34982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:50.248250 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:50.248345 kernel: audit: type=1130 audit(1696274150.245:1149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.254:22-139.178.89.65:34982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:50.429000 audit[3453]: USER_ACCT pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.430690 sshd[3453]: Accepted publickey for core from 139.178.89.65 port 34982 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:15:50.443048 kernel: audit: type=1101 audit(1696274150.429:1150): pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.442000 audit[3453]: CRED_ACQ pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.444423 sshd[3453]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:50.459008 kernel: audit: type=1103 audit(1696274150.442:1151): pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.459141 kernel: audit: type=1006 audit(1696274150.442:1152): pid=3453 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:15:50.442000 audit[3453]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff63c6e70 a2=3 a3=1 items=0 ppid=1 pid=3453 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:50.469615 kernel: audit: type=1300 audit(1696274150.442:1152): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff63c6e70 a2=3 a3=1 items=0 ppid=1 pid=3453 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:50.442000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:50.473627 kernel: audit: type=1327 audit(1696274150.442:1152): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:50.478741 systemd[1]: Started session-11.scope. Oct 2 19:15:50.480104 systemd-logind[1729]: New session 11 of user core. Oct 2 19:15:50.488000 audit[3453]: USER_START pid=3453 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.495000 audit[3455]: CRED_ACQ pid=3455 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.510903 kernel: audit: type=1105 audit(1696274150.488:1153): pid=3453 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.511034 kernel: audit: type=1103 audit(1696274150.495:1154): pid=3455 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.772366 sshd[3453]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:50.774000 audit[3453]: USER_END pid=3453 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.779376 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:15:50.780607 systemd[1]: sshd@10-172.31.29.254:22-139.178.89.65:34982.service: Deactivated successfully. Oct 2 19:15:50.776000 audit[3453]: CRED_DISP pid=3453 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.789418 systemd-logind[1729]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:15:50.798302 kernel: audit: type=1106 audit(1696274150.774:1155): pid=3453 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.798417 kernel: audit: type=1104 audit(1696274150.776:1156): pid=3453 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:15:50.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.254:22-139.178.89.65:34982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:50.800885 systemd-logind[1729]: Removed session 11. Oct 2 19:15:54.758429 kubelet[2868]: E1002 19:15:54.758389 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:16:00.806548 systemd[1]: Started sshd@11-172.31.29.254:22-139.178.89.65:40232.service. Oct 2 19:16:00.818396 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:00.818450 kernel: audit: type=1130 audit(1696274160.806:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.254:22-139.178.89.65:40232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:00.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.254:22-139.178.89.65:40232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:00.988000 audit[3467]: USER_ACCT pid=3467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:00.989750 sshd[3467]: Accepted publickey for core from 139.178.89.65 port 40232 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:01.001032 kernel: audit: type=1101 audit(1696274160.988:1159): pid=3467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.001000 audit[3467]: CRED_ACQ pid=3467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.008246 sshd[3467]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:01.018399 kernel: audit: type=1103 audit(1696274161.001:1160): pid=3467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.018492 kernel: audit: type=1006 audit(1696274161.001:1161): pid=3467 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:16:01.001000 audit[3467]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7d7a5d0 a2=3 a3=1 items=0 ppid=1 pid=3467 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:01.028803 kernel: audit: type=1300 audit(1696274161.001:1161): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7d7a5d0 a2=3 a3=1 items=0 ppid=1 pid=3467 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:01.001000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:01.033028 kernel: audit: type=1327 audit(1696274161.001:1161): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:01.040048 systemd[1]: Started session-12.scope. Oct 2 19:16:01.040078 systemd-logind[1729]: New session 12 of user core. Oct 2 19:16:01.049000 audit[3467]: USER_START pid=3467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.063120 kernel: audit: type=1105 audit(1696274161.049:1162): pid=3467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.063000 audit[3469]: CRED_ACQ pid=3469 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.074018 kernel: audit: type=1103 audit(1696274161.063:1163): pid=3469 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.338935 sshd[3467]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:01.340000 audit[3467]: USER_END pid=3467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.345538 systemd-logind[1729]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:16:01.347765 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:16:01.349675 systemd-logind[1729]: Removed session 12. Oct 2 19:16:01.350848 systemd[1]: sshd@11-172.31.29.254:22-139.178.89.65:40232.service: Deactivated successfully. Oct 2 19:16:01.340000 audit[3467]: CRED_DISP pid=3467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.362909 kernel: audit: type=1106 audit(1696274161.340:1164): pid=3467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.363043 kernel: audit: type=1104 audit(1696274161.340:1165): pid=3467 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:01.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.254:22-139.178.89.65:40232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.756888 kubelet[2868]: E1002 19:16:05.756846 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:16:11.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.254:22-139.178.89.65:49576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:11.371506 systemd[1]: Started sshd@12-172.31.29.254:22-139.178.89.65:49576.service. Oct 2 19:16:11.379006 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:11.379155 kernel: audit: type=1130 audit(1696274171.370:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.254:22-139.178.89.65:49576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:11.550000 audit[3480]: USER_ACCT pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.552316 sshd[3480]: Accepted publickey for core from 139.178.89.65 port 49576 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:11.556190 sshd[3480]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:11.554000 audit[3480]: CRED_ACQ pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.571825 kernel: audit: type=1101 audit(1696274171.550:1168): pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.572042 kernel: audit: type=1103 audit(1696274171.554:1169): pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.581259 kernel: audit: type=1006 audit(1696274171.554:1170): pid=3480 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:16:11.581386 kernel: audit: type=1300 audit(1696274171.554:1170): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffea31e30 a2=3 a3=1 items=0 ppid=1 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:11.554000 audit[3480]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffea31e30 a2=3 a3=1 items=0 ppid=1 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:11.580355 systemd[1]: Started session-13.scope. Oct 2 19:16:11.582312 systemd-logind[1729]: New session 13 of user core. Oct 2 19:16:11.554000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:11.593403 kernel: audit: type=1327 audit(1696274171.554:1170): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:11.594000 audit[3480]: USER_START pid=3480 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.608027 kernel: audit: type=1105 audit(1696274171.594:1171): pid=3480 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.607000 audit[3482]: CRED_ACQ pid=3482 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.618041 kernel: audit: type=1103 audit(1696274171.607:1172): pid=3482 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.887172 sshd[3480]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:11.888000 audit[3480]: USER_END pid=3480 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.890000 audit[3480]: CRED_DISP pid=3480 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.901576 systemd[1]: sshd@12-172.31.29.254:22-139.178.89.65:49576.service: Deactivated successfully. Oct 2 19:16:11.902835 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:16:11.910455 kernel: audit: type=1106 audit(1696274171.888:1173): pid=3480 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.910586 kernel: audit: type=1104 audit(1696274171.890:1174): pid=3480 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:11.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.254:22-139.178.89.65:49576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:11.912155 systemd-logind[1729]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:16:11.914103 systemd-logind[1729]: Removed session 13. Oct 2 19:16:17.756582 kubelet[2868]: E1002 19:16:17.756535 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:16:21.930855 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:21.931115 kernel: audit: type=1130 audit(1696274181.918:1176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.254:22-139.178.89.65:44464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:21.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.254:22-139.178.89.65:44464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:21.919568 systemd[1]: Started sshd@13-172.31.29.254:22-139.178.89.65:44464.service. Oct 2 19:16:22.102000 audit[3496]: USER_ACCT pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.110656 sshd[3496]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:22.111855 sshd[3496]: Accepted publickey for core from 139.178.89.65 port 44464 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:22.106000 audit[3496]: CRED_ACQ pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.123473 kernel: audit: type=1101 audit(1696274182.102:1177): pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.123601 kernel: audit: type=1103 audit(1696274182.106:1178): pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.129654 kernel: audit: type=1006 audit(1696274182.106:1179): pid=3496 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:16:22.106000 audit[3496]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff27acfe0 a2=3 a3=1 items=0 ppid=1 pid=3496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:22.140467 kernel: audit: type=1300 audit(1696274182.106:1179): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff27acfe0 a2=3 a3=1 items=0 ppid=1 pid=3496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:22.106000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:22.145299 kernel: audit: type=1327 audit(1696274182.106:1179): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:22.149888 systemd-logind[1729]: New session 14 of user core. Oct 2 19:16:22.150534 systemd[1]: Started session-14.scope. Oct 2 19:16:22.159000 audit[3496]: USER_START pid=3496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.173057 kernel: audit: type=1105 audit(1696274182.159:1180): pid=3496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.172000 audit[3498]: CRED_ACQ pid=3498 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.184017 kernel: audit: type=1103 audit(1696274182.172:1181): pid=3498 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.449312 sshd[3496]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:22.450000 audit[3496]: USER_END pid=3496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.454793 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:16:22.455966 systemd[1]: sshd@13-172.31.29.254:22-139.178.89.65:44464.service: Deactivated successfully. Oct 2 19:16:22.451000 audit[3496]: CRED_DISP pid=3496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.473585 kernel: audit: type=1106 audit(1696274182.450:1182): pid=3496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.473741 kernel: audit: type=1104 audit(1696274182.451:1183): pid=3496 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:22.473704 systemd-logind[1729]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:16:22.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.254:22-139.178.89.65:44464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:22.479224 systemd-logind[1729]: Removed session 14. Oct 2 19:16:26.395000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:26.395000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400261d660 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:26.395000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:26.418000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:26.418000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400179fdd0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:26.418000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:27.114031 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:16:27.114179 kernel: audit: type=1400 audit(1696274187.109:1187): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.109000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.109000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.131173 kernel: audit: type=1400 audit(1696274187.109:1188): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.131271 kernel: audit: type=1300 audit(1696274187.109:1188): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c6153e0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.109000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c6153e0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:27.153605 kernel: audit: type=1327 audit(1696274187.109:1188): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:27.153791 kernel: audit: type=1300 audit(1696274187.109:1187): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c8be920 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.109000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c8be920 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.109000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:27.176123 kernel: audit: type=1327 audit(1696274187.109:1187): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:27.111000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=4808 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.185856 kernel: audit: type=1400 audit(1696274187.111:1189): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=4808 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.185959 kernel: audit: type=1300 audit(1696274187.111:1189): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c7acd20 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.111000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c7acd20 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.111000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:27.208050 kernel: audit: type=1327 audit(1696274187.111:1189): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:27.208170 kernel: audit: type=1400 audit(1696274187.127:1190): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=4814 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.127000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=4814 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.127000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c615560 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:27.146000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.146000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c751a00 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.146000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:27.148000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:27.148000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c615680 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:16:27.148000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:16:30.760427 env[1746]: time="2023-10-02T19:16:30.760341873Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:16:30.780825 env[1746]: time="2023-10-02T19:16:30.780752836Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\"" Oct 2 19:16:30.781915 env[1746]: time="2023-10-02T19:16:30.781855368Z" level=info msg="StartContainer for \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\"" Oct 2 19:16:30.846295 systemd[1]: Started cri-containerd-a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da.scope. Oct 2 19:16:30.858637 systemd[1]: run-containerd-runc-k8s.io-a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da-runc.Ygx50G.mount: Deactivated successfully. Oct 2 19:16:30.894751 systemd[1]: cri-containerd-a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da.scope: Deactivated successfully. Oct 2 19:16:30.906294 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da-rootfs.mount: Deactivated successfully. Oct 2 19:16:30.923360 env[1746]: time="2023-10-02T19:16:30.923287706Z" level=info msg="shim disconnected" id=a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da Oct 2 19:16:30.923729 env[1746]: time="2023-10-02T19:16:30.923682041Z" level=warning msg="cleaning up after shim disconnected" id=a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da namespace=k8s.io Oct 2 19:16:30.923861 env[1746]: time="2023-10-02T19:16:30.923832114Z" level=info msg="cleaning up dead shim" Oct 2 19:16:30.950074 env[1746]: time="2023-10-02T19:16:30.950005339Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:16:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3532 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:16:30Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:16:30.950810 env[1746]: time="2023-10-02T19:16:30.950729773Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:16:30.951525 env[1746]: time="2023-10-02T19:16:30.951473130Z" level=error msg="Failed to pipe stderr of container \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\"" error="reading from a closed fifo" Oct 2 19:16:30.955789 env[1746]: time="2023-10-02T19:16:30.955703030Z" level=error msg="Failed to pipe stdout of container \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\"" error="reading from a closed fifo" Oct 2 19:16:30.957972 env[1746]: time="2023-10-02T19:16:30.957890886Z" level=error msg="StartContainer for \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:16:30.958425 kubelet[2868]: E1002 19:16:30.958379 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da" Oct 2 19:16:30.959163 kubelet[2868]: E1002 19:16:30.958805 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:16:30.959163 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:16:30.959163 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:16:30.959163 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-skvmh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:16:30.959163 kubelet[2868]: E1002 19:16:30.958919 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:16:31.166194 kubelet[2868]: I1002 19:16:31.165256 2868 scope.go:117] "RemoveContainer" containerID="23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084" Oct 2 19:16:31.166194 kubelet[2868]: I1002 19:16:31.165842 2868 scope.go:117] "RemoveContainer" containerID="23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084" Oct 2 19:16:31.174318 env[1746]: time="2023-10-02T19:16:31.173231238Z" level=info msg="RemoveContainer for \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\"" Oct 2 19:16:31.181717 env[1746]: time="2023-10-02T19:16:31.181649143Z" level=info msg="RemoveContainer for \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\" returns successfully" Oct 2 19:16:31.181886 env[1746]: time="2023-10-02T19:16:31.181672400Z" level=info msg="RemoveContainer for \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\"" Oct 2 19:16:31.181886 env[1746]: time="2023-10-02T19:16:31.181776344Z" level=info msg="RemoveContainer for \"23121b65341908bf489f9f409fbea1a7ad403a9c02355e61b6fa045cc6510084\" returns successfully" Oct 2 19:16:31.183010 kubelet[2868]: E1002 19:16:31.182925 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:16:31.622123 kubelet[2868]: E1002 19:16:31.622062 2868 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:16:32.017628 kubelet[2868]: E1002 19:16:32.017471 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:32.368041 kernel: kauditd_printk_skb: 8 callbacks suppressed Oct 2 19:16:32.368212 kernel: audit: type=1400 audit(1696274192.364:1193): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:32.364000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:32.364000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002792f00 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:32.389648 kernel: audit: type=1300 audit(1696274192.364:1193): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002792f00 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:32.389762 kernel: audit: type=1327 audit(1696274192.364:1193): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:32.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:32.371000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:32.409549 kernel: audit: type=1400 audit(1696274192.371:1194): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:32.409663 kernel: audit: type=1300 audit(1696274192.371:1194): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400261db60 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:32.371000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400261db60 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:32.371000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:32.432563 kernel: audit: type=1327 audit(1696274192.371:1194): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:32.374000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:32.442549 kernel: audit: type=1400 audit(1696274192.374:1195): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:32.442667 kernel: audit: type=1300 audit(1696274192.374:1195): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002793020 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:32.374000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002793020 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:32.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:32.465326 kernel: audit: type=1327 audit(1696274192.374:1195): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:32.465456 kernel: audit: type=1400 audit(1696274192.374:1196): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:32.374000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:32.374000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002793040 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:16:32.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:32.486962 systemd[1]: Started sshd@14-172.31.29.254:22-139.178.89.65:45164.service. Oct 2 19:16:32.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.254:22-139.178.89.65:45164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.666000 audit[3548]: USER_ACCT pid=3548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:32.668855 sshd[3548]: Accepted publickey for core from 139.178.89.65 port 45164 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:32.669000 audit[3548]: CRED_ACQ pid=3548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:32.670000 audit[3548]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf3c9710 a2=3 a3=1 items=0 ppid=1 pid=3548 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:32.670000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:32.671675 sshd[3548]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:32.680839 systemd[1]: Started session-15.scope. Oct 2 19:16:32.683142 systemd-logind[1729]: New session 15 of user core. Oct 2 19:16:32.691000 audit[3548]: USER_START pid=3548 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:32.698000 audit[3550]: CRED_ACQ pid=3550 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:32.973344 sshd[3548]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:32.974000 audit[3548]: USER_END pid=3548 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:32.974000 audit[3548]: CRED_DISP pid=3548 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:32.978850 systemd-logind[1729]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:16:32.979314 systemd[1]: sshd@14-172.31.29.254:22-139.178.89.65:45164.service: Deactivated successfully. Oct 2 19:16:32.980664 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:16:32.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.254:22-139.178.89.65:45164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:32.982522 systemd-logind[1729]: Removed session 15. Oct 2 19:16:34.034771 kubelet[2868]: W1002 19:16:34.034723 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb39fa124_82b4_4e9f_9749_88aacfec9988.slice/cri-containerd-a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da.scope WatchSource:0}: task a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da not found: not found Oct 2 19:16:37.018825 kubelet[2868]: E1002 19:16:37.018792 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:42.020896 kubelet[2868]: E1002 19:16:42.020829 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:42.756836 kubelet[2868]: E1002 19:16:42.756777 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:16:43.008043 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:16:43.008185 kernel: audit: type=1130 audit(1696274203.004:1206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.254:22-139.178.89.65:34332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:43.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.254:22-139.178.89.65:34332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:43.005200 systemd[1]: Started sshd@15-172.31.29.254:22-139.178.89.65:34332.service. Oct 2 19:16:43.181000 audit[3561]: USER_ACCT pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.183110 sshd[3561]: Accepted publickey for core from 139.178.89.65 port 34332 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:43.194026 kernel: audit: type=1101 audit(1696274203.181:1207): pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.194000 audit[3561]: CRED_ACQ pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.197007 sshd[3561]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:43.211789 kernel: audit: type=1103 audit(1696274203.194:1208): pid=3561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.211908 kernel: audit: type=1006 audit(1696274203.194:1209): pid=3561 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:16:43.194000 audit[3561]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5f71460 a2=3 a3=1 items=0 ppid=1 pid=3561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:43.223057 kernel: audit: type=1300 audit(1696274203.194:1209): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5f71460 a2=3 a3=1 items=0 ppid=1 pid=3561 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:43.194000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:43.226769 kernel: audit: type=1327 audit(1696274203.194:1209): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:43.231202 systemd-logind[1729]: New session 16 of user core. Oct 2 19:16:43.233816 systemd[1]: Started session-16.scope. Oct 2 19:16:43.242000 audit[3561]: USER_START pid=3561 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.249000 audit[3563]: CRED_ACQ pid=3563 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.264063 kernel: audit: type=1105 audit(1696274203.242:1210): pid=3561 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.264145 kernel: audit: type=1103 audit(1696274203.249:1211): pid=3563 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.527246 sshd[3561]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:43.528000 audit[3561]: USER_END pid=3561 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.533281 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:16:43.534943 systemd[1]: sshd@15-172.31.29.254:22-139.178.89.65:34332.service: Deactivated successfully. Oct 2 19:16:43.528000 audit[3561]: CRED_DISP pid=3561 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.550641 kernel: audit: type=1106 audit(1696274203.528:1212): pid=3561 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.550779 kernel: audit: type=1104 audit(1696274203.528:1213): pid=3561 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:43.550712 systemd-logind[1729]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:16:43.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.254:22-139.178.89.65:34332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:43.552733 systemd-logind[1729]: Removed session 16. Oct 2 19:16:47.022837 kubelet[2868]: E1002 19:16:47.022781 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:52.024501 kubelet[2868]: E1002 19:16:52.024443 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:53.560833 systemd[1]: Started sshd@16-172.31.29.254:22-139.178.89.65:49454.service. Oct 2 19:16:53.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.254:22-139.178.89.65:49454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:53.563822 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:16:53.563925 kernel: audit: type=1130 audit(1696274213.560:1215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.254:22-139.178.89.65:49454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:53.749000 audit[3576]: USER_ACCT pid=3576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:53.751080 sshd[3576]: Accepted publickey for core from 139.178.89.65 port 49454 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:53.764758 sshd[3576]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:53.762000 audit[3576]: CRED_ACQ pid=3576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:53.774702 kernel: audit: type=1101 audit(1696274213.749:1216): pid=3576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:53.774845 kernel: audit: type=1103 audit(1696274213.762:1217): pid=3576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:53.781565 kernel: audit: type=1006 audit(1696274213.762:1218): pid=3576 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:16:53.762000 audit[3576]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe61e37d0 a2=3 a3=1 items=0 ppid=1 pid=3576 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:53.792246 kernel: audit: type=1300 audit(1696274213.762:1218): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe61e37d0 a2=3 a3=1 items=0 ppid=1 pid=3576 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:53.762000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:53.795848 kernel: audit: type=1327 audit(1696274213.762:1218): proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:53.800788 systemd-logind[1729]: New session 17 of user core. Oct 2 19:16:53.802837 systemd[1]: Started session-17.scope. Oct 2 19:16:53.812000 audit[3576]: USER_START pid=3576 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:53.826558 kernel: audit: type=1105 audit(1696274213.812:1219): pid=3576 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:53.826694 kernel: audit: type=1103 audit(1696274213.824:1220): pid=3578 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:53.824000 audit[3578]: CRED_ACQ pid=3578 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.096478 sshd[3576]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:54.098000 audit[3576]: USER_END pid=3576 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.100000 audit[3576]: CRED_DISP pid=3576 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.111430 systemd[1]: sshd@16-172.31.29.254:22-139.178.89.65:49454.service: Deactivated successfully. Oct 2 19:16:54.120756 kernel: audit: type=1106 audit(1696274214.098:1221): pid=3576 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.120894 kernel: audit: type=1104 audit(1696274214.100:1222): pid=3576 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.112764 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:16:54.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.254:22-139.178.89.65:49454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:54.122975 systemd-logind[1729]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:16:54.132666 systemd-logind[1729]: Removed session 17. Oct 2 19:16:54.136650 systemd[1]: Started sshd@17-172.31.29.254:22-139.178.89.65:49456.service. Oct 2 19:16:54.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.254:22-139.178.89.65:49456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:54.316000 audit[3588]: USER_ACCT pid=3588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.317962 sshd[3588]: Accepted publickey for core from 139.178.89.65 port 49456 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:54.319000 audit[3588]: CRED_ACQ pid=3588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.319000 audit[3588]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6680690 a2=3 a3=1 items=0 ppid=1 pid=3588 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:54.319000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:54.321884 sshd[3588]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:54.331679 systemd[1]: Started session-18.scope. Oct 2 19:16:54.333414 systemd-logind[1729]: New session 18 of user core. Oct 2 19:16:54.341000 audit[3588]: USER_START pid=3588 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.347000 audit[3590]: CRED_ACQ pid=3590 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:54.756885 kubelet[2868]: E1002 19:16:54.756816 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:16:55.962968 sshd[3588]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:55.964000 audit[3588]: USER_END pid=3588 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:55.965000 audit[3588]: CRED_DISP pid=3588 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:55.969429 systemd-logind[1729]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:16:55.972060 systemd[1]: sshd@17-172.31.29.254:22-139.178.89.65:49456.service: Deactivated successfully. Oct 2 19:16:55.973439 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:16:55.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.254:22-139.178.89.65:49456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:55.975205 systemd-logind[1729]: Removed session 18. Oct 2 19:16:55.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.254:22-139.178.89.65:36628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:55.991414 systemd[1]: Started sshd@18-172.31.29.254:22-139.178.89.65:36628.service. Oct 2 19:16:56.169000 audit[3598]: USER_ACCT pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:56.170480 sshd[3598]: Accepted publickey for core from 139.178.89.65 port 36628 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:16:56.172000 audit[3598]: CRED_ACQ pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:56.172000 audit[3598]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffda2b360 a2=3 a3=1 items=0 ppid=1 pid=3598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:56.172000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:16:56.174331 sshd[3598]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:16:56.183103 systemd-logind[1729]: New session 19 of user core. Oct 2 19:16:56.183912 systemd[1]: Started session-19.scope. Oct 2 19:16:56.193000 audit[3598]: USER_START pid=3598 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:56.200000 audit[3600]: CRED_ACQ pid=3600 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:56.484319 sshd[3598]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:56.485000 audit[3598]: USER_END pid=3598 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:56.485000 audit[3598]: CRED_DISP pid=3598 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:16:56.490298 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:16:56.490332 systemd-logind[1729]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:16:56.492399 systemd-logind[1729]: Removed session 19. Oct 2 19:16:56.493891 systemd[1]: sshd@18-172.31.29.254:22-139.178.89.65:36628.service: Deactivated successfully. Oct 2 19:16:56.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.254:22-139.178.89.65:36628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:57.025482 kubelet[2868]: E1002 19:16:57.025431 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:02.026799 kubelet[2868]: E1002 19:17:02.026740 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:06.527135 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:17:06.527320 kernel: audit: type=1130 audit(1696274226.515:1242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.254:22-139.178.89.65:36664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:06.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.254:22-139.178.89.65:36664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:06.516043 systemd[1]: Started sshd@19-172.31.29.254:22-139.178.89.65:36664.service. Oct 2 19:17:06.695000 audit[3610]: USER_ACCT pid=3610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:06.696686 sshd[3610]: Accepted publickey for core from 139.178.89.65 port 36664 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:06.700655 sshd[3610]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:06.698000 audit[3610]: CRED_ACQ pid=3610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:06.716784 kernel: audit: type=1101 audit(1696274226.695:1243): pid=3610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:06.716920 kernel: audit: type=1103 audit(1696274226.698:1244): pid=3610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:06.722944 kernel: audit: type=1006 audit(1696274226.698:1245): pid=3610 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:17:06.698000 audit[3610]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe95d68c0 a2=3 a3=1 items=0 ppid=1 pid=3610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:06.733465 kernel: audit: type=1300 audit(1696274226.698:1245): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe95d68c0 a2=3 a3=1 items=0 ppid=1 pid=3610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:06.741811 systemd-logind[1729]: New session 20 of user core. Oct 2 19:17:06.742473 systemd[1]: Started session-20.scope. Oct 2 19:17:06.698000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:06.747820 kernel: audit: type=1327 audit(1696274226.698:1245): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:06.754000 audit[3610]: USER_START pid=3610 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:06.761000 audit[3612]: CRED_ACQ pid=3612 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:06.776734 kernel: audit: type=1105 audit(1696274226.754:1246): pid=3610 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:06.776840 kernel: audit: type=1103 audit(1696274226.761:1247): pid=3612 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:07.028437 kubelet[2868]: E1002 19:17:07.028386 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:07.036800 sshd[3610]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:07.037000 audit[3610]: USER_END pid=3610 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:07.044370 systemd-logind[1729]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:17:07.046514 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:17:07.049045 systemd-logind[1729]: Removed session 20. Oct 2 19:17:07.050309 systemd[1]: sshd@19-172.31.29.254:22-139.178.89.65:36664.service: Deactivated successfully. Oct 2 19:17:07.040000 audit[3610]: CRED_DISP pid=3610 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:07.060974 kernel: audit: type=1106 audit(1696274227.037:1248): pid=3610 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:07.061129 kernel: audit: type=1104 audit(1696274227.040:1249): pid=3610 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:07.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.254:22-139.178.89.65:36664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:08.757377 kubelet[2868]: E1002 19:17:08.757307 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:17:12.030046 kubelet[2868]: E1002 19:17:12.030009 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:17.031757 kubelet[2868]: E1002 19:17:17.031722 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:17.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.254:22-139.178.89.65:57552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:17.070252 systemd[1]: Started sshd@20-172.31.29.254:22-139.178.89.65:57552.service. Oct 2 19:17:17.072526 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:17:17.072657 kernel: audit: type=1130 audit(1696274237.069:1251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.254:22-139.178.89.65:57552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:17.252000 audit[3623]: USER_ACCT pid=3623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.253924 sshd[3623]: Accepted publickey for core from 139.178.89.65 port 57552 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:17.265082 kernel: audit: type=1101 audit(1696274237.252:1252): pid=3623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.265000 audit[3623]: CRED_ACQ pid=3623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.267404 sshd[3623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:17.283106 kernel: audit: type=1103 audit(1696274237.265:1253): pid=3623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.283260 kernel: audit: type=1006 audit(1696274237.265:1254): pid=3623 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:17:17.265000 audit[3623]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc504fa60 a2=3 a3=1 items=0 ppid=1 pid=3623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:17.297411 kernel: audit: type=1300 audit(1696274237.265:1254): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc504fa60 a2=3 a3=1 items=0 ppid=1 pid=3623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:17.298426 systemd-logind[1729]: New session 21 of user core. Oct 2 19:17:17.302730 kernel: audit: type=1327 audit(1696274237.265:1254): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:17.265000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:17.300128 systemd[1]: Started session-21.scope. Oct 2 19:17:17.309000 audit[3623]: USER_START pid=3623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.316000 audit[3625]: CRED_ACQ pid=3625 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.323116 kernel: audit: type=1105 audit(1696274237.309:1255): pid=3623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.333023 kernel: audit: type=1103 audit(1696274237.316:1256): pid=3625 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.589033 sshd[3623]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:17.590000 audit[3623]: USER_END pid=3623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.595785 systemd-logind[1729]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:17:17.598071 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:17:17.600065 systemd-logind[1729]: Removed session 21. Oct 2 19:17:17.590000 audit[3623]: CRED_DISP pid=3623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.601178 systemd[1]: sshd@20-172.31.29.254:22-139.178.89.65:57552.service: Deactivated successfully. Oct 2 19:17:17.612398 kernel: audit: type=1106 audit(1696274237.590:1257): pid=3623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.612600 kernel: audit: type=1104 audit(1696274237.590:1258): pid=3623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:17.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.254:22-139.178.89.65:57552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:21.756674 kubelet[2868]: E1002 19:17:21.756615 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:17:22.033996 kubelet[2868]: E1002 19:17:22.033834 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:26.396000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.398549 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:17:26.398620 kernel: audit: type=1400 audit(1696274246.396:1260): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.396000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ebeb40 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:26.419966 kernel: audit: type=1300 audit(1696274246.396:1260): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ebeb40 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:26.420093 kernel: audit: type=1327 audit(1696274246.396:1260): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:26.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:26.418000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.439873 kernel: audit: type=1400 audit(1696274246.418:1261): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:26.440025 kernel: audit: type=1300 audit(1696274246.418:1261): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001aa7c20 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:26.418000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001aa7c20 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:26.418000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:26.462448 kernel: audit: type=1327 audit(1696274246.418:1261): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:27.035855 kubelet[2868]: E1002 19:17:27.035794 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:27.110000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.110000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d7aef30 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:17:27.132495 kernel: audit: type=1400 audit(1696274247.110:1262): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.132617 kernel: audit: type=1300 audit(1696274247.110:1262): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d7aef30 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:17:27.132664 kernel: audit: type=1327 audit(1696274247.110:1262): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:27.110000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:27.111000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.152044 kernel: audit: type=1400 audit(1696274247.111:1263): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.111000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c8be7c0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:17:27.111000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:27.112000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=4808 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.112000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d9286f0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:17:27.112000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:27.128000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=4814 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.128000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d928720 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:17:27.128000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:27.147000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.147000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c845b40 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:17:27.147000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:27.149000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:27.149000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d7af0e0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:17:27.149000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:17:27.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.254:22-139.178.89.65:38038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:27.623287 systemd[1]: Started sshd@21-172.31.29.254:22-139.178.89.65:38038.service. Oct 2 19:17:27.802000 audit[3634]: USER_ACCT pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:27.803696 sshd[3634]: Accepted publickey for core from 139.178.89.65 port 38038 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:27.805000 audit[3634]: CRED_ACQ pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:27.805000 audit[3634]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6a743a0 a2=3 a3=1 items=0 ppid=1 pid=3634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:27.805000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:27.807361 sshd[3634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:27.816611 systemd[1]: Started session-22.scope. Oct 2 19:17:27.817132 systemd-logind[1729]: New session 22 of user core. Oct 2 19:17:27.826000 audit[3634]: USER_START pid=3634 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:27.833000 audit[3636]: CRED_ACQ pid=3636 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:28.101056 sshd[3634]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:28.102000 audit[3634]: USER_END pid=3634 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:28.102000 audit[3634]: CRED_DISP pid=3634 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:28.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.254:22-139.178.89.65:38038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:28.107265 systemd-logind[1729]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:17:28.107843 systemd[1]: sshd@21-172.31.29.254:22-139.178.89.65:38038.service: Deactivated successfully. Oct 2 19:17:28.109301 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:17:28.111697 systemd-logind[1729]: Removed session 22. Oct 2 19:17:32.037661 kubelet[2868]: E1002 19:17:32.037611 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:32.371928 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:17:32.372098 kernel: audit: type=1400 audit(1696274252.368:1277): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:32.368000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:32.368000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ce09a0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:32.393694 kernel: audit: type=1300 audit(1696274252.368:1277): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ce09a0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:32.393774 kernel: audit: type=1327 audit(1696274252.368:1277): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:32.368000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:32.371000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:32.413351 kernel: audit: type=1400 audit(1696274252.371:1278): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:32.413430 kernel: audit: type=1300 audit(1696274252.371:1278): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400065c180 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:32.371000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400065c180 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:32.371000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:32.436006 kernel: audit: type=1327 audit(1696274252.371:1278): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:32.436081 kernel: audit: type=1400 audit(1696274252.371:1279): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:32.371000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:32.371000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ce0ba0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:32.457425 kernel: audit: type=1300 audit(1696274252.371:1279): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ce0ba0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:32.457518 kernel: audit: type=1327 audit(1696274252.371:1279): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:32.371000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:32.371000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:32.476739 kernel: audit: type=1400 audit(1696274252.371:1280): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:32.371000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ce0be0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:17:32.371000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:35.756965 kubelet[2868]: E1002 19:17:35.756907 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:17:37.040205 kubelet[2868]: E1002 19:17:37.040152 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:38.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.254:22-139.178.89.65:55382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:38.133330 systemd[1]: Started sshd@22-172.31.29.254:22-139.178.89.65:55382.service. Oct 2 19:17:38.135771 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:17:38.135843 kernel: audit: type=1130 audit(1696274258.132:1281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.254:22-139.178.89.65:55382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:38.311000 audit[3647]: USER_ACCT pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.313777 sshd[3647]: Accepted publickey for core from 139.178.89.65 port 55382 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:38.317563 sshd[3647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:38.311000 audit[3647]: CRED_ACQ pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.332781 kernel: audit: type=1101 audit(1696274258.311:1282): pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.332897 kernel: audit: type=1103 audit(1696274258.311:1283): pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.339207 kernel: audit: type=1006 audit(1696274258.311:1284): pid=3647 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:17:38.344949 systemd-logind[1729]: New session 23 of user core. Oct 2 19:17:38.348075 systemd[1]: Started session-23.scope. Oct 2 19:17:38.311000 audit[3647]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6dfa730 a2=3 a3=1 items=0 ppid=1 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:38.360534 kernel: audit: type=1300 audit(1696274258.311:1284): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6dfa730 a2=3 a3=1 items=0 ppid=1 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:38.311000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:38.367564 kernel: audit: type=1327 audit(1696274258.311:1284): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:38.376000 audit[3647]: USER_START pid=3647 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.383000 audit[3649]: CRED_ACQ pid=3649 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.389134 kernel: audit: type=1105 audit(1696274258.376:1285): pid=3647 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.399035 kernel: audit: type=1103 audit(1696274258.383:1286): pid=3649 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.658605 sshd[3647]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:38.660000 audit[3647]: USER_END pid=3647 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.660000 audit[3647]: CRED_DISP pid=3647 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.676183 systemd[1]: sshd@22-172.31.29.254:22-139.178.89.65:55382.service: Deactivated successfully. Oct 2 19:17:38.677428 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:17:38.684322 kernel: audit: type=1106 audit(1696274258.660:1287): pid=3647 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.684457 kernel: audit: type=1104 audit(1696274258.660:1288): pid=3647 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:38.684447 systemd-logind[1729]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:17:38.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.254:22-139.178.89.65:55382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:38.687223 systemd-logind[1729]: Removed session 23. Oct 2 19:17:42.042131 kubelet[2868]: E1002 19:17:42.042096 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:46.756970 kubelet[2868]: E1002 19:17:46.756930 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:17:47.043850 kubelet[2868]: E1002 19:17:47.043709 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:48.689898 systemd[1]: Started sshd@23-172.31.29.254:22-139.178.89.65:40158.service. Oct 2 19:17:48.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.254:22-139.178.89.65:40158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:48.698029 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:17:48.698189 kernel: audit: type=1130 audit(1696274268.689:1290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.254:22-139.178.89.65:40158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:48.869000 audit[3661]: USER_ACCT pid=3661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:48.871077 sshd[3661]: Accepted publickey for core from 139.178.89.65 port 40158 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:48.881029 kernel: audit: type=1101 audit(1696274268.869:1291): pid=3661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:48.882000 audit[3661]: CRED_ACQ pid=3661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:48.884629 sshd[3661]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:48.900547 kernel: audit: type=1103 audit(1696274268.882:1292): pid=3661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:48.900681 kernel: audit: type=1006 audit(1696274268.882:1293): pid=3661 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:17:48.882000 audit[3661]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0bb4d00 a2=3 a3=1 items=0 ppid=1 pid=3661 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:48.911092 kernel: audit: type=1300 audit(1696274268.882:1293): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0bb4d00 a2=3 a3=1 items=0 ppid=1 pid=3661 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:48.882000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:48.916388 kernel: audit: type=1327 audit(1696274268.882:1293): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:48.916697 systemd-logind[1729]: New session 24 of user core. Oct 2 19:17:48.916740 systemd[1]: Started session-24.scope. Oct 2 19:17:48.926000 audit[3661]: USER_START pid=3661 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:48.939025 kernel: audit: type=1105 audit(1696274268.926:1294): pid=3661 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:48.939000 audit[3663]: CRED_ACQ pid=3663 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:48.951030 kernel: audit: type=1103 audit(1696274268.939:1295): pid=3663 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:49.226141 sshd[3661]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:49.229000 audit[3661]: USER_END pid=3661 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:49.233848 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:17:49.235071 systemd[1]: sshd@23-172.31.29.254:22-139.178.89.65:40158.service: Deactivated successfully. Oct 2 19:17:49.230000 audit[3661]: CRED_DISP pid=3661 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:49.251750 kernel: audit: type=1106 audit(1696274269.229:1296): pid=3661 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:49.251874 kernel: audit: type=1104 audit(1696274269.230:1297): pid=3661 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:49.251896 systemd-logind[1729]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:17:49.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.254:22-139.178.89.65:40158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:49.253511 systemd-logind[1729]: Removed session 24. Oct 2 19:17:52.045311 kubelet[2868]: E1002 19:17:52.045273 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:57.047702 kubelet[2868]: E1002 19:17:57.047666 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:59.264214 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:17:59.264354 kernel: audit: type=1130 audit(1696274279.257:1299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.254:22-139.178.89.65:33676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:59.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.254:22-139.178.89.65:33676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:59.258202 systemd[1]: Started sshd@24-172.31.29.254:22-139.178.89.65:33676.service. Oct 2 19:17:59.443000 audit[3673]: USER_ACCT pid=3673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.444787 sshd[3673]: Accepted publickey for core from 139.178.89.65 port 33676 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:17:59.456106 kernel: audit: type=1101 audit(1696274279.443:1300): pid=3673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.456000 audit[3673]: CRED_ACQ pid=3673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.458398 sshd[3673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:17:59.468163 kernel: audit: type=1103 audit(1696274279.456:1301): pid=3673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.468340 kernel: audit: type=1006 audit(1696274279.456:1302): pid=3673 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:17:59.456000 audit[3673]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd90ef70 a2=3 a3=1 items=0 ppid=1 pid=3673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.484787 kernel: audit: type=1300 audit(1696274279.456:1302): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd90ef70 a2=3 a3=1 items=0 ppid=1 pid=3673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:17:59.456000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:59.490840 kernel: audit: type=1327 audit(1696274279.456:1302): proctitle=737368643A20636F7265205B707269765D Oct 2 19:17:59.495111 systemd-logind[1729]: New session 25 of user core. Oct 2 19:17:59.495541 systemd[1]: Started session-25.scope. Oct 2 19:17:59.505000 audit[3673]: USER_START pid=3673 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.510000 audit[3675]: CRED_ACQ pid=3675 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.527462 kernel: audit: type=1105 audit(1696274279.505:1303): pid=3673 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.527564 kernel: audit: type=1103 audit(1696274279.510:1304): pid=3675 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.764445 env[1746]: time="2023-10-02T19:17:59.764368645Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:17:59.787566 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount295071142.mount: Deactivated successfully. Oct 2 19:17:59.793809 env[1746]: time="2023-10-02T19:17:59.793703371Z" level=info msg="CreateContainer within sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4\"" Oct 2 19:17:59.794659 env[1746]: time="2023-10-02T19:17:59.794611710Z" level=info msg="StartContainer for \"b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4\"" Oct 2 19:17:59.837687 sshd[3673]: pam_unix(sshd:session): session closed for user core Oct 2 19:17:59.841000 audit[3673]: USER_END pid=3673 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.859861 systemd[1]: sshd@24-172.31.29.254:22-139.178.89.65:33676.service: Deactivated successfully. Oct 2 19:17:59.864062 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:17:59.876466 kernel: audit: type=1106 audit(1696274279.841:1305): pid=3673 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.876571 kernel: audit: type=1104 audit(1696274279.855:1306): pid=3673 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.855000 audit[3673]: CRED_DISP pid=3673 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:17:59.878268 systemd-logind[1729]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:17:59.882104 systemd-logind[1729]: Removed session 25. Oct 2 19:17:59.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.254:22-139.178.89.65:33676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:17:59.890501 systemd[1]: Started cri-containerd-b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4.scope. Oct 2 19:17:59.915060 systemd[1]: cri-containerd-b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4.scope: Deactivated successfully. Oct 2 19:17:59.939205 env[1746]: time="2023-10-02T19:17:59.939117057Z" level=info msg="shim disconnected" id=b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4 Oct 2 19:17:59.939205 env[1746]: time="2023-10-02T19:17:59.939196138Z" level=warning msg="cleaning up after shim disconnected" id=b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4 namespace=k8s.io Oct 2 19:17:59.939555 env[1746]: time="2023-10-02T19:17:59.939219514Z" level=info msg="cleaning up dead shim" Oct 2 19:17:59.967621 env[1746]: time="2023-10-02T19:17:59.967535728Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:17:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3709 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:17:59Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:17:59.968196 env[1746]: time="2023-10-02T19:17:59.968062582Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:17:59.969083 env[1746]: time="2023-10-02T19:17:59.968613221Z" level=error msg="Failed to pipe stdout of container \"b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4\"" error="reading from a closed fifo" Oct 2 19:17:59.969291 env[1746]: time="2023-10-02T19:17:59.968652797Z" level=error msg="Failed to pipe stderr of container \"b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4\"" error="reading from a closed fifo" Oct 2 19:17:59.974140 env[1746]: time="2023-10-02T19:17:59.974059928Z" level=error msg="StartContainer for \"b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:17:59.974934 kubelet[2868]: E1002 19:17:59.974486 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4" Oct 2 19:17:59.974934 kubelet[2868]: E1002 19:17:59.974622 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:17:59.974934 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:17:59.974934 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:17:59.974934 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-skvmh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:17:59.974934 kubelet[2868]: E1002 19:17:59.974680 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:18:00.399931 kubelet[2868]: I1002 19:18:00.399330 2868 scope.go:117] "RemoveContainer" containerID="a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da" Oct 2 19:18:00.399931 kubelet[2868]: I1002 19:18:00.399887 2868 scope.go:117] "RemoveContainer" containerID="a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da" Oct 2 19:18:00.403695 env[1746]: time="2023-10-02T19:18:00.403643321Z" level=info msg="RemoveContainer for \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\"" Oct 2 19:18:00.404060 env[1746]: time="2023-10-02T19:18:00.403654673Z" level=info msg="RemoveContainer for \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\"" Oct 2 19:18:00.404280 env[1746]: time="2023-10-02T19:18:00.404220983Z" level=error msg="RemoveContainer for \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\" failed" error="failed to set removing state for container \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\": container is already in removing state" Oct 2 19:18:00.405079 kubelet[2868]: E1002 19:18:00.404703 2868 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\": container is already in removing state" containerID="a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da" Oct 2 19:18:00.405079 kubelet[2868]: E1002 19:18:00.404779 2868 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da": container is already in removing state; Skipping pod "cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)" Oct 2 19:18:00.405960 kubelet[2868]: E1002 19:18:00.405683 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:18:00.411806 env[1746]: time="2023-10-02T19:18:00.411734114Z" level=info msg="RemoveContainer for \"a8bcd429ee2726bebaa32d3cc46f1776a4d8f68b2ef1801e9eb709c9f116f3da\" returns successfully" Oct 2 19:18:00.779350 systemd[1]: run-containerd-runc-k8s.io-b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4-runc.ycnLZS.mount: Deactivated successfully. Oct 2 19:18:00.779965 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4-rootfs.mount: Deactivated successfully. Oct 2 19:18:02.050167 kubelet[2868]: E1002 19:18:02.050104 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:03.044404 kubelet[2868]: W1002 19:18:03.044332 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb39fa124_82b4_4e9f_9749_88aacfec9988.slice/cri-containerd-b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4.scope WatchSource:0}: task b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4 not found: not found Oct 2 19:18:07.051227 kubelet[2868]: E1002 19:18:07.051145 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:09.870325 systemd[1]: Started sshd@25-172.31.29.254:22-139.178.89.65:42068.service. Oct 2 19:18:09.874025 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:09.874157 kernel: audit: type=1130 audit(1696274289.872:1308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.254:22-139.178.89.65:42068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:09.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.254:22-139.178.89.65:42068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:10.053000 audit[3723]: USER_ACCT pid=3723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.054872 sshd[3723]: Accepted publickey for core from 139.178.89.65 port 42068 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:10.066129 kernel: audit: type=1101 audit(1696274290.053:1309): pid=3723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.066000 audit[3723]: CRED_ACQ pid=3723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.073240 sshd[3723]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:10.078029 kernel: audit: type=1103 audit(1696274290.066:1310): pid=3723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.066000 audit[3723]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd06c0e30 a2=3 a3=1 items=0 ppid=1 pid=3723 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:10.083127 systemd[1]: Started session-26.scope. Oct 2 19:18:10.085573 systemd-logind[1729]: New session 26 of user core. Oct 2 19:18:10.094423 kernel: audit: type=1006 audit(1696274290.066:1311): pid=3723 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:18:10.094565 kernel: audit: type=1300 audit(1696274290.066:1311): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd06c0e30 a2=3 a3=1 items=0 ppid=1 pid=3723 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:10.094626 kernel: audit: type=1327 audit(1696274290.066:1311): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:10.066000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:10.099000 audit[3723]: USER_START pid=3723 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.113138 kernel: audit: type=1105 audit(1696274290.099:1312): pid=3723 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.112000 audit[3725]: CRED_ACQ pid=3725 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.124125 kernel: audit: type=1103 audit(1696274290.112:1313): pid=3725 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.387869 sshd[3723]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:10.388000 audit[3723]: USER_END pid=3723 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.393250 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:18:10.394484 systemd[1]: sshd@25-172.31.29.254:22-139.178.89.65:42068.service: Deactivated successfully. Oct 2 19:18:10.389000 audit[3723]: CRED_DISP pid=3723 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.403110 kernel: audit: type=1106 audit(1696274290.388:1314): pid=3723 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.254:22-139.178.89.65:42068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:10.412592 systemd-logind[1729]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:18:10.414252 kernel: audit: type=1104 audit(1696274290.389:1315): pid=3723 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:10.414759 systemd-logind[1729]: Removed session 26. Oct 2 19:18:12.052085 kubelet[2868]: E1002 19:18:12.052050 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:12.756465 kubelet[2868]: E1002 19:18:12.756415 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:18:17.054257 kubelet[2868]: E1002 19:18:17.054220 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:20.418388 systemd[1]: Started sshd@26-172.31.29.254:22-139.178.89.65:35838.service. Oct 2 19:18:20.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.254:22-139.178.89.65:35838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:20.421018 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:20.421125 kernel: audit: type=1130 audit(1696274300.417:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.254:22-139.178.89.65:35838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:20.592000 audit[3738]: USER_ACCT pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.593411 sshd[3738]: Accepted publickey for core from 139.178.89.65 port 35838 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:20.605058 kernel: audit: type=1101 audit(1696274300.592:1318): pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.604000 audit[3738]: CRED_ACQ pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.606867 sshd[3738]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:20.621880 kernel: audit: type=1103 audit(1696274300.604:1319): pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.622051 kernel: audit: type=1006 audit(1696274300.604:1320): pid=3738 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:18:20.604000 audit[3738]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdef8a300 a2=3 a3=1 items=0 ppid=1 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:20.633963 kernel: audit: type=1300 audit(1696274300.604:1320): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdef8a300 a2=3 a3=1 items=0 ppid=1 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:20.604000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:20.638061 kernel: audit: type=1327 audit(1696274300.604:1320): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:20.642771 systemd-logind[1729]: New session 27 of user core. Oct 2 19:18:20.645399 systemd[1]: Started session-27.scope. Oct 2 19:18:20.654000 audit[3738]: USER_START pid=3738 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.655000 audit[3740]: CRED_ACQ pid=3740 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.676844 kernel: audit: type=1105 audit(1696274300.654:1321): pid=3738 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.677042 kernel: audit: type=1103 audit(1696274300.655:1322): pid=3740 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.926659 sshd[3738]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:20.927000 audit[3738]: USER_END pid=3738 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.934891 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:18:20.936254 systemd[1]: sshd@26-172.31.29.254:22-139.178.89.65:35838.service: Deactivated successfully. Oct 2 19:18:20.927000 audit[3738]: CRED_DISP pid=3738 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.950126 kernel: audit: type=1106 audit(1696274300.927:1323): pid=3738 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.950257 kernel: audit: type=1104 audit(1696274300.927:1324): pid=3738 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:20.941116 systemd-logind[1729]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:18:20.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.254:22-139.178.89.65:35838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:20.951114 systemd-logind[1729]: Removed session 27. Oct 2 19:18:22.055972 kubelet[2868]: E1002 19:18:22.055867 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:23.756966 kubelet[2868]: E1002 19:18:23.756912 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rjtsx_kube-system(b39fa124-82b4-4e9f-9749-88aacfec9988)\"" pod="kube-system/cilium-rjtsx" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" Oct 2 19:18:26.396000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.399294 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:18:26.399396 kernel: audit: type=1400 audit(1696274306.396:1326): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.396000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001391900 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:18:26.420625 kernel: audit: type=1300 audit(1696274306.396:1326): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001391900 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:18:26.420753 kernel: audit: type=1327 audit(1696274306.396:1326): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:26.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:26.418000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.440516 kernel: audit: type=1400 audit(1696274306.418:1327): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:26.440594 kernel: audit: type=1300 audit(1696274306.418:1327): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012b7d40 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:18:26.418000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012b7d40 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:18:26.418000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:26.463140 kernel: audit: type=1327 audit(1696274306.418:1327): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:27.057249 kubelet[2868]: E1002 19:18:27.057195 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:27.111000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.111000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e445f20 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:18:27.134762 kernel: audit: type=1400 audit(1696274307.111:1328): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.134941 kernel: audit: type=1300 audit(1696274307.111:1328): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e445f20 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:18:27.135033 kernel: audit: type=1327 audit(1696274307.111:1328): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:27.111000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:27.111000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.154634 kernel: audit: type=1400 audit(1696274307.111:1329): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.111000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a8df9e0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:18:27.111000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:27.122000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=4808 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.122000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e445f80 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:18:27.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:27.129000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=4814 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.129000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010cd0150 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:18:27.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:27.148000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.148000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a8d3a80 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:18:27.148000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:27.150000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:27.150000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010cd0270 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:18:27.150000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:18:30.959722 systemd[1]: Started sshd@27-172.31.29.254:22-139.178.89.65:48560.service. Oct 2 19:18:30.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.254:22-139.178.89.65:48560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:31.141000 audit[3750]: USER_ACCT pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.144900 sshd[3750]: Accepted publickey for core from 139.178.89.65 port 48560 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:31.144000 audit[3750]: CRED_ACQ pid=3750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.144000 audit[3750]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec136cf0 a2=3 a3=1 items=0 ppid=1 pid=3750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.144000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:31.146170 sshd[3750]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:31.156632 systemd[1]: Started session-28.scope. Oct 2 19:18:31.158498 systemd-logind[1729]: New session 28 of user core. Oct 2 19:18:31.166000 audit[3750]: USER_START pid=3750 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.173000 audit[3752]: CRED_ACQ pid=3752 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.447246 sshd[3750]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:31.456920 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 19:18:31.457099 kernel: audit: type=1106 audit(1696274311.448:1340): pid=3750 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.448000 audit[3750]: USER_END pid=3750 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.454509 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:18:31.455627 systemd[1]: sshd@27-172.31.29.254:22-139.178.89.65:48560.service: Deactivated successfully. Oct 2 19:18:31.451000 audit[3750]: CRED_DISP pid=3750 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.464418 systemd-logind[1729]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:18:31.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.254:22-139.178.89.65:48560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:31.483450 kernel: audit: type=1104 audit(1696274311.451:1341): pid=3750 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.483595 kernel: audit: type=1131 audit(1696274311.455:1342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.254:22-139.178.89.65:48560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:31.484146 systemd[1]: Started sshd@28-172.31.29.254:22-139.178.89.65:48562.service. Oct 2 19:18:31.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.254:22-139.178.89.65:48562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:31.488024 systemd-logind[1729]: Removed session 28. Oct 2 19:18:31.496957 kernel: audit: type=1130 audit(1696274311.483:1343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.254:22-139.178.89.65:48562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:31.665000 audit[3763]: USER_ACCT pid=3763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.668914 sshd[3763]: Accepted publickey for core from 139.178.89.65 port 48562 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:31.670617 sshd[3763]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:31.668000 audit[3763]: CRED_ACQ pid=3763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.686226 kernel: audit: type=1101 audit(1696274311.665:1344): pid=3763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.686349 kernel: audit: type=1103 audit(1696274311.668:1345): pid=3763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.692671 kernel: audit: type=1006 audit(1696274311.668:1346): pid=3763 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 19:18:31.668000 audit[3763]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1ad95a0 a2=3 a3=1 items=0 ppid=1 pid=3763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.702974 kernel: audit: type=1300 audit(1696274311.668:1346): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1ad95a0 a2=3 a3=1 items=0 ppid=1 pid=3763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:31.668000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:31.707371 kernel: audit: type=1327 audit(1696274311.668:1346): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:31.714699 systemd[1]: Started session-29.scope. Oct 2 19:18:31.715752 systemd-logind[1729]: New session 29 of user core. Oct 2 19:18:31.724000 audit[3763]: USER_START pid=3763 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.731000 audit[3765]: CRED_ACQ pid=3765 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:31.738121 kernel: audit: type=1105 audit(1696274311.724:1347): pid=3763 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:32.058712 kubelet[2868]: E1002 19:18:32.058669 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:32.371000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:32.371000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40015fc260 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:18:32.371000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:32.373000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:32.373000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017ae2a0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:18:32.373000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:32.375000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:32.375000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:32.375000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017ae2e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:18:32.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:32.375000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40015fc380 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:18:32.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:34.351119 env[1746]: time="2023-10-02T19:18:34.343461053Z" level=info msg="StopPodSandbox for \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\"" Oct 2 19:18:34.351119 env[1746]: time="2023-10-02T19:18:34.343605955Z" level=info msg="Container to stop \"b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:18:34.349915 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271-shm.mount: Deactivated successfully. Oct 2 19:18:34.384000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:18:34.384788 systemd[1]: cri-containerd-a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271.scope: Deactivated successfully. Oct 2 19:18:34.390000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:18:34.401817 env[1746]: time="2023-10-02T19:18:34.401757107Z" level=info msg="StopContainer for \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\" with timeout 30 (s)" Oct 2 19:18:34.405686 env[1746]: time="2023-10-02T19:18:34.405609251Z" level=info msg="Stop container \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\" with signal terminated" Oct 2 19:18:34.475778 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271-rootfs.mount: Deactivated successfully. Oct 2 19:18:34.481000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:18:34.481476 systemd[1]: cri-containerd-1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197.scope: Deactivated successfully. Oct 2 19:18:34.485000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:18:34.495674 env[1746]: time="2023-10-02T19:18:34.495594631Z" level=info msg="shim disconnected" id=a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271 Oct 2 19:18:34.496125 env[1746]: time="2023-10-02T19:18:34.496071396Z" level=warning msg="cleaning up after shim disconnected" id=a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271 namespace=k8s.io Oct 2 19:18:34.496313 env[1746]: time="2023-10-02T19:18:34.496275674Z" level=info msg="cleaning up dead shim" Oct 2 19:18:34.550177 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197-rootfs.mount: Deactivated successfully. Oct 2 19:18:34.552603 env[1746]: time="2023-10-02T19:18:34.552546361Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3803 runtime=io.containerd.runc.v2\n" Oct 2 19:18:34.553699 env[1746]: time="2023-10-02T19:18:34.553635983Z" level=info msg="TearDown network for sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" successfully" Oct 2 19:18:34.554128 env[1746]: time="2023-10-02T19:18:34.554086455Z" level=info msg="StopPodSandbox for \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" returns successfully" Oct 2 19:18:34.559345 env[1746]: time="2023-10-02T19:18:34.559275351Z" level=info msg="shim disconnected" id=1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197 Oct 2 19:18:34.559746 env[1746]: time="2023-10-02T19:18:34.559694491Z" level=warning msg="cleaning up after shim disconnected" id=1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197 namespace=k8s.io Oct 2 19:18:34.559914 env[1746]: time="2023-10-02T19:18:34.559882268Z" level=info msg="cleaning up dead shim" Oct 2 19:18:34.592222 env[1746]: time="2023-10-02T19:18:34.592165036Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3829 runtime=io.containerd.runc.v2\n" Oct 2 19:18:34.595143 env[1746]: time="2023-10-02T19:18:34.595091455Z" level=info msg="StopContainer for \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\" returns successfully" Oct 2 19:18:34.596130 env[1746]: time="2023-10-02T19:18:34.596075572Z" level=info msg="StopPodSandbox for \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\"" Oct 2 19:18:34.596390 env[1746]: time="2023-10-02T19:18:34.596339622Z" level=info msg="Container to stop \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:18:34.599246 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a-shm.mount: Deactivated successfully. Oct 2 19:18:34.619643 systemd[1]: cri-containerd-035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a.scope: Deactivated successfully. Oct 2 19:18:34.619000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:18:34.623000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:18:34.674629 kubelet[2868]: I1002 19:18:34.674573 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-skvmh\" (UniqueName: \"kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-kube-api-access-skvmh\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.674649 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-config-path\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.674694 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-run\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.674734 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-xtables-lock\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.674782 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b39fa124-82b4-4e9f-9749-88aacfec9988-clustermesh-secrets\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.674826 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-host-proc-sys-kernel\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.674864 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-lib-modules\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.674903 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-cgroup\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.674943 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-hubble-tls\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.675017 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-host-proc-sys-net\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.675063 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cni-path\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.675103 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-hostproc\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.675144 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-bpf-maps\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.675276 kubelet[2868]: I1002 19:18:34.675182 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-etc-cni-netd\") pod \"b39fa124-82b4-4e9f-9749-88aacfec9988\" (UID: \"b39fa124-82b4-4e9f-9749-88aacfec9988\") " Oct 2 19:18:34.676219 kubelet[2868]: I1002 19:18:34.675283 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.676219 kubelet[2868]: I1002 19:18:34.675779 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.680405 kubelet[2868]: I1002 19:18:34.678351 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.680405 kubelet[2868]: I1002 19:18:34.678443 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.680405 kubelet[2868]: I1002 19:18:34.678460 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.680405 kubelet[2868]: I1002 19:18:34.678970 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.680405 kubelet[2868]: I1002 19:18:34.679472 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.680405 kubelet[2868]: I1002 19:18:34.679538 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cni-path" (OuterVolumeSpecName: "cni-path") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.680405 kubelet[2868]: I1002 19:18:34.679580 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-hostproc" (OuterVolumeSpecName: "hostproc") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.680405 kubelet[2868]: I1002 19:18:34.679619 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:18:34.688626 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a-rootfs.mount: Deactivated successfully. Oct 2 19:18:34.699961 kubelet[2868]: I1002 19:18:34.699893 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:34.701266 kubelet[2868]: I1002 19:18:34.701220 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b39fa124-82b4-4e9f-9749-88aacfec9988-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:18:34.703742 env[1746]: time="2023-10-02T19:18:34.703398351Z" level=info msg="shim disconnected" id=035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a Oct 2 19:18:34.703742 env[1746]: time="2023-10-02T19:18:34.703488340Z" level=warning msg="cleaning up after shim disconnected" id=035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a namespace=k8s.io Oct 2 19:18:34.703742 env[1746]: time="2023-10-02T19:18:34.703512665Z" level=info msg="cleaning up dead shim" Oct 2 19:18:34.706406 kubelet[2868]: I1002 19:18:34.706338 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-kube-api-access-skvmh" (OuterVolumeSpecName: "kube-api-access-skvmh") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "kube-api-access-skvmh". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:34.707860 kubelet[2868]: I1002 19:18:34.707770 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "b39fa124-82b4-4e9f-9749-88aacfec9988" (UID: "b39fa124-82b4-4e9f-9749-88aacfec9988"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:18:34.730846 env[1746]: time="2023-10-02T19:18:34.730789754Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3865 runtime=io.containerd.runc.v2\n" Oct 2 19:18:34.731624 env[1746]: time="2023-10-02T19:18:34.731580538Z" level=info msg="TearDown network for sandbox \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\" successfully" Oct 2 19:18:34.731798 env[1746]: time="2023-10-02T19:18:34.731764583Z" level=info msg="StopPodSandbox for \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\" returns successfully" Oct 2 19:18:34.775918 kubelet[2868]: I1002 19:18:34.775833 2868 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-host-proc-sys-net\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.775918 kubelet[2868]: I1002 19:18:34.775917 2868 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cni-path\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776192 kubelet[2868]: I1002 19:18:34.775967 2868 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-hostproc\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776192 kubelet[2868]: I1002 19:18:34.776035 2868 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-bpf-maps\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776192 kubelet[2868]: I1002 19:18:34.776063 2868 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-etc-cni-netd\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776192 kubelet[2868]: I1002 19:18:34.776150 2868 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-skvmh\" (UniqueName: \"kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-kube-api-access-skvmh\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776485 kubelet[2868]: I1002 19:18:34.776198 2868 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-config-path\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776485 kubelet[2868]: I1002 19:18:34.776227 2868 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-run\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776485 kubelet[2868]: I1002 19:18:34.776251 2868 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-xtables-lock\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776485 kubelet[2868]: I1002 19:18:34.776310 2868 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b39fa124-82b4-4e9f-9749-88aacfec9988-clustermesh-secrets\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776485 kubelet[2868]: I1002 19:18:34.776336 2868 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-host-proc-sys-kernel\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776485 kubelet[2868]: I1002 19:18:34.776383 2868 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-lib-modules\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776485 kubelet[2868]: I1002 19:18:34.776409 2868 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b39fa124-82b4-4e9f-9749-88aacfec9988-cilium-cgroup\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.776485 kubelet[2868]: I1002 19:18:34.776475 2868 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b39fa124-82b4-4e9f-9749-88aacfec9988-hubble-tls\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.877015 kubelet[2868]: I1002 19:18:34.876865 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc5e324c-c669-4702-bb42-56b941fc2b71-cilium-config-path\") pod \"bc5e324c-c669-4702-bb42-56b941fc2b71\" (UID: \"bc5e324c-c669-4702-bb42-56b941fc2b71\") " Oct 2 19:18:34.877015 kubelet[2868]: I1002 19:18:34.876965 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-cj8gq\" (UniqueName: \"kubernetes.io/projected/bc5e324c-c669-4702-bb42-56b941fc2b71-kube-api-access-cj8gq\") pod \"bc5e324c-c669-4702-bb42-56b941fc2b71\" (UID: \"bc5e324c-c669-4702-bb42-56b941fc2b71\") " Oct 2 19:18:34.885189 kubelet[2868]: I1002 19:18:34.885138 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bc5e324c-c669-4702-bb42-56b941fc2b71-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bc5e324c-c669-4702-bb42-56b941fc2b71" (UID: "bc5e324c-c669-4702-bb42-56b941fc2b71"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:18:34.887536 kubelet[2868]: I1002 19:18:34.887467 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bc5e324c-c669-4702-bb42-56b941fc2b71-kube-api-access-cj8gq" (OuterVolumeSpecName: "kube-api-access-cj8gq") pod "bc5e324c-c669-4702-bb42-56b941fc2b71" (UID: "bc5e324c-c669-4702-bb42-56b941fc2b71"). InnerVolumeSpecName "kube-api-access-cj8gq". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:18:34.977950 kubelet[2868]: I1002 19:18:34.977899 2868 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-cj8gq\" (UniqueName: \"kubernetes.io/projected/bc5e324c-c669-4702-bb42-56b941fc2b71-kube-api-access-cj8gq\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:34.977950 kubelet[2868]: I1002 19:18:34.977951 2868 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bc5e324c-c669-4702-bb42-56b941fc2b71-cilium-config-path\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:18:35.346353 systemd[1]: var-lib-kubelet-pods-b39fa124\x2d82b4\x2d4e9f\x2d9749\x2d88aacfec9988-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:18:35.346536 systemd[1]: var-lib-kubelet-pods-b39fa124\x2d82b4\x2d4e9f\x2d9749\x2d88aacfec9988-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:18:35.346678 systemd[1]: var-lib-kubelet-pods-bc5e324c\x2dc669\x2d4702\x2dbb42\x2d56b941fc2b71-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dcj8gq.mount: Deactivated successfully. Oct 2 19:18:35.346823 systemd[1]: var-lib-kubelet-pods-b39fa124\x2d82b4\x2d4e9f\x2d9749\x2d88aacfec9988-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dskvmh.mount: Deactivated successfully. Oct 2 19:18:35.513282 kubelet[2868]: I1002 19:18:35.513226 2868 scope.go:117] "RemoveContainer" containerID="1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197" Oct 2 19:18:35.517794 env[1746]: time="2023-10-02T19:18:35.517707882Z" level=info msg="RemoveContainer for \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\"" Oct 2 19:18:35.525467 systemd[1]: Removed slice kubepods-besteffort-podbc5e324c_c669_4702_bb42_56b941fc2b71.slice. Oct 2 19:18:35.526812 env[1746]: time="2023-10-02T19:18:35.526628499Z" level=info msg="RemoveContainer for \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\" returns successfully" Oct 2 19:18:35.527382 kubelet[2868]: I1002 19:18:35.527351 2868 scope.go:117] "RemoveContainer" containerID="1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197" Oct 2 19:18:35.530352 env[1746]: time="2023-10-02T19:18:35.528327379Z" level=error msg="ContainerStatus for \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\": not found" Oct 2 19:18:35.536220 kubelet[2868]: E1002 19:18:35.534098 2868 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\": not found" containerID="1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197" Oct 2 19:18:35.536220 kubelet[2868]: I1002 19:18:35.534197 2868 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197"} err="failed to get container status \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\": rpc error: code = NotFound desc = an error occurred when try to find container \"1b915b7f6fbb3c8c13c19362b177f744aa2eadd35ff55f419e01541a92c92197\": not found" Oct 2 19:18:35.536220 kubelet[2868]: I1002 19:18:35.534224 2868 scope.go:117] "RemoveContainer" containerID="b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4" Oct 2 19:18:35.538112 env[1746]: time="2023-10-02T19:18:35.536970361Z" level=info msg="RemoveContainer for \"b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4\"" Oct 2 19:18:35.542622 env[1746]: time="2023-10-02T19:18:35.542512624Z" level=info msg="RemoveContainer for \"b83d2f6192b95de8abcf4e1477ce132d4e36d7b0ec0ca9caa7ab96a631064be4\" returns successfully" Oct 2 19:18:35.554956 systemd[1]: Removed slice kubepods-burstable-podb39fa124_82b4_4e9f_9749_88aacfec9988.slice. Oct 2 19:18:35.763437 kubelet[2868]: I1002 19:18:35.762538 2868 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" path="/var/lib/kubelet/pods/b39fa124-82b4-4e9f-9749-88aacfec9988/volumes" Oct 2 19:18:35.765138 kubelet[2868]: I1002 19:18:35.765107 2868 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="bc5e324c-c669-4702-bb42-56b941fc2b71" path="/var/lib/kubelet/pods/bc5e324c-c669-4702-bb42-56b941fc2b71/volumes" Oct 2 19:18:36.298673 sshd[3763]: pam_unix(sshd:session): session closed for user core Oct 2 19:18:36.299000 audit[3763]: USER_END pid=3763 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.299000 audit[3763]: CRED_DISP pid=3763 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.305762 systemd[1]: sshd@28-172.31.29.254:22-139.178.89.65:48562.service: Deactivated successfully. Oct 2 19:18:36.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.254:22-139.178.89.65:48562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:36.307104 systemd-logind[1729]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:18:36.307903 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:18:36.308497 systemd[1]: session-29.scope: Consumed 1.894s CPU time. Oct 2 19:18:36.309534 systemd-logind[1729]: Removed session 29. Oct 2 19:18:36.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.254:22-139.178.89.65:41340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:18:36.331075 systemd[1]: Started sshd@29-172.31.29.254:22-139.178.89.65:41340.service. Oct 2 19:18:36.508000 audit[3881]: USER_ACCT pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.511131 sshd[3881]: Accepted publickey for core from 139.178.89.65 port 41340 ssh2: RSA SHA256:xq1jsPPMn3xJqYX9WbisZ9n0n6wOxmd44nRnO32wqqo Oct 2 19:18:36.511830 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:18:36.511920 kernel: audit: type=1101 audit(1696274316.508:1363): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.515608 sshd[3881]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:18:36.510000 audit[3881]: CRED_ACQ pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.532456 kernel: audit: type=1103 audit(1696274316.510:1364): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.540031 kernel: audit: type=1006 audit(1696274316.510:1365): pid=3881 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:18:36.510000 audit[3881]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca546cf0 a2=3 a3=1 items=0 ppid=1 pid=3881 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:36.550767 kernel: audit: type=1300 audit(1696274316.510:1365): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca546cf0 a2=3 a3=1 items=0 ppid=1 pid=3881 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:36.510000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:36.554584 kernel: audit: type=1327 audit(1696274316.510:1365): proctitle=737368643A20636F7265205B707269765D Oct 2 19:18:36.556233 systemd-logind[1729]: New session 30 of user core. Oct 2 19:18:36.557371 systemd[1]: Started session-30.scope. Oct 2 19:18:36.568000 audit[3881]: USER_START pid=3881 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.574000 audit[3884]: CRED_ACQ pid=3884 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.589833 kernel: audit: type=1105 audit(1696274316.568:1366): pid=3881 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:36.589972 kernel: audit: type=1103 audit(1696274316.574:1367): pid=3884 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:18:37.060869 kubelet[2868]: E1002 19:18:37.060818 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:38.242789 kubelet[2868]: I1002 19:18:38.242738 2868 topology_manager.go:215] "Topology Admit Handler" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" podNamespace="kube-system" podName="cilium-l7tkj" Oct 2 19:18:38.243522 kubelet[2868]: E1002 19:18:38.243474 2868 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.243664 kubelet[2868]: E1002 19:18:38.243643 2868 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.243812 kubelet[2868]: E1002 19:18:38.243792 2868 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bc5e324c-c669-4702-bb42-56b941fc2b71" containerName="cilium-operator" Oct 2 19:18:38.243956 kubelet[2868]: E1002 19:18:38.243937 2868 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.244093 kubelet[2868]: E1002 19:18:38.244073 2868 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.244248 kubelet[2868]: I1002 19:18:38.244227 2868 memory_manager.go:346] "RemoveStaleState removing state" podUID="bc5e324c-c669-4702-bb42-56b941fc2b71" containerName="cilium-operator" Oct 2 19:18:38.244388 kubelet[2868]: I1002 19:18:38.244368 2868 memory_manager.go:346] "RemoveStaleState removing state" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.244516 kubelet[2868]: I1002 19:18:38.244496 2868 memory_manager.go:346] "RemoveStaleState removing state" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.244643 kubelet[2868]: I1002 19:18:38.244624 2868 memory_manager.go:346] "RemoveStaleState removing state" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.244781 kubelet[2868]: I1002 19:18:38.244761 2868 memory_manager.go:346] "RemoveStaleState removing state" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.244907 kubelet[2868]: I1002 19:18:38.244888 2868 memory_manager.go:346] "RemoveStaleState removing state" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.245075 kubelet[2868]: E1002 19:18:38.245053 2868 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.245250 kubelet[2868]: E1002 19:18:38.245227 2868 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.245439 kubelet[2868]: I1002 19:18:38.245406 2868 memory_manager.go:346] "RemoveStaleState removing state" podUID="b39fa124-82b4-4e9f-9749-88aacfec9988" containerName="mount-cgroup" Oct 2 19:18:38.258647 systemd[1]: Created slice kubepods-burstable-pode901ae23_bc3e_4d53_ad3a_2b6fe99e4b93.slice. Oct 2 19:18:38.299906 kubelet[2868]: I1002 19:18:38.299845 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-hostproc\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300123 kubelet[2868]: I1002 19:18:38.299950 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cni-path\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300123 kubelet[2868]: I1002 19:18:38.300045 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-lib-modules\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300123 kubelet[2868]: I1002 19:18:38.300121 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-run\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300388 kubelet[2868]: I1002 19:18:38.300201 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-host-proc-sys-net\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300388 kubelet[2868]: I1002 19:18:38.300287 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-config-path\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300388 kubelet[2868]: I1002 19:18:38.300336 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-clustermesh-secrets\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300580 kubelet[2868]: I1002 19:18:38.300410 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-ipsec-secrets\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300580 kubelet[2868]: I1002 19:18:38.300478 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-hubble-tls\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300580 kubelet[2868]: I1002 19:18:38.300553 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-xtables-lock\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300761 kubelet[2868]: I1002 19:18:38.300626 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-etc-cni-netd\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300761 kubelet[2868]: I1002 19:18:38.300678 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-bpf-maps\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300761 kubelet[2868]: I1002 19:18:38.300744 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-cgroup\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300929 kubelet[2868]: I1002 19:18:38.300817 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-host-proc-sys-kernel\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.300929 kubelet[2868]: I1002 19:18:38.300863 2868 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6zlbn\" (UniqueName: \"kubernetes.io/projected/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-kube-api-access-6zlbn\") pod \"cilium-l7tkj\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " pod="kube-system/cilium-l7tkj" Oct 2 19:18:38.568332 env[1746]: time="2023-10-02T19:18:38.568257519Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-l7tkj,Uid:e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93,Namespace:kube-system,Attempt:0,}" Oct 2 19:18:38.625075 env[1746]: time="2023-10-02T19:18:38.623189871Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:18:38.625075 env[1746]: time="2023-10-02T19:18:38.623270512Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:18:38.625075 env[1746]: time="2023-10-02T19:18:38.623299936Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:18:38.625075 env[1746]: time="2023-10-02T19:18:38.623918445Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3 pid=3904 runtime=io.containerd.runc.v2 Oct 2 19:18:38.675640 systemd[1]: Started cri-containerd-6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3.scope. Oct 2 19:18:38.705538 amazon-ssm-agent[1717]: 2023-10-02 19:18:38 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757345 kernel: audit: type=1400 audit(1696274318.740:1368): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757456 kernel: audit: type=1400 audit(1696274318.740:1369): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767053 kernel: audit: type=1400 audit(1696274318.740:1370): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.749000 audit: BPF prog-id=131 op=LOAD Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665303766663930306534303864666364653636323337613865353734 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665303766663930306534303864666364653636323337613865353734 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.757000 audit: BPF prog-id=132 op=LOAD Oct 2 19:18:38.757000 audit[3915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665303766663930306534303864666364653636323337613865353734 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit: BPF prog-id=133 op=LOAD Oct 2 19:18:38.767000 audit[3915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665303766663930306534303864666364653636323337613865353734 Oct 2 19:18:38.767000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:18:38.767000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { perfmon } for pid=3915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit[3915]: AVC avc: denied { bpf } for pid=3915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:18:38.767000 audit: BPF prog-id=134 op=LOAD Oct 2 19:18:38.767000 audit[3915]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3904 pid=3915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:18:38.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665303766663930306534303864666364653636323337613865353734 Oct 2 19:18:38.801547 env[1746]: time="2023-10-02T19:18:38.801491056Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-l7tkj,Uid:e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93,Namespace:kube-system,Attempt:0,} returns sandbox id \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\"" Oct 2 19:18:38.807768 amazon-ssm-agent[1717]: 2023-10-02 19:18:38 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0028614278bf6732e is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0028614278bf6732e because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:18:38.807768 amazon-ssm-agent[1717]: status code: 400, request id: 6aa6ad36-b800-4705-8b47-4005030b9a60 Oct 2 19:18:38.811880 env[1746]: time="2023-10-02T19:18:38.811824085Z" level=info msg="CreateContainer within sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:18:38.837113 env[1746]: time="2023-10-02T19:18:38.834471119Z" level=info msg="CreateContainer within sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\"" Oct 2 19:18:38.839496 env[1746]: time="2023-10-02T19:18:38.838347454Z" level=info msg="StartContainer for \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\"" Oct 2 19:18:38.882906 systemd[1]: Started cri-containerd-91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b.scope. Oct 2 19:18:38.924367 systemd[1]: cri-containerd-91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b.scope: Deactivated successfully. Oct 2 19:18:38.956973 env[1746]: time="2023-10-02T19:18:38.956880172Z" level=info msg="shim disconnected" id=91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b Oct 2 19:18:38.957336 env[1746]: time="2023-10-02T19:18:38.957301807Z" level=warning msg="cleaning up after shim disconnected" id=91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b namespace=k8s.io Oct 2 19:18:38.957473 env[1746]: time="2023-10-02T19:18:38.957445569Z" level=info msg="cleaning up dead shim" Oct 2 19:18:38.983715 env[1746]: time="2023-10-02T19:18:38.983648691Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3965 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:18:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:18:38.984445 env[1746]: time="2023-10-02T19:18:38.984363862Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:18:38.985511 env[1746]: time="2023-10-02T19:18:38.984641208Z" level=error msg="Failed to pipe stdout of container \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\"" error="reading from a closed fifo" Oct 2 19:18:38.985736 env[1746]: time="2023-10-02T19:18:38.985060864Z" level=error msg="Failed to pipe stderr of container \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\"" error="reading from a closed fifo" Oct 2 19:18:38.987455 env[1746]: time="2023-10-02T19:18:38.987391645Z" level=error msg="StartContainer for \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:18:38.988079 kubelet[2868]: E1002 19:18:38.987951 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b" Oct 2 19:18:38.988536 kubelet[2868]: E1002 19:18:38.988405 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:18:38.988536 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:18:38.988536 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:18:38.988536 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6zlbn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:18:38.988536 kubelet[2868]: E1002 19:18:38.988501 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:18:39.552474 env[1746]: time="2023-10-02T19:18:39.552412766Z" level=info msg="CreateContainer within sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:18:39.575660 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount352688267.mount: Deactivated successfully. Oct 2 19:18:39.588832 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2211721768.mount: Deactivated successfully. Oct 2 19:18:39.596954 env[1746]: time="2023-10-02T19:18:39.596849870Z" level=info msg="CreateContainer within sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\"" Oct 2 19:18:39.598693 env[1746]: time="2023-10-02T19:18:39.598636950Z" level=info msg="StartContainer for \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\"" Oct 2 19:18:39.651774 systemd[1]: Started cri-containerd-9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d.scope. Oct 2 19:18:39.694945 systemd[1]: cri-containerd-9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d.scope: Deactivated successfully. Oct 2 19:18:39.713014 env[1746]: time="2023-10-02T19:18:39.712906732Z" level=info msg="shim disconnected" id=9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d Oct 2 19:18:39.713014 env[1746]: time="2023-10-02T19:18:39.712999865Z" level=warning msg="cleaning up after shim disconnected" id=9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d namespace=k8s.io Oct 2 19:18:39.713370 env[1746]: time="2023-10-02T19:18:39.713024105Z" level=info msg="cleaning up dead shim" Oct 2 19:18:39.739541 env[1746]: time="2023-10-02T19:18:39.739457592Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4003 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:18:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:18:39.740040 env[1746]: time="2023-10-02T19:18:39.739924781Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:18:39.741397 env[1746]: time="2023-10-02T19:18:39.741333173Z" level=error msg="Failed to pipe stdout of container \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\"" error="reading from a closed fifo" Oct 2 19:18:39.741622 env[1746]: time="2023-10-02T19:18:39.741576979Z" level=error msg="Failed to pipe stderr of container \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\"" error="reading from a closed fifo" Oct 2 19:18:39.744476 env[1746]: time="2023-10-02T19:18:39.744372680Z" level=error msg="StartContainer for \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:18:39.744914 kubelet[2868]: E1002 19:18:39.744875 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d" Oct 2 19:18:39.747303 kubelet[2868]: E1002 19:18:39.745075 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:18:39.747303 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:18:39.747303 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:18:39.747303 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6zlbn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:18:39.747303 kubelet[2868]: E1002 19:18:39.745137 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:18:40.551704 kubelet[2868]: I1002 19:18:40.551668 2868 scope.go:117] "RemoveContainer" containerID="91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b" Oct 2 19:18:40.552577 kubelet[2868]: I1002 19:18:40.552549 2868 scope.go:117] "RemoveContainer" containerID="91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b" Oct 2 19:18:40.558425 env[1746]: time="2023-10-02T19:18:40.557768998Z" level=info msg="RemoveContainer for \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\"" Oct 2 19:18:40.560491 env[1746]: time="2023-10-02T19:18:40.559333056Z" level=info msg="RemoveContainer for \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\"" Oct 2 19:18:40.560491 env[1746]: time="2023-10-02T19:18:40.559485097Z" level=error msg="RemoveContainer for \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\" failed" error="failed to set removing state for container \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\": container is already in removing state" Oct 2 19:18:40.560756 kubelet[2868]: E1002 19:18:40.559720 2868 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\": container is already in removing state" containerID="91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b" Oct 2 19:18:40.560756 kubelet[2868]: E1002 19:18:40.559774 2868 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b": container is already in removing state; Skipping pod "cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93)" Oct 2 19:18:40.563681 kubelet[2868]: E1002 19:18:40.563050 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93)\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:18:40.565722 env[1746]: time="2023-10-02T19:18:40.565648652Z" level=info msg="RemoveContainer for \"91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b\" returns successfully" Oct 2 19:18:42.062400 kubelet[2868]: W1002 19:18:42.062337 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode901ae23_bc3e_4d53_ad3a_2b6fe99e4b93.slice/cri-containerd-91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b.scope WatchSource:0}: container "91df8651c2640e22c2c4717f1009b3273b6609685326a1fd21d0adee1550475b" in namespace "k8s.io": not found Oct 2 19:18:42.063072 kubelet[2868]: E1002 19:18:42.063042 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:45.173178 kubelet[2868]: W1002 19:18:45.173108 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode901ae23_bc3e_4d53_ad3a_2b6fe99e4b93.slice/cri-containerd-9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d.scope WatchSource:0}: task 9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d not found: not found Oct 2 19:18:47.064352 kubelet[2868]: E1002 19:18:47.064302 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:52.066129 kubelet[2868]: E1002 19:18:52.066089 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:55.767507 env[1746]: time="2023-10-02T19:18:55.767400890Z" level=info msg="CreateContainer within sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:18:55.789682 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount824129326.mount: Deactivated successfully. Oct 2 19:18:55.807375 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1074431666.mount: Deactivated successfully. Oct 2 19:18:55.809468 env[1746]: time="2023-10-02T19:18:55.809378663Z" level=info msg="CreateContainer within sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\"" Oct 2 19:18:55.811817 env[1746]: time="2023-10-02T19:18:55.810387955Z" level=info msg="StartContainer for \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\"" Oct 2 19:18:55.859551 systemd[1]: Started cri-containerd-3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54.scope. Oct 2 19:18:55.898294 systemd[1]: cri-containerd-3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54.scope: Deactivated successfully. Oct 2 19:18:55.917717 env[1746]: time="2023-10-02T19:18:55.917643636Z" level=info msg="shim disconnected" id=3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54 Oct 2 19:18:55.918004 env[1746]: time="2023-10-02T19:18:55.917717437Z" level=warning msg="cleaning up after shim disconnected" id=3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54 namespace=k8s.io Oct 2 19:18:55.918004 env[1746]: time="2023-10-02T19:18:55.917740441Z" level=info msg="cleaning up dead shim" Oct 2 19:18:55.953248 env[1746]: time="2023-10-02T19:18:55.953181076Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4042 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:18:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:18:55.954142 env[1746]: time="2023-10-02T19:18:55.953963290Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:18:55.955427 env[1746]: time="2023-10-02T19:18:55.954547035Z" level=error msg="Failed to pipe stdout of container \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\"" error="reading from a closed fifo" Oct 2 19:18:55.955634 env[1746]: time="2023-10-02T19:18:55.955346133Z" level=error msg="Failed to pipe stderr of container \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\"" error="reading from a closed fifo" Oct 2 19:18:55.958833 env[1746]: time="2023-10-02T19:18:55.958681801Z" level=error msg="StartContainer for \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:18:55.959257 kubelet[2868]: E1002 19:18:55.959199 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54" Oct 2 19:18:55.959954 kubelet[2868]: E1002 19:18:55.959915 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:18:55.959954 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:18:55.959954 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:18:55.959954 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6zlbn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:18:55.962920 kubelet[2868]: E1002 19:18:55.961518 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:18:56.595424 kubelet[2868]: I1002 19:18:56.595383 2868 scope.go:117] "RemoveContainer" containerID="9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d" Oct 2 19:18:56.596019 kubelet[2868]: I1002 19:18:56.595960 2868 scope.go:117] "RemoveContainer" containerID="9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d" Oct 2 19:18:56.600232 env[1746]: time="2023-10-02T19:18:56.600161409Z" level=info msg="RemoveContainer for \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\"" Oct 2 19:18:56.601744 env[1746]: time="2023-10-02T19:18:56.601678209Z" level=info msg="RemoveContainer for \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\"" Oct 2 19:18:56.601998 env[1746]: time="2023-10-02T19:18:56.601896023Z" level=error msg="RemoveContainer for \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\" failed" error="failed to set removing state for container \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\": container is already in removing state" Oct 2 19:18:56.602677 kubelet[2868]: E1002 19:18:56.602630 2868 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\": container is already in removing state" containerID="9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d" Oct 2 19:18:56.602833 kubelet[2868]: E1002 19:18:56.602696 2868 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d": container is already in removing state; Skipping pod "cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93)" Oct 2 19:18:56.604024 kubelet[2868]: E1002 19:18:56.603241 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93)\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:18:56.606728 env[1746]: time="2023-10-02T19:18:56.606640322Z" level=info msg="RemoveContainer for \"9d20a4f9aa2f39d28bd4d349d83d8f349c9088216422902f99e5ac74bfb0509d\" returns successfully" Oct 2 19:18:56.784590 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54-rootfs.mount: Deactivated successfully. Oct 2 19:18:57.067918 kubelet[2868]: E1002 19:18:57.067883 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:59.024262 kubelet[2868]: W1002 19:18:59.024210 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode901ae23_bc3e_4d53_ad3a_2b6fe99e4b93.slice/cri-containerd-3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54.scope WatchSource:0}: task 3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54 not found: not found Oct 2 19:19:02.070036 kubelet[2868]: E1002 19:19:02.069971 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:07.071890 kubelet[2868]: E1002 19:19:07.071829 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:09.757320 kubelet[2868]: E1002 19:19:09.757264 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93)\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:19:12.073867 kubelet[2868]: E1002 19:19:12.073832 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:17.075786 kubelet[2868]: E1002 19:19:17.075740 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:20.760743 env[1746]: time="2023-10-02T19:19:20.760305913Z" level=info msg="CreateContainer within sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:19:20.782750 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount359701929.mount: Deactivated successfully. Oct 2 19:19:20.787701 env[1746]: time="2023-10-02T19:19:20.787619831Z" level=info msg="CreateContainer within sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8\"" Oct 2 19:19:20.790136 env[1746]: time="2023-10-02T19:19:20.789406405Z" level=info msg="StartContainer for \"d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8\"" Oct 2 19:19:20.846408 systemd[1]: Started cri-containerd-d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8.scope. Oct 2 19:19:20.884367 systemd[1]: cri-containerd-d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8.scope: Deactivated successfully. Oct 2 19:19:20.892129 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8-rootfs.mount: Deactivated successfully. Oct 2 19:19:20.906247 env[1746]: time="2023-10-02T19:19:20.906164091Z" level=info msg="shim disconnected" id=d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8 Oct 2 19:19:20.906247 env[1746]: time="2023-10-02T19:19:20.906243412Z" level=warning msg="cleaning up after shim disconnected" id=d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8 namespace=k8s.io Oct 2 19:19:20.906630 env[1746]: time="2023-10-02T19:19:20.906268924Z" level=info msg="cleaning up dead shim" Oct 2 19:19:20.934368 env[1746]: time="2023-10-02T19:19:20.934273820Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4081 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:19:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:19:20.934870 env[1746]: time="2023-10-02T19:19:20.934771595Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:19:20.935349 env[1746]: time="2023-10-02T19:19:20.935276691Z" level=error msg="Failed to pipe stdout of container \"d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8\"" error="reading from a closed fifo" Oct 2 19:19:20.936117 env[1746]: time="2023-10-02T19:19:20.936060981Z" level=error msg="Failed to pipe stderr of container \"d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8\"" error="reading from a closed fifo" Oct 2 19:19:20.938601 env[1746]: time="2023-10-02T19:19:20.938527035Z" level=error msg="StartContainer for \"d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:19:20.940061 kubelet[2868]: E1002 19:19:20.939056 2868 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8" Oct 2 19:19:20.940061 kubelet[2868]: E1002 19:19:20.939250 2868 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:19:20.940061 kubelet[2868]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:19:20.940061 kubelet[2868]: rm /hostbin/cilium-mount Oct 2 19:19:20.940061 kubelet[2868]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6zlbn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:19:20.940061 kubelet[2868]: E1002 19:19:20.939336 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:19:21.663717 kubelet[2868]: I1002 19:19:21.663682 2868 scope.go:117] "RemoveContainer" containerID="3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54" Oct 2 19:19:21.664945 kubelet[2868]: I1002 19:19:21.664904 2868 scope.go:117] "RemoveContainer" containerID="3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54" Oct 2 19:19:21.670547 env[1746]: time="2023-10-02T19:19:21.670484737Z" level=info msg="RemoveContainer for \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\"" Oct 2 19:19:21.671030 env[1746]: time="2023-10-02T19:19:21.670899796Z" level=info msg="RemoveContainer for \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\"" Oct 2 19:19:21.671153 env[1746]: time="2023-10-02T19:19:21.671043521Z" level=error msg="RemoveContainer for \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\" failed" error="failed to set removing state for container \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\": container is already in removing state" Oct 2 19:19:21.671446 kubelet[2868]: E1002 19:19:21.671415 2868 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\": container is already in removing state" containerID="3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54" Oct 2 19:19:21.671678 kubelet[2868]: E1002 19:19:21.671621 2868 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54": container is already in removing state; Skipping pod "cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93)" Oct 2 19:19:21.672835 kubelet[2868]: E1002 19:19:21.672798 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93)\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:19:21.675482 env[1746]: time="2023-10-02T19:19:21.675418525Z" level=info msg="RemoveContainer for \"3bc591b41601058b8409f19fc56848e430ea35d16378ad01e0c2aa3c22fa3e54\" returns successfully" Oct 2 19:19:22.077242 kubelet[2868]: E1002 19:19:22.077187 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:24.014891 kubelet[2868]: W1002 19:19:24.014798 2868 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode901ae23_bc3e_4d53_ad3a_2b6fe99e4b93.slice/cri-containerd-d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8.scope WatchSource:0}: task d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8 not found: not found Oct 2 19:19:26.398000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:26.400933 kernel: kauditd_printk_skb: 54 callbacks suppressed Oct 2 19:19:26.401088 kernel: audit: type=1400 audit(1696274366.398:1386): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:26.398000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400065c900 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:26.422729 kernel: audit: type=1300 audit(1696274366.398:1386): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400065c900 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:26.422900 kernel: audit: type=1327 audit(1696274366.398:1386): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:26.398000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:26.420000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:26.442536 kernel: audit: type=1400 audit(1696274366.420:1387): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:26.442633 kernel: audit: type=1300 audit(1696274366.420:1387): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012b6300 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:26.420000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40012b6300 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:26.420000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:26.464774 kernel: audit: type=1327 audit(1696274366.420:1387): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:27.078613 kubelet[2868]: E1002 19:19:27.078579 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:27.113000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.113000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.132570 kernel: audit: type=1400 audit(1696274367.113:1389): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.132731 kernel: audit: type=1400 audit(1696274367.113:1388): avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.132789 kernel: audit: type=1300 audit(1696274367.113:1389): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40138aab40 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:19:27.113000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40138aab40 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:19:27.113000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:27.154713 kernel: audit: type=1327 audit(1696274367.113:1389): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:27.113000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400a980560 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:19:27.113000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:27.122000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=4808 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.122000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40138aabd0 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:19:27.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:27.130000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=4814 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.130000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40136b8c90 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:19:27.130000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:27.149000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.149000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a980640 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:19:27.149000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:27.151000 audit[2618]: AVC avc: denied { watch } for pid=2618 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:27.151000 audit[2618]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40136b8e70 a2=fc6 a3=0 items=0 ppid=2468 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c657,c915 key=(null) Oct 2 19:19:27.151000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E323534002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:19:31.749873 env[1746]: time="2023-10-02T19:19:31.749547761Z" level=info msg="StopPodSandbox for \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\"" Oct 2 19:19:31.749873 env[1746]: time="2023-10-02T19:19:31.749695302Z" level=info msg="TearDown network for sandbox \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\" successfully" Oct 2 19:19:31.749873 env[1746]: time="2023-10-02T19:19:31.749754007Z" level=info msg="StopPodSandbox for \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\" returns successfully" Oct 2 19:19:31.751826 env[1746]: time="2023-10-02T19:19:31.751373778Z" level=info msg="RemovePodSandbox for \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\"" Oct 2 19:19:31.751826 env[1746]: time="2023-10-02T19:19:31.751431139Z" level=info msg="Forcibly stopping sandbox \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\"" Oct 2 19:19:31.751826 env[1746]: time="2023-10-02T19:19:31.751562420Z" level=info msg="TearDown network for sandbox \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\" successfully" Oct 2 19:19:31.757409 env[1746]: time="2023-10-02T19:19:31.757322569Z" level=info msg="RemovePodSandbox \"035ea36d4474055bd46c45144a2db654dee06c7629b2ea7542b73f8b93b9194a\" returns successfully" Oct 2 19:19:31.758472 env[1746]: time="2023-10-02T19:19:31.758148463Z" level=info msg="StopPodSandbox for \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\"" Oct 2 19:19:31.758472 env[1746]: time="2023-10-02T19:19:31.758300372Z" level=info msg="TearDown network for sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" successfully" Oct 2 19:19:31.758472 env[1746]: time="2023-10-02T19:19:31.758358956Z" level=info msg="StopPodSandbox for \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" returns successfully" Oct 2 19:19:31.761014 env[1746]: time="2023-10-02T19:19:31.759263679Z" level=info msg="RemovePodSandbox for \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\"" Oct 2 19:19:31.761014 env[1746]: time="2023-10-02T19:19:31.759320847Z" level=info msg="Forcibly stopping sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\"" Oct 2 19:19:31.761014 env[1746]: time="2023-10-02T19:19:31.759447904Z" level=info msg="TearDown network for sandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" successfully" Oct 2 19:19:31.765320 env[1746]: time="2023-10-02T19:19:31.765242146Z" level=info msg="RemovePodSandbox \"a0e39547f2789075bce3c40fee128381b4e0f227e1795eb1a6783bc52c18e271\" returns successfully" Oct 2 19:19:31.961125 kubelet[2868]: W1002 19:19:31.961086 2868 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:19:32.080222 kubelet[2868]: E1002 19:19:32.080166 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:32.375000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:32.377518 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:19:32.377654 kernel: audit: type=1400 audit(1696274372.375:1394): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:32.375000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a8d4c0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:32.399121 kernel: audit: type=1300 audit(1696274372.375:1394): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a8d4c0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:32.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:32.409472 kernel: audit: type=1327 audit(1696274372.375:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:32.409572 kernel: audit: type=1400 audit(1696274372.376:1395): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:32.376000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:32.376000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040ee60 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:32.431312 kernel: audit: type=1300 audit(1696274372.376:1395): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040ee60 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:32.431434 kernel: audit: type=1327 audit(1696274372.376:1395): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:32.376000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:32.377000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:32.451001 kernel: audit: type=1400 audit(1696274372.377:1396): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:32.451110 kernel: audit: type=1300 audit(1696274372.377:1396): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040eee0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:32.377000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400040eee0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:32.377000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:32.473614 kernel: audit: type=1327 audit(1696274372.377:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:32.473714 kernel: audit: type=1400 audit(1696274372.378:1397): avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:32.378000 audit[2658]: AVC avc: denied { watch } for pid=2658 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:32.378000 audit[2658]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a8d5e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:32.378000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:32.758506 kubelet[2868]: E1002 19:19:32.757191 2868 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-l7tkj_kube-system(e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93)\"" pod="kube-system/cilium-l7tkj" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" Oct 2 19:19:37.081345 kubelet[2868]: E1002 19:19:37.081255 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:40.111194 env[1746]: time="2023-10-02T19:19:40.111111102Z" level=info msg="StopPodSandbox for \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\"" Oct 2 19:19:40.112276 env[1746]: time="2023-10-02T19:19:40.112029744Z" level=info msg="Container to stop \"d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:19:40.118433 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3-shm.mount: Deactivated successfully. Oct 2 19:19:40.177107 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:19:40.177298 kernel: audit: type=1334 audit(1696274380.171:1398): prog-id=131 op=UNLOAD Oct 2 19:19:40.171000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:19:40.171941 systemd[1]: cri-containerd-6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3.scope: Deactivated successfully. Oct 2 19:19:40.182107 kernel: audit: type=1334 audit(1696274380.179:1399): prog-id=134 op=UNLOAD Oct 2 19:19:40.179000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:19:40.231889 sshd[3881]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:40.233000 audit[3881]: USER_END pid=3881 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:40.236759 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:19:40.237136 systemd[1]: session-30.scope: Consumed 2.178s CPU time. Oct 2 19:19:40.237910 systemd[1]: sshd@29-172.31.29.254:22-139.178.89.65:41340.service: Deactivated successfully. Oct 2 19:19:40.241682 systemd-logind[1729]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:19:40.244057 systemd-logind[1729]: Removed session 30. Oct 2 19:19:40.233000 audit[3881]: CRED_DISP pid=3881 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:40.255466 kernel: audit: type=1106 audit(1696274380.233:1400): pid=3881 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:40.255667 kernel: audit: type=1104 audit(1696274380.233:1401): pid=3881 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:19:40.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.254:22-139.178.89.65:41340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.265001 kernel: audit: type=1131 audit(1696274380.237:1402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.254:22-139.178.89.65:41340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.272635 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3-rootfs.mount: Deactivated successfully. Oct 2 19:19:40.295753 env[1746]: time="2023-10-02T19:19:40.295685577Z" level=info msg="shim disconnected" id=6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3 Oct 2 19:19:40.297234 env[1746]: time="2023-10-02T19:19:40.297171356Z" level=warning msg="cleaning up after shim disconnected" id=6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3 namespace=k8s.io Oct 2 19:19:40.297483 env[1746]: time="2023-10-02T19:19:40.297453934Z" level=info msg="cleaning up dead shim" Oct 2 19:19:40.324338 env[1746]: time="2023-10-02T19:19:40.324278921Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4115 runtime=io.containerd.runc.v2\n" Oct 2 19:19:40.325210 env[1746]: time="2023-10-02T19:19:40.325165535Z" level=info msg="TearDown network for sandbox \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" successfully" Oct 2 19:19:40.325387 env[1746]: time="2023-10-02T19:19:40.325352148Z" level=info msg="StopPodSandbox for \"6e07ff900e408dfcde66237a8e574f1dcafb527bfd4f0eaef8163c0d2d5481f3\" returns successfully" Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.395053 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-run\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396101 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-config-path\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396192 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-etc-cni-netd\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396262 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-host-proc-sys-kernel\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396326 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cni-path\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396395 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-hostproc\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396445 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-6zlbn\" (UniqueName: \"kubernetes.io/projected/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-kube-api-access-6zlbn\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396510 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-host-proc-sys-net\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396577 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-cgroup\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.396667 kubelet[2868]: I1002 19:19:40.396625 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-lib-modules\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.397870 kubelet[2868]: I1002 19:19:40.396696 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-ipsec-secrets\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.397870 kubelet[2868]: I1002 19:19:40.396765 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-hubble-tls\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.397870 kubelet[2868]: I1002 19:19:40.396810 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-bpf-maps\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.397870 kubelet[2868]: I1002 19:19:40.396877 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-xtables-lock\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.397870 kubelet[2868]: I1002 19:19:40.396945 2868 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-clustermesh-secrets\") pod \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\" (UID: \"e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93\") " Oct 2 19:19:40.398234 kubelet[2868]: I1002 19:19:40.398193 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.401597 kubelet[2868]: I1002 19:19:40.401520 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.401746 kubelet[2868]: I1002 19:19:40.401618 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.401746 kubelet[2868]: I1002 19:19:40.401662 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.402251 kubelet[2868]: I1002 19:19:40.402187 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.402362 kubelet[2868]: I1002 19:19:40.402273 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.402362 kubelet[2868]: I1002 19:19:40.402323 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cni-path" (OuterVolumeSpecName: "cni-path") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.402517 kubelet[2868]: I1002 19:19:40.402362 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-hostproc" (OuterVolumeSpecName: "hostproc") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.402517 kubelet[2868]: I1002 19:19:40.402406 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.402881 kubelet[2868]: I1002 19:19:40.402788 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:19:40.405380 kubelet[2868]: I1002 19:19:40.405328 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:19:40.412527 systemd[1]: var-lib-kubelet-pods-e901ae23\x2dbc3e\x2d4d53\x2dad3a\x2d2b6fe99e4b93-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:19:40.418699 systemd[1]: var-lib-kubelet-pods-e901ae23\x2dbc3e\x2d4d53\x2dad3a\x2d2b6fe99e4b93-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:19:40.422757 kubelet[2868]: I1002 19:19:40.422708 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:19:40.424607 kubelet[2868]: I1002 19:19:40.424538 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:19:40.432775 systemd[1]: var-lib-kubelet-pods-e901ae23\x2dbc3e\x2d4d53\x2dad3a\x2d2b6fe99e4b93-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:19:40.434201 kubelet[2868]: I1002 19:19:40.434046 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:19:40.436624 kubelet[2868]: I1002 19:19:40.436574 2868 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-kube-api-access-6zlbn" (OuterVolumeSpecName: "kube-api-access-6zlbn") pod "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" (UID: "e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93"). InnerVolumeSpecName "kube-api-access-6zlbn". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:19:40.498085 kubelet[2868]: I1002 19:19:40.498042 2868 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-6zlbn\" (UniqueName: \"kubernetes.io/projected/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-kube-api-access-6zlbn\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.498362 kubelet[2868]: I1002 19:19:40.498340 2868 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-hostproc\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.498544 kubelet[2868]: I1002 19:19:40.498523 2868 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-host-proc-sys-net\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.498712 kubelet[2868]: I1002 19:19:40.498690 2868 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-cgroup\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.498860 kubelet[2868]: I1002 19:19:40.498840 2868 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-ipsec-secrets\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.499021 kubelet[2868]: I1002 19:19:40.499001 2868 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-hubble-tls\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.499157 kubelet[2868]: I1002 19:19:40.499138 2868 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-lib-modules\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.499293 kubelet[2868]: I1002 19:19:40.499274 2868 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-bpf-maps\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.499443 kubelet[2868]: I1002 19:19:40.499424 2868 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-xtables-lock\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.499587 kubelet[2868]: I1002 19:19:40.499568 2868 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-clustermesh-secrets\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.499737 kubelet[2868]: I1002 19:19:40.499718 2868 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-config-path\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.499879 kubelet[2868]: I1002 19:19:40.499860 2868 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-etc-cni-netd\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.500060 kubelet[2868]: I1002 19:19:40.500041 2868 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cilium-run\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.500209 kubelet[2868]: I1002 19:19:40.500190 2868 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-host-proc-sys-kernel\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.500345 kubelet[2868]: I1002 19:19:40.500326 2868 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93-cni-path\") on node \"ip-172-31-29-254\" DevicePath \"\"" Oct 2 19:19:40.717570 kubelet[2868]: I1002 19:19:40.717416 2868 scope.go:117] "RemoveContainer" containerID="d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8" Oct 2 19:19:40.722366 env[1746]: time="2023-10-02T19:19:40.722302761Z" level=info msg="RemoveContainer for \"d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8\"" Oct 2 19:19:40.728583 env[1746]: time="2023-10-02T19:19:40.728507537Z" level=info msg="RemoveContainer for \"d1180e6fb14c44fa33ab059653c2a94b12afec5683fc785ecca4bcaa5deb96f8\" returns successfully" Oct 2 19:19:40.731811 systemd[1]: Removed slice kubepods-burstable-pode901ae23_bc3e_4d53_ad3a_2b6fe99e4b93.slice. Oct 2 19:19:41.118017 systemd[1]: var-lib-kubelet-pods-e901ae23\x2dbc3e\x2d4d53\x2dad3a\x2d2b6fe99e4b93-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d6zlbn.mount: Deactivated successfully. Oct 2 19:19:41.759859 kubelet[2868]: I1002 19:19:41.759821 2868 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93" path="/var/lib/kubelet/pods/e901ae23-bc3e-4d53-ad3a-2b6fe99e4b93/volumes" Oct 2 19:19:42.082547 kubelet[2868]: E1002 19:19:42.082478 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:47.084116 kubelet[2868]: E1002 19:19:47.084080 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:52.086535 kubelet[2868]: E1002 19:19:52.086499 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:53.615874 systemd[1]: cri-containerd-a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296.scope: Deactivated successfully. Oct 2 19:19:53.616436 systemd[1]: cri-containerd-a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296.scope: Consumed 6.141s CPU time. Oct 2 19:19:53.619000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:19:53.619000 audit: BPF prog-id=100 op=UNLOAD Oct 2 19:19:53.625774 kernel: audit: type=1334 audit(1696274393.619:1403): prog-id=90 op=UNLOAD Oct 2 19:19:53.625912 kernel: audit: type=1334 audit(1696274393.619:1404): prog-id=100 op=UNLOAD Oct 2 19:19:53.670491 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296-rootfs.mount: Deactivated successfully. Oct 2 19:19:53.688117 env[1746]: time="2023-10-02T19:19:53.688052960Z" level=info msg="shim disconnected" id=a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296 Oct 2 19:19:53.688951 env[1746]: time="2023-10-02T19:19:53.688901846Z" level=warning msg="cleaning up after shim disconnected" id=a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296 namespace=k8s.io Oct 2 19:19:53.689115 env[1746]: time="2023-10-02T19:19:53.689085603Z" level=info msg="cleaning up dead shim" Oct 2 19:19:53.716333 env[1746]: time="2023-10-02T19:19:53.716275999Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4147 runtime=io.containerd.runc.v2\n" Oct 2 19:19:53.752825 kubelet[2868]: I1002 19:19:53.751925 2868 scope.go:117] "RemoveContainer" containerID="a40215824155280180920bfadc36ffd46861c07fe499652e2db99df55ca92296" Oct 2 19:19:53.759398 env[1746]: time="2023-10-02T19:19:53.759324238Z" level=info msg="CreateContainer within sandbox \"9833d0a62c041d9f6cdbb0bfabd002cc7e1c0d9c3fa504cb04e5ef95400a231f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:19:53.777141 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount112917451.mount: Deactivated successfully. Oct 2 19:19:53.787922 env[1746]: time="2023-10-02T19:19:53.787770310Z" level=info msg="CreateContainer within sandbox \"9833d0a62c041d9f6cdbb0bfabd002cc7e1c0d9c3fa504cb04e5ef95400a231f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"607ce342d21a8813c6cbb5c3f725b4cff0c23e570bbb3f531aee484e590cd56b\"" Oct 2 19:19:53.788728 env[1746]: time="2023-10-02T19:19:53.788676844Z" level=info msg="StartContainer for \"607ce342d21a8813c6cbb5c3f725b4cff0c23e570bbb3f531aee484e590cd56b\"" Oct 2 19:19:53.790703 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2320959012.mount: Deactivated successfully. Oct 2 19:19:53.833137 systemd[1]: Started cri-containerd-607ce342d21a8813c6cbb5c3f725b4cff0c23e570bbb3f531aee484e590cd56b.scope. Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.895106 kernel: audit: type=1400 audit(1696274393.878:1405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.895257 kernel: audit: type=1400 audit(1696274393.878:1406): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.895324 kernel: audit: type=1400 audit(1696274393.878:1407): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.910456 kernel: audit: type=1400 audit(1696274393.878:1408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.927286 kernel: audit: type=1400 audit(1696274393.878:1409): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.927422 kernel: audit: type=1400 audit(1696274393.878:1410): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.935356 kernel: audit: type=1400 audit(1696274393.878:1411): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.943398 kernel: audit: type=1400 audit(1696274393.878:1412): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit: BPF prog-id=135 op=LOAD Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2493 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:53.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376365333432643231613838313363366362623563336637323562 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2493 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:53.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376365333432643231613838313363366362623563336637323562 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.887000 audit: BPF prog-id=136 op=LOAD Oct 2 19:19:53.887000 audit[4168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2493 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:53.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376365333432643231613838313363366362623563336637323562 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.894000 audit: BPF prog-id=137 op=LOAD Oct 2 19:19:53.894000 audit[4168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2493 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:53.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376365333432643231613838313363366362623563336637323562 Oct 2 19:19:53.902000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:19:53.902000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { perfmon } for pid=4168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit[4168]: AVC avc: denied { bpf } for pid=4168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:53.902000 audit: BPF prog-id=138 op=LOAD Oct 2 19:19:53.902000 audit[4168]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2493 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:53.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376365333432643231613838313363366362623563336637323562 Oct 2 19:19:53.989641 env[1746]: time="2023-10-02T19:19:53.989557889Z" level=info msg="StartContainer for \"607ce342d21a8813c6cbb5c3f725b4cff0c23e570bbb3f531aee484e590cd56b\" returns successfully" Oct 2 19:19:55.336000 audit[4179]: AVC avc: denied { watch } for pid=4179 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=4812 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:55.336000 audit[4179]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40008d0000 a2=fc6 a3=0 items=0 ppid=2493 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:55.336000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:55.337000 audit[4179]: AVC avc: denied { watch } for pid=4179 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=4797 scontext=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:55.337000 audit[4179]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000128540 a2=fc6 a3=0 items=0 ppid=2493 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c634,c749 key=(null) Oct 2 19:19:55.337000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:57.089103 kubelet[2868]: E1002 19:19:57.089047 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:57.810734 kubelet[2868]: E1002 19:19:57.810695 2868 controller.go:193] "Failed to update lease" err="Put \"https://172.31.29.254:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-254?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:19:58.483709 systemd[1]: cri-containerd-9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963.scope: Deactivated successfully. Oct 2 19:19:58.484313 systemd[1]: cri-containerd-9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963.scope: Consumed 4.996s CPU time. Oct 2 19:19:58.487000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:19:58.487000 audit: BPF prog-id=101 op=UNLOAD Oct 2 19:19:58.535730 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963-rootfs.mount: Deactivated successfully. Oct 2 19:19:58.561685 env[1746]: time="2023-10-02T19:19:58.561600064Z" level=info msg="shim disconnected" id=9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963 Oct 2 19:19:58.561685 env[1746]: time="2023-10-02T19:19:58.561676085Z" level=warning msg="cleaning up after shim disconnected" id=9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963 namespace=k8s.io Oct 2 19:19:58.562522 env[1746]: time="2023-10-02T19:19:58.561698465Z" level=info msg="cleaning up dead shim" Oct 2 19:19:58.589426 env[1746]: time="2023-10-02T19:19:58.589369126Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4208 runtime=io.containerd.runc.v2\n" Oct 2 19:19:58.770509 kubelet[2868]: I1002 19:19:58.769689 2868 scope.go:117] "RemoveContainer" containerID="9e5d74e63b56d992c6c90fc13d7a628c4b714d389b8021652c541f658f3ae963" Oct 2 19:19:58.774605 env[1746]: time="2023-10-02T19:19:58.774548831Z" level=info msg="CreateContainer within sandbox \"3861ebdd20fd3b3ee9051c944dfc290fed33105767b2c7e1d3a5dfed6bb43c8d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:19:58.793750 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3071835905.mount: Deactivated successfully. Oct 2 19:19:58.806299 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount30661007.mount: Deactivated successfully. Oct 2 19:19:58.808506 env[1746]: time="2023-10-02T19:19:58.808441138Z" level=info msg="CreateContainer within sandbox \"3861ebdd20fd3b3ee9051c944dfc290fed33105767b2c7e1d3a5dfed6bb43c8d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"1c65dba718e2f46db05c4eb3f1c41efd6e247287bad004303c3aa29c8712fa69\"" Oct 2 19:19:58.809420 env[1746]: time="2023-10-02T19:19:58.809353576Z" level=info msg="StartContainer for \"1c65dba718e2f46db05c4eb3f1c41efd6e247287bad004303c3aa29c8712fa69\"" Oct 2 19:19:58.853085 systemd[1]: Started cri-containerd-1c65dba718e2f46db05c4eb3f1c41efd6e247287bad004303c3aa29c8712fa69.scope. Oct 2 19:19:58.900487 kernel: kauditd_printk_skb: 57 callbacks suppressed Oct 2 19:19:58.900645 kernel: audit: type=1400 audit(1696274398.896:1427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915892 kernel: audit: type=1400 audit(1696274398.899:1428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.923799 kernel: audit: type=1400 audit(1696274398.899:1429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.932127 kernel: audit: type=1400 audit(1696274398.899:1430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.951056 kernel: audit: type=1400 audit(1696274398.899:1431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.951190 kernel: audit: type=1400 audit(1696274398.899:1432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.964707 kernel: audit: type=1400 audit(1696274398.899:1433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.972366 kernel: audit: type=1400 audit(1696274398.899:1434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.980279 kernel: audit: type=1400 audit(1696274398.899:1435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.988204 kernel: audit: type=1400 audit(1696274398.899:1436): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.899000 audit: BPF prog-id=139 op=LOAD Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2495 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:58.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363564626137313865326634366462303563346562336631633431 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2495 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:58.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363564626137313865326634366462303563346562336631633431 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.907000 audit: BPF prog-id=140 op=LOAD Oct 2 19:19:58.907000 audit[4230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2495 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:58.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363564626137313865326634366462303563346562336631633431 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.915000 audit: BPF prog-id=141 op=LOAD Oct 2 19:19:58.915000 audit[4230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2495 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:58.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363564626137313865326634366462303563346562336631633431 Oct 2 19:19:58.924000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:19:58.925000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { perfmon } for pid=4230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit[4230]: AVC avc: denied { bpf } for pid=4230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:19:58.925000 audit: BPF prog-id=142 op=LOAD Oct 2 19:19:58.925000 audit[4230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2495 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:58.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363564626137313865326634366462303563346562336631633431 Oct 2 19:19:59.026912 env[1746]: time="2023-10-02T19:19:59.026685635Z" level=info msg="StartContainer for \"1c65dba718e2f46db05c4eb3f1c41efd6e247287bad004303c3aa29c8712fa69\" returns successfully" Oct 2 19:20:02.090394 kubelet[2868]: E1002 19:20:02.090316 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:07.092736 kubelet[2868]: E1002 19:20:07.092677 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:07.812012 kubelet[2868]: E1002 19:20:07.811954 2868 controller.go:193] "Failed to update lease" err="Put \"https://172.31.29.254:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-254?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:20:12.093785 kubelet[2868]: E1002 19:20:12.093717 2868 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"