Oct 2 19:37:14.174644 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 19:37:14.174682 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:37:14.174704 kernel: efi: EFI v2.70 by EDK II Oct 2 19:37:14.174719 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 19:37:14.174733 kernel: ACPI: Early table checksum verification disabled Oct 2 19:37:14.174746 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 19:37:14.174762 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 19:37:14.174776 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:37:14.174790 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 19:37:14.174803 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:37:14.174821 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 19:37:14.174835 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 19:37:14.174848 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 19:37:14.174862 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:37:14.174878 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 19:37:14.174897 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 19:37:14.174912 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 19:37:14.174926 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 19:37:14.174940 kernel: printk: bootconsole [uart0] enabled Oct 2 19:37:14.174954 kernel: NUMA: Failed to initialise from firmware Oct 2 19:37:14.174969 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:37:14.174983 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 19:37:14.174997 kernel: Zone ranges: Oct 2 19:37:14.175012 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 19:37:14.175026 kernel: DMA32 empty Oct 2 19:37:14.175040 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 19:37:14.175058 kernel: Movable zone start for each node Oct 2 19:37:14.175090 kernel: Early memory node ranges Oct 2 19:37:14.175109 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 19:37:14.175124 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 19:37:14.175139 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 19:37:14.175154 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 19:37:14.175168 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 19:37:14.175182 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 19:37:14.175197 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 19:37:14.175211 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 19:37:14.175225 kernel: psci: probing for conduit method from ACPI. Oct 2 19:37:14.175239 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 19:37:14.175259 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:37:14.175273 kernel: psci: Trusted OS migration not required Oct 2 19:37:14.175294 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:37:14.175310 kernel: ACPI: SRAT not present Oct 2 19:37:14.175325 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:37:14.175344 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:37:14.175360 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 19:37:14.175375 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:37:14.175390 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:37:14.175405 kernel: CPU features: detected: Spectre-v2 Oct 2 19:37:14.175420 kernel: CPU features: detected: Spectre-v3a Oct 2 19:37:14.175434 kernel: CPU features: detected: Spectre-BHB Oct 2 19:37:14.175449 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:37:14.175464 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:37:14.175479 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 19:37:14.175494 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 19:37:14.175513 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 19:37:14.175528 kernel: Policy zone: Normal Oct 2 19:37:14.175546 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:37:14.175562 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:37:14.175577 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:37:14.175592 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:37:14.175607 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:37:14.175622 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 19:37:14.175638 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 19:37:14.175653 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:37:14.175672 kernel: trace event string verifier disabled Oct 2 19:37:14.175687 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:37:14.175703 kernel: rcu: RCU event tracing is enabled. Oct 2 19:37:14.175718 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:37:14.175734 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:37:14.175749 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:37:14.175765 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:37:14.175780 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:37:14.175795 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:37:14.175810 kernel: GICv3: 96 SPIs implemented Oct 2 19:37:14.175824 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:37:14.175839 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:37:14.175858 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:37:14.175873 kernel: GICv3: 16 PPIs implemented Oct 2 19:37:14.175888 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 19:37:14.175902 kernel: ACPI: SRAT not present Oct 2 19:37:14.175917 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 19:37:14.175932 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:37:14.175947 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:37:14.175962 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 19:37:14.175977 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 19:37:14.175992 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 19:37:14.176007 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 19:37:14.176026 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 19:37:14.176042 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 19:37:14.176057 kernel: Console: colour dummy device 80x25 Oct 2 19:37:14.176088 kernel: printk: console [tty1] enabled Oct 2 19:37:14.176108 kernel: ACPI: Core revision 20210730 Oct 2 19:37:14.176125 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 19:37:14.176141 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:37:14.176157 kernel: LSM: Security Framework initializing Oct 2 19:37:14.176172 kernel: SELinux: Initializing. Oct 2 19:37:14.176188 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:37:14.176209 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:37:14.176224 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:37:14.176239 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 19:37:14.176255 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 19:37:14.176270 kernel: Remapping and enabling EFI services. Oct 2 19:37:14.176285 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:37:14.176301 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:37:14.176316 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 19:37:14.176332 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 19:37:14.176351 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 19:37:14.176367 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:37:14.176382 kernel: SMP: Total of 2 processors activated. Oct 2 19:37:14.176398 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:37:14.176413 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 19:37:14.176428 kernel: CPU features: detected: CRC32 instructions Oct 2 19:37:14.176443 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:37:14.176459 kernel: alternatives: patching kernel code Oct 2 19:37:14.176474 kernel: devtmpfs: initialized Oct 2 19:37:14.176494 kernel: KASLR disabled due to lack of seed Oct 2 19:37:14.176510 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:37:14.176526 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:37:14.176571 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:37:14.176643 kernel: SMBIOS 3.0.0 present. Oct 2 19:37:14.176661 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 19:37:14.176677 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:37:14.176693 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:37:14.176709 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:37:14.176725 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:37:14.176741 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:37:14.176758 kernel: audit: type=2000 audit(0.247:1): state=initialized audit_enabled=0 res=1 Oct 2 19:37:14.176779 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:37:14.176795 kernel: cpuidle: using governor menu Oct 2 19:37:14.176812 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:37:14.176828 kernel: ASID allocator initialised with 32768 entries Oct 2 19:37:14.176844 kernel: ACPI: bus type PCI registered Oct 2 19:37:14.176864 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:37:14.176880 kernel: Serial: AMBA PL011 UART driver Oct 2 19:37:14.176896 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:37:14.176912 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:37:14.176928 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:37:14.176944 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:37:14.176960 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:37:14.176976 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:37:14.176992 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:37:14.177012 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:37:14.177028 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:37:14.177044 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:37:14.177060 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:37:14.177095 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:37:14.177114 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:37:14.177131 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:37:14.177147 kernel: ACPI: Interpreter enabled Oct 2 19:37:14.177163 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:37:14.177185 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:37:14.177201 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 19:37:14.177637 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:37:14.179517 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:37:14.180251 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:37:14.180447 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 19:37:14.187290 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 19:37:14.187340 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 19:37:14.187359 kernel: acpiphp: Slot [1] registered Oct 2 19:37:14.187375 kernel: acpiphp: Slot [2] registered Oct 2 19:37:14.187392 kernel: acpiphp: Slot [3] registered Oct 2 19:37:14.187408 kernel: acpiphp: Slot [4] registered Oct 2 19:37:14.187424 kernel: acpiphp: Slot [5] registered Oct 2 19:37:14.187440 kernel: acpiphp: Slot [6] registered Oct 2 19:37:14.187456 kernel: acpiphp: Slot [7] registered Oct 2 19:37:14.187472 kernel: acpiphp: Slot [8] registered Oct 2 19:37:14.187492 kernel: acpiphp: Slot [9] registered Oct 2 19:37:14.187509 kernel: acpiphp: Slot [10] registered Oct 2 19:37:14.187526 kernel: acpiphp: Slot [11] registered Oct 2 19:37:14.187542 kernel: acpiphp: Slot [12] registered Oct 2 19:37:14.187558 kernel: acpiphp: Slot [13] registered Oct 2 19:37:14.187574 kernel: acpiphp: Slot [14] registered Oct 2 19:37:14.187589 kernel: acpiphp: Slot [15] registered Oct 2 19:37:14.187605 kernel: acpiphp: Slot [16] registered Oct 2 19:37:14.187621 kernel: acpiphp: Slot [17] registered Oct 2 19:37:14.187637 kernel: acpiphp: Slot [18] registered Oct 2 19:37:14.187657 kernel: acpiphp: Slot [19] registered Oct 2 19:37:14.187673 kernel: acpiphp: Slot [20] registered Oct 2 19:37:14.187688 kernel: acpiphp: Slot [21] registered Oct 2 19:37:14.187704 kernel: acpiphp: Slot [22] registered Oct 2 19:37:14.187720 kernel: acpiphp: Slot [23] registered Oct 2 19:37:14.187736 kernel: acpiphp: Slot [24] registered Oct 2 19:37:14.187752 kernel: acpiphp: Slot [25] registered Oct 2 19:37:14.187768 kernel: acpiphp: Slot [26] registered Oct 2 19:37:14.187784 kernel: acpiphp: Slot [27] registered Oct 2 19:37:14.187803 kernel: acpiphp: Slot [28] registered Oct 2 19:37:14.187819 kernel: acpiphp: Slot [29] registered Oct 2 19:37:14.187835 kernel: acpiphp: Slot [30] registered Oct 2 19:37:14.187851 kernel: acpiphp: Slot [31] registered Oct 2 19:37:14.187868 kernel: PCI host bridge to bus 0000:00 Oct 2 19:37:14.188064 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 19:37:14.190324 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:37:14.190520 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 19:37:14.190703 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 19:37:14.190923 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 19:37:14.191178 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 19:37:14.191998 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 19:37:14.193608 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:37:14.193814 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 19:37:14.194014 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:37:14.194251 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:37:14.194453 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 19:37:14.194653 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 19:37:14.194851 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 19:37:14.195048 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 19:37:14.195269 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 19:37:14.195476 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 19:37:14.195667 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 19:37:14.205261 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 19:37:14.205519 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 19:37:14.205732 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 19:37:14.205936 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:37:14.206167 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 19:37:14.206199 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:37:14.206218 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:37:14.206235 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:37:14.206253 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:37:14.206269 kernel: iommu: Default domain type: Translated Oct 2 19:37:14.206286 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:37:14.206303 kernel: vgaarb: loaded Oct 2 19:37:14.206319 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:37:14.206336 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:37:14.206356 kernel: PTP clock support registered Oct 2 19:37:14.206372 kernel: Registered efivars operations Oct 2 19:37:14.206389 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:37:14.206405 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:37:14.206422 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:37:14.206438 kernel: pnp: PnP ACPI init Oct 2 19:37:14.206683 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 19:37:14.206709 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:37:14.206725 kernel: NET: Registered PF_INET protocol family Oct 2 19:37:14.206748 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:37:14.206765 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:37:14.206781 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:37:14.206798 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:37:14.206814 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:37:14.206830 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:37:14.206846 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:37:14.206863 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:37:14.206880 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:37:14.206900 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:37:14.206917 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 19:37:14.206933 kernel: kvm [1]: HYP mode not available Oct 2 19:37:14.206949 kernel: Initialise system trusted keyrings Oct 2 19:37:14.206966 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:37:14.206982 kernel: Key type asymmetric registered Oct 2 19:37:14.206998 kernel: Asymmetric key parser 'x509' registered Oct 2 19:37:14.207014 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:37:14.207030 kernel: io scheduler mq-deadline registered Oct 2 19:37:14.207067 kernel: io scheduler kyber registered Oct 2 19:37:14.207106 kernel: io scheduler bfq registered Oct 2 19:37:14.207336 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 19:37:14.207362 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:37:14.207378 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:37:14.207395 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:37:14.207412 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 19:37:14.207642 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 19:37:14.207670 kernel: printk: console [ttyS0] disabled Oct 2 19:37:14.207688 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 19:37:14.207704 kernel: printk: console [ttyS0] enabled Oct 2 19:37:14.207720 kernel: printk: bootconsole [uart0] disabled Oct 2 19:37:14.207736 kernel: thunder_xcv, ver 1.0 Oct 2 19:37:14.207752 kernel: thunder_bgx, ver 1.0 Oct 2 19:37:14.207768 kernel: nicpf, ver 1.0 Oct 2 19:37:14.207784 kernel: nicvf, ver 1.0 Oct 2 19:37:14.208017 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:37:14.209244 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:37:13 UTC (1696275433) Oct 2 19:37:14.209282 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:37:14.209299 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:37:14.209316 kernel: Segment Routing with IPv6 Oct 2 19:37:14.209332 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:37:14.209349 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:37:14.209365 kernel: Key type dns_resolver registered Oct 2 19:37:14.209382 kernel: registered taskstats version 1 Oct 2 19:37:14.209404 kernel: Loading compiled-in X.509 certificates Oct 2 19:37:14.209421 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:37:14.209437 kernel: Key type .fscrypt registered Oct 2 19:37:14.209453 kernel: Key type fscrypt-provisioning registered Oct 2 19:37:14.209469 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:37:14.209485 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:37:14.209501 kernel: ima: No architecture policies found Oct 2 19:37:14.209517 kernel: Freeing unused kernel memory: 34560K Oct 2 19:37:14.209533 kernel: Run /init as init process Oct 2 19:37:14.209552 kernel: with arguments: Oct 2 19:37:14.209569 kernel: /init Oct 2 19:37:14.209584 kernel: with environment: Oct 2 19:37:14.209600 kernel: HOME=/ Oct 2 19:37:14.209616 kernel: TERM=linux Oct 2 19:37:14.209632 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:37:14.209653 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:37:14.209674 systemd[1]: Detected virtualization amazon. Oct 2 19:37:14.209696 systemd[1]: Detected architecture arm64. Oct 2 19:37:14.209713 systemd[1]: Running in initrd. Oct 2 19:37:14.209730 systemd[1]: No hostname configured, using default hostname. Oct 2 19:37:14.209747 systemd[1]: Hostname set to . Oct 2 19:37:14.209765 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:37:14.209783 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:37:14.209800 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:37:14.209817 systemd[1]: Reached target cryptsetup.target. Oct 2 19:37:14.209838 systemd[1]: Reached target paths.target. Oct 2 19:37:14.209856 systemd[1]: Reached target slices.target. Oct 2 19:37:14.209873 systemd[1]: Reached target swap.target. Oct 2 19:37:14.209890 systemd[1]: Reached target timers.target. Oct 2 19:37:14.209909 systemd[1]: Listening on iscsid.socket. Oct 2 19:37:14.209926 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:37:14.209944 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:37:14.209961 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:37:14.209983 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:37:14.210000 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:37:14.210018 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:37:14.210035 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:37:14.210053 systemd[1]: Reached target sockets.target. Oct 2 19:37:14.210132 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:37:14.210157 systemd[1]: Finished network-cleanup.service. Oct 2 19:37:14.210176 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:37:14.210193 systemd[1]: Starting systemd-journald.service... Oct 2 19:37:14.210216 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:37:14.210234 systemd[1]: Starting systemd-resolved.service... Oct 2 19:37:14.210251 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:37:14.210269 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:37:14.210286 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:37:14.210304 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:37:14.210322 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:37:14.210339 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:37:14.210357 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:37:14.210379 kernel: audit: type=1130 audit(1696275434.194:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.210400 systemd-journald[309]: Journal started Oct 2 19:37:14.210482 systemd-journald[309]: Runtime Journal (/run/log/journal/ec2b43ce0231c04c3d097c9e6bdd2910) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:37:14.214853 systemd[1]: Started systemd-journald.service. Oct 2 19:37:14.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.180760 systemd-modules-load[310]: Inserted module 'overlay' Oct 2 19:37:14.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.221305 systemd-resolved[311]: Positive Trust Anchors: Oct 2 19:37:14.221594 systemd-resolved[311]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:37:14.240677 kernel: audit: type=1130 audit(1696275434.213:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.221651 systemd-resolved[311]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:37:14.267576 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:37:14.272134 kernel: Bridge firewalling registered Oct 2 19:37:14.272064 systemd-modules-load[310]: Inserted module 'br_netfilter' Oct 2 19:37:14.281981 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:37:14.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.300115 kernel: audit: type=1130 audit(1696275434.283:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.302539 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:37:14.312123 kernel: SCSI subsystem initialized Oct 2 19:37:14.336760 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:37:14.336837 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:37:14.340037 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:37:14.351873 systemd-modules-load[310]: Inserted module 'dm_multipath' Oct 2 19:37:14.355820 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:37:14.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.359486 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:37:14.384678 kernel: audit: type=1130 audit(1696275434.357:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.391926 dracut-cmdline[326]: dracut-dracut-053 Oct 2 19:37:14.410906 dracut-cmdline[326]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:37:14.429205 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:37:14.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.441098 kernel: audit: type=1130 audit(1696275434.430:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.645116 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:37:14.659677 kernel: iscsi: registered transport (tcp) Oct 2 19:37:14.685244 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:37:14.685338 kernel: QLogic iSCSI HBA Driver Oct 2 19:37:14.845099 kernel: random: crng init done Oct 2 19:37:14.845279 systemd-resolved[311]: Defaulting to hostname 'linux'. Oct 2 19:37:14.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.851392 systemd[1]: Started systemd-resolved.service. Oct 2 19:37:14.870914 kernel: audit: type=1130 audit(1696275434.854:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.855694 systemd[1]: Reached target nss-lookup.target. Oct 2 19:37:14.904534 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:37:14.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:14.909981 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:37:14.920002 kernel: audit: type=1130 audit(1696275434.907:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.003111 kernel: raid6: neonx8 gen() 6376 MB/s Oct 2 19:37:15.021102 kernel: raid6: neonx8 xor() 4749 MB/s Oct 2 19:37:15.039101 kernel: raid6: neonx4 gen() 6451 MB/s Oct 2 19:37:15.057101 kernel: raid6: neonx4 xor() 4875 MB/s Oct 2 19:37:15.075101 kernel: raid6: neonx2 gen() 5712 MB/s Oct 2 19:37:15.093101 kernel: raid6: neonx2 xor() 4529 MB/s Oct 2 19:37:15.111104 kernel: raid6: neonx1 gen() 4442 MB/s Oct 2 19:37:15.129103 kernel: raid6: neonx1 xor() 3678 MB/s Oct 2 19:37:15.147103 kernel: raid6: int64x8 gen() 3385 MB/s Oct 2 19:37:15.165104 kernel: raid6: int64x8 xor() 2101 MB/s Oct 2 19:37:15.183103 kernel: raid6: int64x4 gen() 3758 MB/s Oct 2 19:37:15.201104 kernel: raid6: int64x4 xor() 2203 MB/s Oct 2 19:37:15.219103 kernel: raid6: int64x2 gen() 3561 MB/s Oct 2 19:37:15.237103 kernel: raid6: int64x2 xor() 1955 MB/s Oct 2 19:37:15.255104 kernel: raid6: int64x1 gen() 2749 MB/s Oct 2 19:37:15.274695 kernel: raid6: int64x1 xor() 1455 MB/s Oct 2 19:37:15.274724 kernel: raid6: using algorithm neonx4 gen() 6451 MB/s Oct 2 19:37:15.274752 kernel: raid6: .... xor() 4875 MB/s, rmw enabled Oct 2 19:37:15.276569 kernel: raid6: using neon recovery algorithm Oct 2 19:37:15.295110 kernel: xor: measuring software checksum speed Oct 2 19:37:15.298102 kernel: 8regs : 9332 MB/sec Oct 2 19:37:15.300104 kernel: 32regs : 11108 MB/sec Oct 2 19:37:15.304414 kernel: arm64_neon : 9565 MB/sec Oct 2 19:37:15.304443 kernel: xor: using function: 32regs (11108 MB/sec) Oct 2 19:37:15.394122 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:37:15.431708 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:37:15.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.442000 audit: BPF prog-id=7 op=LOAD Oct 2 19:37:15.446175 kernel: audit: type=1130 audit(1696275435.432:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.446224 kernel: audit: type=1334 audit(1696275435.442:10): prog-id=7 op=LOAD Oct 2 19:37:15.444200 systemd[1]: Starting systemd-udevd.service... Oct 2 19:37:15.442000 audit: BPF prog-id=8 op=LOAD Oct 2 19:37:15.482049 systemd-udevd[508]: Using default interface naming scheme 'v252'. Oct 2 19:37:15.491142 systemd[1]: Started systemd-udevd.service. Oct 2 19:37:15.496590 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:37:15.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.562291 dracut-pre-trigger[522]: rd.md=0: removing MD RAID activation Oct 2 19:37:15.670547 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:37:15.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.678125 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:37:15.785246 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:37:15.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:15.917097 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:37:15.922059 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 19:37:15.928640 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:37:15.928941 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:37:15.941106 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:e5:66:6d:c7:21 Oct 2 19:37:15.945242 (udev-worker)[576]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:15.959106 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 19:37:15.962108 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:37:15.970118 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:37:15.976003 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:37:15.976051 kernel: GPT:9289727 != 16777215 Oct 2 19:37:15.976108 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:37:15.978327 kernel: GPT:9289727 != 16777215 Oct 2 19:37:15.981792 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:37:15.984311 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:16.059113 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (572) Oct 2 19:37:16.139238 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:37:16.237228 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:37:16.249853 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:37:16.270198 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:37:16.290617 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:37:16.297993 systemd[1]: Starting disk-uuid.service... Oct 2 19:37:16.326111 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:16.330828 disk-uuid[674]: Primary Header is updated. Oct 2 19:37:16.330828 disk-uuid[674]: Secondary Entries is updated. Oct 2 19:37:16.330828 disk-uuid[674]: Secondary Header is updated. Oct 2 19:37:17.357137 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:37:17.358594 disk-uuid[675]: The operation has completed successfully. Oct 2 19:37:17.620433 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:37:17.623231 systemd[1]: Finished disk-uuid.service. Oct 2 19:37:17.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:17.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:17.648411 systemd[1]: Starting verity-setup.service... Oct 2 19:37:17.701104 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:37:17.813768 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:37:17.820323 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:37:17.834780 systemd[1]: Finished verity-setup.service. Oct 2 19:37:17.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:17.840452 kernel: kauditd_printk_skb: 6 callbacks suppressed Oct 2 19:37:17.840489 kernel: audit: type=1130 audit(1696275437.837:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:17.927282 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:37:17.928518 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:37:17.932902 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:37:17.937193 systemd[1]: Starting ignition-setup.service... Oct 2 19:37:17.946748 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:37:17.977908 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:17.977968 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:17.980735 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:17.989120 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:18.023501 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:37:18.047769 systemd[1]: Finished ignition-setup.service. Oct 2 19:37:18.073318 kernel: audit: type=1130 audit(1696275438.049:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.051487 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:37:18.314456 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:37:18.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.333263 kernel: audit: type=1130 audit(1696275438.317:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.333313 kernel: audit: type=1334 audit(1696275438.331:20): prog-id=9 op=LOAD Oct 2 19:37:18.331000 audit: BPF prog-id=9 op=LOAD Oct 2 19:37:18.334762 systemd[1]: Starting systemd-networkd.service... Oct 2 19:37:18.393885 systemd-networkd[1020]: lo: Link UP Oct 2 19:37:18.393909 systemd-networkd[1020]: lo: Gained carrier Oct 2 19:37:18.396566 systemd-networkd[1020]: Enumeration completed Oct 2 19:37:18.398798 systemd-networkd[1020]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:37:18.400633 systemd[1]: Started systemd-networkd.service. Oct 2 19:37:18.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.409374 systemd[1]: Reached target network.target. Oct 2 19:37:18.422529 kernel: audit: type=1130 audit(1696275438.407:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.421695 systemd-networkd[1020]: eth0: Link UP Oct 2 19:37:18.421704 systemd-networkd[1020]: eth0: Gained carrier Oct 2 19:37:18.426227 systemd[1]: Starting iscsiuio.service... Oct 2 19:37:18.446879 systemd[1]: Started iscsiuio.service. Oct 2 19:37:18.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.451960 systemd[1]: Starting iscsid.service... Oct 2 19:37:18.462055 kernel: audit: type=1130 audit(1696275438.445:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.461633 systemd-networkd[1020]: eth0: DHCPv4 address 172.31.25.22/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:37:18.477445 iscsid[1025]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:37:18.477445 iscsid[1025]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 19:37:18.477445 iscsid[1025]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:37:18.477445 iscsid[1025]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:37:18.477445 iscsid[1025]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:37:18.477445 iscsid[1025]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:37:18.477445 iscsid[1025]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:37:18.540580 kernel: audit: type=1130 audit(1696275438.497:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.493525 systemd[1]: Started iscsid.service. Oct 2 19:37:18.502826 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:37:18.558520 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:37:18.578725 kernel: audit: type=1130 audit(1696275438.559:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.560884 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:37:18.570346 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:37:18.572589 systemd[1]: Reached target remote-fs.target. Oct 2 19:37:18.579242 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:37:18.615019 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:37:18.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.627131 kernel: audit: type=1130 audit(1696275438.614:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.863169 ignition[928]: Ignition 2.14.0 Oct 2 19:37:18.865193 ignition[928]: Stage: fetch-offline Oct 2 19:37:18.867306 ignition[928]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:18.870325 ignition[928]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:18.886871 ignition[928]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:18.887983 ignition[928]: Ignition finished successfully Oct 2 19:37:18.893459 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:37:18.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.897948 systemd[1]: Starting ignition-fetch.service... Oct 2 19:37:18.912905 kernel: audit: type=1130 audit(1696275438.894:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:18.936049 ignition[1044]: Ignition 2.14.0 Oct 2 19:37:18.936094 ignition[1044]: Stage: fetch Oct 2 19:37:18.936440 ignition[1044]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:18.936498 ignition[1044]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:18.955254 ignition[1044]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:18.958437 ignition[1044]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:18.973440 ignition[1044]: INFO : PUT result: OK Oct 2 19:37:18.977009 ignition[1044]: DEBUG : parsed url from cmdline: "" Oct 2 19:37:18.979224 ignition[1044]: INFO : no config URL provided Oct 2 19:37:18.979224 ignition[1044]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:37:18.984469 ignition[1044]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:37:18.984469 ignition[1044]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:18.990167 ignition[1044]: INFO : PUT result: OK Oct 2 19:37:18.992244 ignition[1044]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:37:18.996069 ignition[1044]: INFO : GET result: OK Oct 2 19:37:18.998313 ignition[1044]: DEBUG : parsing config with SHA512: f697717dfc359b8eb06d0ccc3659050421c3e9e76fb963fddf28b7011fb9c48e6c93b40611dd623d3b30f6e59c0168417bf87f43985c8eedb59dd296c64b4bd9 Oct 2 19:37:19.040391 unknown[1044]: fetched base config from "system" Oct 2 19:37:19.040420 unknown[1044]: fetched base config from "system" Oct 2 19:37:19.040435 unknown[1044]: fetched user config from "aws" Oct 2 19:37:19.047423 ignition[1044]: fetch: fetch complete Oct 2 19:37:19.047450 ignition[1044]: fetch: fetch passed Oct 2 19:37:19.051052 ignition[1044]: Ignition finished successfully Oct 2 19:37:19.057018 systemd[1]: Finished ignition-fetch.service. Oct 2 19:37:19.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.062452 systemd[1]: Starting ignition-kargs.service... Oct 2 19:37:19.096837 ignition[1050]: Ignition 2.14.0 Oct 2 19:37:19.096866 ignition[1050]: Stage: kargs Oct 2 19:37:19.097248 ignition[1050]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:19.097306 ignition[1050]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:19.114386 ignition[1050]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:19.117246 ignition[1050]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:19.121562 ignition[1050]: INFO : PUT result: OK Oct 2 19:37:19.131049 ignition[1050]: kargs: kargs passed Oct 2 19:37:19.131158 ignition[1050]: Ignition finished successfully Oct 2 19:37:19.135791 systemd[1]: Finished ignition-kargs.service. Oct 2 19:37:19.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.138486 systemd[1]: Starting ignition-disks.service... Oct 2 19:37:19.169427 ignition[1056]: Ignition 2.14.0 Oct 2 19:37:19.169456 ignition[1056]: Stage: disks Oct 2 19:37:19.169810 ignition[1056]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:19.169868 ignition[1056]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:19.186257 ignition[1056]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:19.189010 ignition[1056]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:19.192965 ignition[1056]: INFO : PUT result: OK Oct 2 19:37:19.198742 ignition[1056]: disks: disks passed Oct 2 19:37:19.200696 ignition[1056]: Ignition finished successfully Oct 2 19:37:19.204254 systemd[1]: Finished ignition-disks.service. Oct 2 19:37:19.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.208297 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:37:19.210571 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:37:19.212716 systemd[1]: Reached target local-fs.target. Oct 2 19:37:19.214717 systemd[1]: Reached target sysinit.target. Oct 2 19:37:19.216713 systemd[1]: Reached target basic.target. Oct 2 19:37:19.219978 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:37:19.274145 systemd-fsck[1064]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:37:19.283308 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:37:19.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.289146 systemd[1]: Mounting sysroot.mount... Oct 2 19:37:19.314145 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:37:19.316337 systemd[1]: Mounted sysroot.mount. Oct 2 19:37:19.317210 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:37:19.320819 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:37:19.338044 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:37:19.338136 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:37:19.338193 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:37:19.343625 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:37:19.359336 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:37:19.377733 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:37:19.394143 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1076) Oct 2 19:37:19.400422 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:19.400478 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:19.402692 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:19.412107 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:19.415459 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:37:19.419885 initrd-setup-root[1102]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:37:19.445067 initrd-setup-root[1112]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:37:19.462584 initrd-setup-root[1120]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:37:19.481799 initrd-setup-root[1128]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:37:19.689518 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:37:19.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.694823 systemd[1]: Starting ignition-mount.service... Oct 2 19:37:19.705384 systemd[1]: Starting sysroot-boot.service... Oct 2 19:37:19.735353 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:37:19.735519 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:37:19.764576 systemd[1]: Finished sysroot-boot.service. Oct 2 19:37:19.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.781826 ignition[1149]: INFO : Ignition 2.14.0 Oct 2 19:37:19.781826 ignition[1149]: INFO : Stage: mount Oct 2 19:37:19.789925 ignition[1149]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:19.789925 ignition[1149]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:19.804730 ignition[1149]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:19.804730 ignition[1149]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:19.804730 ignition[1149]: INFO : PUT result: OK Oct 2 19:37:19.816618 ignition[1149]: INFO : mount: mount passed Oct 2 19:37:19.818595 ignition[1149]: INFO : Ignition finished successfully Oct 2 19:37:19.821246 systemd[1]: Finished ignition-mount.service. Oct 2 19:37:19.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:19.825272 systemd[1]: Starting ignition-files.service... Oct 2 19:37:19.849522 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:37:19.874110 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1156) Oct 2 19:37:19.880178 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:37:19.880218 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:37:19.880250 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:37:19.889107 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:37:19.893865 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:37:19.929912 ignition[1175]: INFO : Ignition 2.14.0 Oct 2 19:37:19.933649 ignition[1175]: INFO : Stage: files Oct 2 19:37:19.933649 ignition[1175]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:19.933649 ignition[1175]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:19.950313 ignition[1175]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:19.953979 ignition[1175]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:19.957632 ignition[1175]: INFO : PUT result: OK Oct 2 19:37:19.963031 ignition[1175]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:37:19.967983 ignition[1175]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:37:19.967983 ignition[1175]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:37:20.006683 ignition[1175]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:37:20.010362 ignition[1175]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:37:20.014752 unknown[1175]: wrote ssh authorized keys file for user: core Oct 2 19:37:20.017459 ignition[1175]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:37:20.021657 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:37:20.026458 ignition[1175]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 19:37:20.136302 systemd-networkd[1020]: eth0: Gained IPv6LL Oct 2 19:37:20.350047 ignition[1175]: INFO : GET result: OK Oct 2 19:37:20.959639 ignition[1175]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 19:37:20.965448 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 19:37:20.965448 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:37:20.975482 ignition[1175]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:37:21.246199 ignition[1175]: INFO : GET result: OK Oct 2 19:37:21.567897 ignition[1175]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 19:37:21.573647 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 19:37:21.573647 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:37:21.583284 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:37:21.587534 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:37:21.591975 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:21.604824 ignition[1175]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem150441290" Oct 2 19:37:21.612331 ignition[1175]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem150441290": device or resource busy Oct 2 19:37:21.612331 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem150441290", trying btrfs: device or resource busy Oct 2 19:37:21.612331 ignition[1175]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem150441290" Oct 2 19:37:21.623773 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1178) Oct 2 19:37:21.623809 ignition[1175]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem150441290" Oct 2 19:37:21.649395 ignition[1175]: INFO : op(3): [started] unmounting "/mnt/oem150441290" Oct 2 19:37:21.649395 ignition[1175]: INFO : op(3): [finished] unmounting "/mnt/oem150441290" Oct 2 19:37:21.649395 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:37:21.659044 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:37:21.659044 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:37:21.669238 systemd[1]: mnt-oem150441290.mount: Deactivated successfully. Oct 2 19:37:21.756377 ignition[1175]: INFO : GET result: OK Oct 2 19:37:22.748743 ignition[1175]: DEBUG : file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 19:37:22.755028 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:37:22.755028 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:37:22.755028 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:37:22.822314 ignition[1175]: INFO : GET result: OK Oct 2 19:37:24.160919 ignition[1175]: DEBUG : file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 19:37:24.168202 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:37:24.168202 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:37:24.168202 ignition[1175]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:37:24.230093 ignition[1175]: INFO : GET result: OK Oct 2 19:37:25.007465 ignition[1175]: DEBUG : file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 19:37:25.014166 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:37:25.014166 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:37:25.014166 ignition[1175]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:37:25.236713 ignition[1175]: INFO : GET result: OK Oct 2 19:37:25.359903 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:37:25.364297 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:37:25.368850 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:37:25.373254 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:37:25.377837 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:37:25.388752 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:37:25.397126 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:25.406287 ignition[1175]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem607031310" Oct 2 19:37:25.411623 ignition[1175]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem607031310": device or resource busy Oct 2 19:37:25.411623 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem607031310", trying btrfs: device or resource busy Oct 2 19:37:25.411623 ignition[1175]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem607031310" Oct 2 19:37:25.411623 ignition[1175]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem607031310" Oct 2 19:37:25.431134 ignition[1175]: INFO : op(6): [started] unmounting "/mnt/oem607031310" Oct 2 19:37:25.431134 ignition[1175]: INFO : op(6): [finished] unmounting "/mnt/oem607031310" Oct 2 19:37:25.431134 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:37:25.431134 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:37:25.431134 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:25.437060 systemd[1]: mnt-oem607031310.mount: Deactivated successfully. Oct 2 19:37:25.473088 ignition[1175]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem187521529" Oct 2 19:37:25.476554 ignition[1175]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem187521529": device or resource busy Oct 2 19:37:25.476554 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem187521529", trying btrfs: device or resource busy Oct 2 19:37:25.476554 ignition[1175]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem187521529" Oct 2 19:37:25.491111 ignition[1175]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem187521529" Oct 2 19:37:25.497745 ignition[1175]: INFO : op(9): [started] unmounting "/mnt/oem187521529" Oct 2 19:37:25.502775 ignition[1175]: INFO : op(9): [finished] unmounting "/mnt/oem187521529" Oct 2 19:37:25.502775 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:37:25.500390 systemd[1]: mnt-oem187521529.mount: Deactivated successfully. Oct 2 19:37:25.512984 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:37:25.512984 ignition[1175]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:37:25.528183 ignition[1175]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4071850841" Oct 2 19:37:25.532172 ignition[1175]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4071850841": device or resource busy Oct 2 19:37:25.536260 ignition[1175]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4071850841", trying btrfs: device or resource busy Oct 2 19:37:25.536260 ignition[1175]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4071850841" Oct 2 19:37:25.544805 ignition[1175]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4071850841" Oct 2 19:37:25.544805 ignition[1175]: INFO : op(c): [started] unmounting "/mnt/oem4071850841" Oct 2 19:37:25.566423 ignition[1175]: INFO : op(c): [finished] unmounting "/mnt/oem4071850841" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(18): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:37:25.566423 ignition[1175]: INFO : files: op(18): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:37:25.643884 ignition[1175]: INFO : files: op(19): [started] setting preset to enabled for "nvidia.service" Oct 2 19:37:25.643884 ignition[1175]: INFO : files: op(19): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:37:25.643884 ignition[1175]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:37:25.643884 ignition[1175]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:37:25.643884 ignition[1175]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:37:25.643884 ignition[1175]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:37:25.643884 ignition[1175]: INFO : files: op(1c): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:37:25.643884 ignition[1175]: INFO : files: op(1c): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:37:25.677037 ignition[1175]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:37:25.681372 ignition[1175]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:37:25.681372 ignition[1175]: INFO : files: files passed Oct 2 19:37:25.681372 ignition[1175]: INFO : Ignition finished successfully Oct 2 19:37:25.692503 systemd[1]: Finished ignition-files.service. Oct 2 19:37:25.706215 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:37:25.706253 kernel: audit: type=1130 audit(1696275445.692:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.708644 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:37:25.719713 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:37:25.729874 systemd[1]: Starting ignition-quench.service... Oct 2 19:37:25.744017 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:37:25.746419 systemd[1]: Finished ignition-quench.service. Oct 2 19:37:25.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.766936 kernel: audit: type=1130 audit(1696275445.749:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.766994 kernel: audit: type=1131 audit(1696275445.758:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.774379 initrd-setup-root-after-ignition[1201]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:37:25.780275 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:37:25.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.785237 systemd[1]: Reached target ignition-complete.target. Oct 2 19:37:25.808776 kernel: audit: type=1130 audit(1696275445.783:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.809223 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:37:25.847267 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:37:25.847528 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:37:25.870690 kernel: audit: type=1130 audit(1696275445.850:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.884683 kernel: audit: type=1131 audit(1696275445.858:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.859643 systemd[1]: Reached target initrd-fs.target. Oct 2 19:37:25.868836 systemd[1]: Reached target initrd.target. Oct 2 19:37:25.872702 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:37:25.874120 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:37:25.918771 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:37:25.935643 kernel: audit: type=1130 audit(1696275445.919:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.924582 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:37:25.953660 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:37:25.958029 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:37:25.962589 systemd[1]: Stopped target timers.target. Oct 2 19:37:25.966459 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:37:25.966781 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:37:25.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.980731 systemd[1]: Stopped target initrd.target. Oct 2 19:37:25.982606 kernel: audit: type=1131 audit(1696275445.971:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:25.984778 systemd[1]: Stopped target basic.target. Oct 2 19:37:25.990106 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:37:25.994386 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:37:25.998780 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:37:26.003335 systemd[1]: Stopped target remote-fs.target. Oct 2 19:37:26.007362 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:37:26.011634 systemd[1]: Stopped target sysinit.target. Oct 2 19:37:26.015539 systemd[1]: Stopped target local-fs.target. Oct 2 19:37:26.019481 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:37:26.023670 systemd[1]: Stopped target swap.target. Oct 2 19:37:26.027345 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:37:26.030022 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:37:26.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.034350 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:37:26.045239 kernel: audit: type=1131 audit(1696275446.033:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.045446 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:37:26.046313 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:37:26.062162 kernel: audit: type=1131 audit(1696275446.049:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.050348 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:37:26.086242 iscsid[1025]: iscsid shutting down. Oct 2 19:37:26.050634 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:37:26.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.060898 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:37:26.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.061271 systemd[1]: Stopped ignition-files.service. Oct 2 19:37:26.065933 systemd[1]: Stopping ignition-mount.service... Oct 2 19:37:26.071124 systemd[1]: Stopping iscsid.service... Oct 2 19:37:26.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.075020 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:37:26.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.076657 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:37:26.077952 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:37:26.091575 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:37:26.091867 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:37:26.158758 ignition[1214]: INFO : Ignition 2.14.0 Oct 2 19:37:26.158758 ignition[1214]: INFO : Stage: umount Oct 2 19:37:26.158758 ignition[1214]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:37:26.158758 ignition[1214]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:37:26.116573 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:37:26.187874 ignition[1214]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:37:26.187874 ignition[1214]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:37:26.187874 ignition[1214]: INFO : PUT result: OK Oct 2 19:37:26.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.116796 systemd[1]: Stopped iscsid.service. Oct 2 19:37:26.127248 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:37:26.127559 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:37:26.216461 ignition[1214]: INFO : umount: umount passed Oct 2 19:37:26.216461 ignition[1214]: INFO : Ignition finished successfully Oct 2 19:37:26.134734 systemd[1]: Stopping iscsiuio.service... Oct 2 19:37:26.185434 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:37:26.185623 systemd[1]: Stopped iscsiuio.service. Oct 2 19:37:26.227766 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:37:26.238369 systemd[1]: Stopped ignition-mount.service. Oct 2 19:37:26.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.242784 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:37:26.245167 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:37:26.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.249220 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:37:26.249319 systemd[1]: Stopped ignition-disks.service. Oct 2 19:37:26.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.255681 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:37:26.255777 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:37:26.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.262309 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:37:26.262388 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:37:26.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.268749 systemd[1]: Stopped target network.target. Oct 2 19:37:26.272510 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:37:26.272646 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:37:26.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.279733 systemd[1]: Stopped target paths.target. Oct 2 19:37:26.279837 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:37:26.289161 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:37:26.293626 systemd[1]: Stopped target slices.target. Oct 2 19:37:26.297365 systemd[1]: Stopped target sockets.target. Oct 2 19:37:26.301151 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:37:26.301247 systemd[1]: Closed iscsid.socket. Oct 2 19:37:26.306808 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:37:26.306891 systemd[1]: Closed iscsiuio.socket. Oct 2 19:37:26.310736 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:37:26.314816 systemd[1]: Stopped ignition-setup.service. Oct 2 19:37:26.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.318668 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:37:26.321182 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:37:26.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.325760 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:37:26.329169 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:37:26.333141 systemd-networkd[1020]: eth0: DHCPv6 lease lost Oct 2 19:37:26.337757 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:37:26.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.337964 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:37:26.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.348000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:37:26.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.376000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:37:26.346685 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:37:26.346881 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:37:26.351832 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:37:26.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.351904 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:37:26.355018 systemd[1]: Stopping network-cleanup.service... Oct 2 19:37:26.356713 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:37:26.356824 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:37:26.361837 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:37:26.361935 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:37:26.365004 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:37:26.365798 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:37:26.368210 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:37:26.382815 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:37:26.383024 systemd[1]: Stopped network-cleanup.service. Oct 2 19:37:26.412278 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:37:26.414923 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:37:26.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.420980 systemd[1]: mnt-oem4071850841.mount: Deactivated successfully. Oct 2 19:37:26.423682 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:37:26.426101 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:37:26.430059 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:37:26.430175 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:37:26.436818 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:37:26.436905 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:37:26.441376 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:37:26.445764 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:37:26.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.449665 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:37:26.449744 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:37:26.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.456216 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:37:26.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.456296 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:37:26.464413 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:37:26.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.485193 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:37:26.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:26.485315 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:37:26.491572 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:37:26.491658 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:37:26.496299 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:37:26.496374 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:37:26.500344 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:37:26.501200 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:37:26.501397 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:37:26.503940 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:37:26.506385 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:37:26.533583 systemd[1]: Switching root. Oct 2 19:37:26.565205 systemd-journald[309]: Journal stopped Oct 2 19:37:32.840439 systemd-journald[309]: Received SIGTERM from PID 1 (systemd). Oct 2 19:37:32.841117 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:37:32.841220 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:37:32.841260 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:37:32.841298 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:37:32.841328 kernel: SELinux: policy capability open_perms=1 Oct 2 19:37:32.841359 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:37:32.841389 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:37:32.841419 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:37:32.841449 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:37:32.841482 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:37:32.841511 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:37:32.841544 systemd[1]: Successfully loaded SELinux policy in 92.595ms. Oct 2 19:37:32.841759 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.624ms. Oct 2 19:37:32.841863 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:37:32.841899 systemd[1]: Detected virtualization amazon. Oct 2 19:37:32.841929 systemd[1]: Detected architecture arm64. Oct 2 19:37:32.841963 systemd[1]: Detected first boot. Oct 2 19:37:32.841995 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:37:32.842027 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:37:32.842064 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:37:32.846527 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:37:32.846594 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:37:32.846633 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 19:37:32.846671 kernel: audit: type=1334 audit(1696275452.268:84): prog-id=12 op=LOAD Oct 2 19:37:32.846699 kernel: audit: type=1334 audit(1696275452.268:85): prog-id=3 op=UNLOAD Oct 2 19:37:32.846726 kernel: audit: type=1334 audit(1696275452.268:86): prog-id=13 op=LOAD Oct 2 19:37:32.846754 kernel: audit: type=1334 audit(1696275452.268:87): prog-id=14 op=LOAD Oct 2 19:37:32.846788 kernel: audit: type=1334 audit(1696275452.268:88): prog-id=4 op=UNLOAD Oct 2 19:37:32.846820 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:37:32.846851 kernel: audit: type=1334 audit(1696275452.268:89): prog-id=5 op=UNLOAD Oct 2 19:37:32.846881 kernel: audit: type=1334 audit(1696275452.273:90): prog-id=15 op=LOAD Oct 2 19:37:32.846912 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:37:32.846943 kernel: audit: type=1334 audit(1696275452.273:91): prog-id=12 op=UNLOAD Oct 2 19:37:32.846974 kernel: audit: type=1334 audit(1696275452.276:92): prog-id=16 op=LOAD Oct 2 19:37:32.847003 kernel: audit: type=1334 audit(1696275452.278:93): prog-id=17 op=LOAD Oct 2 19:37:32.847034 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:37:32.847134 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:37:32.847174 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:37:32.847206 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:37:32.847241 systemd[1]: Created slice system-getty.slice. Oct 2 19:37:32.847273 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:37:32.847303 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:37:32.847334 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:37:32.847369 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:37:32.847401 systemd[1]: Created slice user.slice. Oct 2 19:37:32.847433 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:37:32.847465 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:37:32.847495 systemd[1]: Set up automount boot.automount. Oct 2 19:37:32.847525 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:37:32.847556 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:37:32.847586 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:37:32.847617 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:37:32.847652 systemd[1]: Reached target integritysetup.target. Oct 2 19:37:32.847748 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:37:32.847784 systemd[1]: Reached target remote-fs.target. Oct 2 19:37:32.847815 systemd[1]: Reached target slices.target. Oct 2 19:37:32.847844 systemd[1]: Reached target swap.target. Oct 2 19:37:32.847877 systemd[1]: Reached target torcx.target. Oct 2 19:37:32.847906 systemd[1]: Reached target veritysetup.target. Oct 2 19:37:32.847940 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:37:32.847972 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:37:32.848002 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:37:32.848037 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:37:32.848067 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:37:32.848117 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:37:32.848147 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:37:32.848176 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:37:32.848205 systemd[1]: Mounting media.mount... Oct 2 19:37:32.848237 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:37:32.848267 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:37:32.848296 systemd[1]: Mounting tmp.mount... Oct 2 19:37:32.848330 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:37:32.848360 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:37:32.848391 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:37:32.848421 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:37:32.848452 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:37:32.848481 systemd[1]: Starting modprobe@drm.service... Oct 2 19:37:32.848511 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:37:32.848559 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:37:32.848593 systemd[1]: Starting modprobe@loop.service... Oct 2 19:37:32.848632 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:37:32.848662 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:37:32.848692 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:37:32.848725 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:37:32.848821 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:37:32.848853 systemd[1]: Stopped systemd-journald.service. Oct 2 19:37:32.848882 systemd[1]: Starting systemd-journald.service... Oct 2 19:37:32.848914 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:37:32.848946 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:37:32.848980 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:37:32.849014 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:37:32.849045 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:37:32.849089 systemd[1]: Stopped verity-setup.service. Oct 2 19:37:32.849124 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:37:32.849154 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:37:32.849184 systemd[1]: Mounted media.mount. Oct 2 19:37:32.849214 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:37:32.849243 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:37:32.849277 systemd[1]: Mounted tmp.mount. Oct 2 19:37:32.849311 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:37:32.849342 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:37:32.849377 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:37:32.849407 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:37:32.849437 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:37:32.849471 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:37:32.849502 systemd[1]: Finished modprobe@drm.service. Oct 2 19:37:32.849531 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:37:32.849561 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:37:32.849593 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:37:32.849632 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:37:32.849664 kernel: loop: module loaded Oct 2 19:37:32.849696 systemd[1]: Reached target network-pre.target. Oct 2 19:37:32.849726 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:37:32.849757 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:37:32.849789 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:37:32.849821 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:37:32.849850 kernel: fuse: init (API version 7.34) Oct 2 19:37:32.849883 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:37:32.849915 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:37:32.849946 systemd[1]: Finished modprobe@loop.service. Oct 2 19:37:32.849976 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:37:32.850006 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:37:32.850042 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:37:32.857775 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:37:32.857831 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:37:32.857863 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:37:32.857894 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:37:32.857934 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:37:32.857970 systemd-journald[1323]: Journal started Oct 2 19:37:32.858067 systemd-journald[1323]: Runtime Journal (/run/log/journal/ec2b43ce0231c04c3d097c9e6bdd2910) is 8.0M, max 75.4M, 67.4M free. Oct 2 19:37:27.371000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:37:27.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:37:27.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:37:27.559000 audit: BPF prog-id=10 op=LOAD Oct 2 19:37:27.559000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:37:27.559000 audit: BPF prog-id=11 op=LOAD Oct 2 19:37:27.559000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:37:32.268000 audit: BPF prog-id=12 op=LOAD Oct 2 19:37:32.268000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:37:32.268000 audit: BPF prog-id=13 op=LOAD Oct 2 19:37:32.268000 audit: BPF prog-id=14 op=LOAD Oct 2 19:37:32.268000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:37:32.268000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:37:32.273000 audit: BPF prog-id=15 op=LOAD Oct 2 19:37:32.273000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:37:32.276000 audit: BPF prog-id=16 op=LOAD Oct 2 19:37:32.278000 audit: BPF prog-id=17 op=LOAD Oct 2 19:37:32.278000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:37:32.278000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:37:32.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.291000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:37:32.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.598000 audit: BPF prog-id=18 op=LOAD Oct 2 19:37:32.598000 audit: BPF prog-id=19 op=LOAD Oct 2 19:37:32.598000 audit: BPF prog-id=20 op=LOAD Oct 2 19:37:32.598000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:37:32.598000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:37:32.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.868168 systemd[1]: Started systemd-journald.service. Oct 2 19:37:32.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.814000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:37:32.814000 audit[1323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=fffff66501f0 a2=4000 a3=1 items=0 ppid=1 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:32.814000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:37:32.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.266788 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:37:27.760926 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:37:32.281019 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:37:27.789603 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:37:32.866806 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:37:27.789655 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:37:27.789720 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:37:27.789745 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:37:27.789811 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:37:27.789842 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:37:32.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:27.790283 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:37:32.878815 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:37:27.790365 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:37:32.881524 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:37:27.790400 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:37:27.791247 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:37:27.791329 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:37:27.791374 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:37:27.791414 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:37:27.791459 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:37:27.791498 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:37:31.452407 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:31Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:31.452967 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:31Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:31.453224 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:31Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:31.453662 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:31Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:37:31.453764 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:31Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:37:31.453893 /usr/lib/systemd/system-generators/torcx-generator[1249]: time="2023-10-02T19:37:31Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:37:32.913571 systemd-journald[1323]: Time spent on flushing to /var/log/journal/ec2b43ce0231c04c3d097c9e6bdd2910 is 74.037ms for 1157 entries. Oct 2 19:37:32.913571 systemd-journald[1323]: System Journal (/var/log/journal/ec2b43ce0231c04c3d097c9e6bdd2910) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:37:33.027029 systemd-journald[1323]: Received client request to flush runtime journal. Oct 2 19:37:32.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:32.932988 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:37:33.030707 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:37:33.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.041846 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:37:33.048501 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:37:33.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.084798 udevadm[1357]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:37:33.107478 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:37:33.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.114583 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:37:33.265522 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:37:33.272019 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:37:33.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.402601 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:37:33.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.895628 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:37:33.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:33.898000 audit: BPF prog-id=21 op=LOAD Oct 2 19:37:33.898000 audit: BPF prog-id=22 op=LOAD Oct 2 19:37:33.898000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:37:33.898000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:37:33.900582 systemd[1]: Starting systemd-udevd.service... Oct 2 19:37:33.949307 systemd-udevd[1370]: Using default interface naming scheme 'v252'. Oct 2 19:37:34.023650 systemd[1]: Started systemd-udevd.service. Oct 2 19:37:34.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.026000 audit: BPF prog-id=23 op=LOAD Oct 2 19:37:34.028894 systemd[1]: Starting systemd-networkd.service... Oct 2 19:37:34.042000 audit: BPF prog-id=24 op=LOAD Oct 2 19:37:34.042000 audit: BPF prog-id=25 op=LOAD Oct 2 19:37:34.042000 audit: BPF prog-id=26 op=LOAD Oct 2 19:37:34.044889 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:37:34.122329 (udev-worker)[1373]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:34.126624 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:37:34.166185 systemd[1]: Started systemd-userdbd.service. Oct 2 19:37:34.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.377174 systemd-networkd[1376]: lo: Link UP Oct 2 19:37:34.377662 systemd-networkd[1376]: lo: Gained carrier Oct 2 19:37:34.378682 systemd-networkd[1376]: Enumeration completed Oct 2 19:37:34.378975 systemd[1]: Started systemd-networkd.service. Oct 2 19:37:34.381056 systemd-networkd[1376]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:37:34.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.385135 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:37:34.394101 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:37:34.393429 systemd-networkd[1376]: eth0: Link UP Oct 2 19:37:34.393714 systemd-networkd[1376]: eth0: Gained carrier Oct 2 19:37:34.409409 systemd-networkd[1376]: eth0: DHCPv4 address 172.31.25.22/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:37:34.474144 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1392) Oct 2 19:37:34.659065 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:37:34.673548 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:37:34.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.678298 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:37:34.735717 lvm[1489]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:37:34.774953 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:37:34.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.777867 systemd[1]: Reached target cryptsetup.target. Oct 2 19:37:34.782587 systemd[1]: Starting lvm2-activation.service... Oct 2 19:37:34.796742 lvm[1490]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:37:34.834131 systemd[1]: Finished lvm2-activation.service. Oct 2 19:37:34.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.836906 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:37:34.839469 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:37:34.839516 systemd[1]: Reached target local-fs.target. Oct 2 19:37:34.842364 systemd[1]: Reached target machines.target. Oct 2 19:37:34.846441 systemd[1]: Starting ldconfig.service... Oct 2 19:37:34.852744 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:37:34.852870 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:34.855300 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:37:34.862042 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:37:34.871476 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:37:34.875645 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:37:34.875774 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:37:34.877948 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:37:34.907718 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1492 (bootctl) Oct 2 19:37:34.909961 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:37:34.939011 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:37:34.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:34.942594 systemd-tmpfiles[1495]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:37:34.945384 systemd-tmpfiles[1495]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:37:34.948444 systemd-tmpfiles[1495]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:37:35.013847 systemd-fsck[1500]: fsck.fat 4.2 (2021-01-31) Oct 2 19:37:35.013847 systemd-fsck[1500]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 19:37:35.021379 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:37:35.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.029284 systemd[1]: Mounting boot.mount... Oct 2 19:37:35.074954 systemd[1]: Mounted boot.mount. Oct 2 19:37:35.110594 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:37:35.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.272042 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:37:35.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.277265 systemd[1]: Starting audit-rules.service... Oct 2 19:37:35.281647 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:37:35.289000 audit: BPF prog-id=27 op=LOAD Oct 2 19:37:35.286725 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:37:35.295856 systemd[1]: Starting systemd-resolved.service... Oct 2 19:37:35.298000 audit: BPF prog-id=28 op=LOAD Oct 2 19:37:35.302147 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:37:35.306538 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:37:35.338924 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:37:35.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.341454 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:37:35.357000 audit[1520]: SYSTEM_BOOT pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.364473 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:37:35.418830 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:37:35.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.503675 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:37:35.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.507277 systemd[1]: Reached target time-set.target. Oct 2 19:37:35.519431 systemd-resolved[1518]: Positive Trust Anchors: Oct 2 19:37:35.519945 systemd-resolved[1518]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:37:35.520138 systemd-resolved[1518]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:37:35.541144 systemd-resolved[1518]: Defaulting to hostname 'linux'. Oct 2 19:37:35.547030 systemd[1]: Started systemd-resolved.service. Oct 2 19:37:35.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:35.549801 systemd[1]: Reached target network.target. Oct 2 19:37:35.551938 systemd[1]: Reached target nss-lookup.target. Oct 2 19:37:35.558000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:37:35.558000 audit[1537]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd553d210 a2=420 a3=0 items=0 ppid=1515 pid=1537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:35.558000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:37:35.560482 augenrules[1537]: No rules Oct 2 19:37:35.562836 systemd[1]: Finished audit-rules.service. Oct 2 19:37:36.059877 systemd-timesyncd[1519]: Contacted time server 198.137.202.32:123 (0.flatcar.pool.ntp.org). Oct 2 19:37:36.059986 systemd-timesyncd[1519]: Initial clock synchronization to Mon 2023-10-02 19:37:36.059713 UTC. Oct 2 19:37:36.060057 systemd-resolved[1518]: Clock change detected. Flushing caches. Oct 2 19:37:36.689898 systemd-networkd[1376]: eth0: Gained IPv6LL Oct 2 19:37:36.693529 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:37:36.696519 systemd[1]: Reached target network-online.target. Oct 2 19:37:37.028523 ldconfig[1491]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:37:37.097014 systemd[1]: Finished ldconfig.service. Oct 2 19:37:37.101382 systemd[1]: Starting systemd-update-done.service... Oct 2 19:37:37.126021 systemd[1]: Finished systemd-update-done.service. Oct 2 19:37:37.128698 systemd[1]: Reached target sysinit.target. Oct 2 19:37:37.131898 systemd[1]: Started motdgen.path. Oct 2 19:37:37.133652 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:37:37.146553 systemd[1]: Started logrotate.timer. Oct 2 19:37:37.148645 systemd[1]: Started mdadm.timer. Oct 2 19:37:37.150420 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:37:37.166245 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:37:37.166314 systemd[1]: Reached target paths.target. Oct 2 19:37:37.168160 systemd[1]: Reached target timers.target. Oct 2 19:37:37.170576 systemd[1]: Listening on dbus.socket. Oct 2 19:37:37.174572 systemd[1]: Starting docker.socket... Oct 2 19:37:37.186917 systemd[1]: Listening on sshd.socket. Oct 2 19:37:37.189322 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:37.190570 systemd[1]: Listening on docker.socket. Oct 2 19:37:37.192974 systemd[1]: Reached target sockets.target. Oct 2 19:37:37.195494 systemd[1]: Reached target basic.target. Oct 2 19:37:37.197756 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:37:37.197905 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:37:37.200609 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:37:37.208325 systemd[1]: Starting containerd.service... Oct 2 19:37:37.214248 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:37:37.221420 systemd[1]: Starting dbus.service... Oct 2 19:37:37.226322 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:37:37.230537 systemd[1]: Starting extend-filesystems.service... Oct 2 19:37:37.232572 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:37:37.241269 systemd[1]: Starting motdgen.service... Oct 2 19:37:37.245444 systemd[1]: Started nvidia.service. Oct 2 19:37:37.250207 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:37:37.254538 systemd[1]: Starting prepare-critools.service... Oct 2 19:37:37.259178 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:37:37.264798 systemd[1]: Starting sshd-keygen.service... Oct 2 19:37:37.275472 systemd[1]: Starting systemd-logind.service... Oct 2 19:37:37.277396 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:37:37.277528 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:37:37.278972 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:37:37.283001 systemd[1]: Starting update-engine.service... Oct 2 19:37:37.287058 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:37:37.323643 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:37:37.394476 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:37:37.405860 jq[1564]: true Oct 2 19:37:37.432203 jq[1554]: false Oct 2 19:37:37.438603 jq[1567]: true Oct 2 19:37:37.458601 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:37:37.459053 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:37:37.508353 tar[1569]: ./ Oct 2 19:37:37.508353 tar[1569]: ./loopback Oct 2 19:37:37.517333 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:37:37.517650 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:37:37.524985 tar[1568]: crictl Oct 2 19:37:37.597069 dbus-daemon[1553]: [system] SELinux support is enabled Oct 2 19:37:37.597902 systemd[1]: Started dbus.service. Oct 2 19:37:37.604384 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:37:37.604439 systemd[1]: Reached target system-config.target. Oct 2 19:37:37.608546 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:37:37.608591 systemd[1]: Reached target user-config.target. Oct 2 19:37:37.628058 dbus-daemon[1553]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1376 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:37:37.648636 dbus-daemon[1553]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:37:37.666437 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:37:37.692890 extend-filesystems[1555]: Found nvme0n1 Oct 2 19:37:37.696575 extend-filesystems[1555]: Found nvme0n1p1 Oct 2 19:37:37.696575 extend-filesystems[1555]: Found nvme0n1p2 Oct 2 19:37:37.696575 extend-filesystems[1555]: Found nvme0n1p3 Oct 2 19:37:37.696575 extend-filesystems[1555]: Found usr Oct 2 19:37:37.696575 extend-filesystems[1555]: Found nvme0n1p4 Oct 2 19:37:37.696575 extend-filesystems[1555]: Found nvme0n1p6 Oct 2 19:37:37.696575 extend-filesystems[1555]: Found nvme0n1p7 Oct 2 19:37:37.696575 extend-filesystems[1555]: Found nvme0n1p9 Oct 2 19:37:37.696575 extend-filesystems[1555]: Checking size of /dev/nvme0n1p9 Oct 2 19:37:37.761372 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:37:37.761755 systemd[1]: Finished motdgen.service. Oct 2 19:37:37.789585 bash[1615]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:37:37.791523 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:37:37.800124 update_engine[1563]: I1002 19:37:37.799649 1563 main.cc:92] Flatcar Update Engine starting Oct 2 19:37:37.809127 amazon-ssm-agent[1550]: 2023/10/02 19:37:37 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:37:37.814364 systemd[1]: Started update-engine.service. Oct 2 19:37:37.814962 update_engine[1563]: I1002 19:37:37.814924 1563 update_check_scheduler.cc:74] Next update check in 7m49s Oct 2 19:37:37.821045 systemd[1]: Started locksmithd.service. Oct 2 19:37:37.843316 amazon-ssm-agent[1550]: Initializing new seelog logger Oct 2 19:37:37.843522 amazon-ssm-agent[1550]: New Seelog Logger Creation Complete Oct 2 19:37:37.843790 amazon-ssm-agent[1550]: 2023/10/02 19:37:37 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:37:37.843790 amazon-ssm-agent[1550]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:37:37.853845 extend-filesystems[1555]: Resized partition /dev/nvme0n1p9 Oct 2 19:37:37.864188 amazon-ssm-agent[1550]: 2023/10/02 19:37:37 processing appconfig overrides Oct 2 19:37:37.865110 env[1566]: time="2023-10-02T19:37:37.864907496Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:37:37.895836 extend-filesystems[1621]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:37:37.912700 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:37:37.940398 tar[1569]: ./bandwidth Oct 2 19:37:37.969699 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:37:37.997683 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:37:38.010192 systemd-logind[1562]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:37:38.011266 systemd-logind[1562]: New seat seat0. Oct 2 19:37:38.015014 extend-filesystems[1621]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:37:38.015014 extend-filesystems[1621]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:37:38.015014 extend-filesystems[1621]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:37:38.062038 extend-filesystems[1555]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:37:38.016609 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:37:38.016979 systemd[1]: Finished extend-filesystems.service. Oct 2 19:37:38.046696 systemd[1]: Started systemd-logind.service. Oct 2 19:37:38.160661 env[1566]: time="2023-10-02T19:37:38.160528614Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:37:38.163224 env[1566]: time="2023-10-02T19:37:38.163172070Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.179453 env[1566]: time="2023-10-02T19:37:38.179359806Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:38.179740 env[1566]: time="2023-10-02T19:37:38.179645010Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.180384 env[1566]: time="2023-10-02T19:37:38.180319314Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:38.180550 env[1566]: time="2023-10-02T19:37:38.180519354Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.180743 env[1566]: time="2023-10-02T19:37:38.180700566Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:37:38.180862 env[1566]: time="2023-10-02T19:37:38.180833226Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.181362 env[1566]: time="2023-10-02T19:37:38.181311858Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.182560 env[1566]: time="2023-10-02T19:37:38.182521926Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:37:38.183223 env[1566]: time="2023-10-02T19:37:38.183161490Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:37:38.183386 env[1566]: time="2023-10-02T19:37:38.183356718Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:37:38.183685 env[1566]: time="2023-10-02T19:37:38.183620454Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:37:38.183826 env[1566]: time="2023-10-02T19:37:38.183797898Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:37:38.195980 env[1566]: time="2023-10-02T19:37:38.195923874Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:37:38.196206 env[1566]: time="2023-10-02T19:37:38.196175994Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:37:38.196373 env[1566]: time="2023-10-02T19:37:38.196343394Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:37:38.196545 env[1566]: time="2023-10-02T19:37:38.196514646Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.196694 env[1566]: time="2023-10-02T19:37:38.196650270Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.196817 env[1566]: time="2023-10-02T19:37:38.196787790Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.196957 env[1566]: time="2023-10-02T19:37:38.196927878Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.197872 env[1566]: time="2023-10-02T19:37:38.197829138Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.198054 env[1566]: time="2023-10-02T19:37:38.198024522Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.198329 env[1566]: time="2023-10-02T19:37:38.198299250Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.198459 env[1566]: time="2023-10-02T19:37:38.198430374Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.198727 env[1566]: time="2023-10-02T19:37:38.198697782Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:37:38.199324 env[1566]: time="2023-10-02T19:37:38.199150038Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:37:38.199951 env[1566]: time="2023-10-02T19:37:38.199911174Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:37:38.203208 env[1566]: time="2023-10-02T19:37:38.203156958Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:37:38.208191 env[1566]: time="2023-10-02T19:37:38.208134258Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.208434 env[1566]: time="2023-10-02T19:37:38.208400514Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:37:38.208729 env[1566]: time="2023-10-02T19:37:38.208695402Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.209501 env[1566]: time="2023-10-02T19:37:38.209458914Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.226795 env[1566]: time="2023-10-02T19:37:38.209654490Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.227025 env[1566]: time="2023-10-02T19:37:38.226986090Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.227196 env[1566]: time="2023-10-02T19:37:38.227164014Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.227328 env[1566]: time="2023-10-02T19:37:38.227297538Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.228415 env[1566]: time="2023-10-02T19:37:38.228366918Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.228626 env[1566]: time="2023-10-02T19:37:38.228595026Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.228817 env[1566]: time="2023-10-02T19:37:38.228786150Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:37:38.229221 env[1566]: time="2023-10-02T19:37:38.229186158Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.231659 env[1566]: time="2023-10-02T19:37:38.231608490Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.231858 env[1566]: time="2023-10-02T19:37:38.231827514Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.231998 env[1566]: time="2023-10-02T19:37:38.231968370Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:37:38.232134 env[1566]: time="2023-10-02T19:37:38.232100058Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:37:38.232259 env[1566]: time="2023-10-02T19:37:38.232230594Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:37:38.232391 env[1566]: time="2023-10-02T19:37:38.232361682Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:37:38.233034 env[1566]: time="2023-10-02T19:37:38.232993242Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:37:38.233644 env[1566]: time="2023-10-02T19:37:38.233539938Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:37:38.235343 env[1566]: time="2023-10-02T19:37:38.235297218Z" level=info msg="Connect containerd service" Oct 2 19:37:38.235534 env[1566]: time="2023-10-02T19:37:38.235503198Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:37:38.249731 tar[1569]: ./ptp Oct 2 19:37:38.254719 env[1566]: time="2023-10-02T19:37:38.250244718Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:37:38.254719 env[1566]: time="2023-10-02T19:37:38.250899822Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:37:38.254719 env[1566]: time="2023-10-02T19:37:38.250997526Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:37:38.254719 env[1566]: time="2023-10-02T19:37:38.251100966Z" level=info msg="containerd successfully booted in 0.408518s" Oct 2 19:37:38.251233 systemd[1]: Started containerd.service. Oct 2 19:37:38.258971 env[1566]: time="2023-10-02T19:37:38.258895458Z" level=info msg="Start subscribing containerd event" Oct 2 19:37:38.263367 dbus-daemon[1553]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:37:38.263596 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:37:38.269977 dbus-daemon[1553]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1605 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:37:38.274507 systemd[1]: Starting polkit.service... Oct 2 19:37:38.304838 env[1566]: time="2023-10-02T19:37:38.304761162Z" level=info msg="Start recovering state" Oct 2 19:37:38.305005 env[1566]: time="2023-10-02T19:37:38.304950174Z" level=info msg="Start event monitor" Oct 2 19:37:38.305153 env[1566]: time="2023-10-02T19:37:38.305109918Z" level=info msg="Start snapshots syncer" Oct 2 19:37:38.305221 env[1566]: time="2023-10-02T19:37:38.305149590Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:37:38.305221 env[1566]: time="2023-10-02T19:37:38.305181882Z" level=info msg="Start streaming server" Oct 2 19:37:38.344571 polkitd[1640]: Started polkitd version 121 Oct 2 19:37:38.383768 polkitd[1640]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:37:38.390504 polkitd[1640]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:37:38.399739 polkitd[1640]: Finished loading, compiling and executing 2 rules Oct 2 19:37:38.400947 dbus-daemon[1553]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:37:38.401190 systemd[1]: Started polkit.service. Oct 2 19:37:38.404658 polkitd[1640]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:37:38.445145 systemd-hostnamed[1605]: Hostname set to (transient) Oct 2 19:37:38.445304 systemd-resolved[1518]: System hostname changed to 'ip-172-31-25-22'. Oct 2 19:37:38.535832 tar[1569]: ./vlan Oct 2 19:37:38.593815 coreos-metadata[1552]: Oct 02 19:37:38.593 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:37:38.594812 amazon-ssm-agent[1550]: 2023-10-02 19:37:38 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0df090b3fde0b0a15 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0df090b3fde0b0a15 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:37:38.594812 amazon-ssm-agent[1550]: status code: 400, request id: 43c29c42-e486-4b5a-90f4-8fbabc19264b Oct 2 19:37:38.595197 amazon-ssm-agent[1550]: 2023-10-02 19:37:38 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:37:38.597500 coreos-metadata[1552]: Oct 02 19:37:38.597 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:37:38.597847 coreos-metadata[1552]: Oct 02 19:37:38.597 INFO Fetch successful Oct 2 19:37:38.598247 coreos-metadata[1552]: Oct 02 19:37:38.597 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:37:38.598517 coreos-metadata[1552]: Oct 02 19:37:38.598 INFO Fetch successful Oct 2 19:37:38.599999 unknown[1552]: wrote ssh authorized keys file for user: core Oct 2 19:37:38.631809 update-ssh-keys[1680]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:37:38.632899 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:37:38.713774 tar[1569]: ./host-device Oct 2 19:37:38.846833 tar[1569]: ./tuning Oct 2 19:37:38.969098 tar[1569]: ./vrf Oct 2 19:37:39.099722 tar[1569]: ./sbr Oct 2 19:37:39.246150 tar[1569]: ./tap Oct 2 19:37:39.401428 tar[1569]: ./dhcp Oct 2 19:37:39.499218 systemd[1]: Finished prepare-critools.service. Oct 2 19:37:39.611501 tar[1569]: ./static Oct 2 19:37:39.657709 tar[1569]: ./firewall Oct 2 19:37:39.726883 tar[1569]: ./macvlan Oct 2 19:37:39.790414 tar[1569]: ./dummy Oct 2 19:37:39.854423 tar[1569]: ./bridge Oct 2 19:37:39.922534 tar[1569]: ./ipvlan Oct 2 19:37:39.984757 tar[1569]: ./portmap Oct 2 19:37:40.044256 tar[1569]: ./host-local Oct 2 19:37:40.125376 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:37:40.207844 locksmithd[1618]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:37:42.361259 sshd_keygen[1598]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:37:42.418587 systemd[1]: Finished sshd-keygen.service. Oct 2 19:37:42.424199 systemd[1]: Starting issuegen.service... Oct 2 19:37:42.443801 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:37:42.444133 systemd[1]: Finished issuegen.service. Oct 2 19:37:42.449284 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:37:42.471655 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:37:42.477489 systemd[1]: Started getty@tty1.service. Oct 2 19:37:42.482487 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:37:42.485184 systemd[1]: Reached target getty.target. Oct 2 19:37:42.487911 systemd[1]: Reached target multi-user.target. Oct 2 19:37:42.492658 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:37:42.517202 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:37:42.517527 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:37:42.521011 systemd[1]: Startup finished in 1.175s (kernel) + 13.645s (initrd) + 14.785s (userspace) = 29.606s. Oct 2 19:37:47.007250 systemd[1]: Created slice system-sshd.slice. Oct 2 19:37:47.010013 systemd[1]: Started sshd@0-172.31.25.22:22-139.178.89.65:56452.service. Oct 2 19:37:47.196182 sshd[1760]: Accepted publickey for core from 139.178.89.65 port 56452 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:47.200931 sshd[1760]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:47.219486 systemd[1]: Created slice user-500.slice. Oct 2 19:37:47.222422 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:37:47.228590 systemd-logind[1562]: New session 1 of user core. Oct 2 19:37:47.246509 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:37:47.249345 systemd[1]: Starting user@500.service... Oct 2 19:37:47.261383 (systemd)[1763]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:47.459473 systemd[1763]: Queued start job for default target default.target. Oct 2 19:37:47.460507 systemd[1763]: Reached target paths.target. Oct 2 19:37:47.460560 systemd[1763]: Reached target sockets.target. Oct 2 19:37:47.460592 systemd[1763]: Reached target timers.target. Oct 2 19:37:47.460621 systemd[1763]: Reached target basic.target. Oct 2 19:37:47.460743 systemd[1763]: Reached target default.target. Oct 2 19:37:47.460808 systemd[1763]: Startup finished in 181ms. Oct 2 19:37:47.461867 systemd[1]: Started user@500.service. Oct 2 19:37:47.463915 systemd[1]: Started session-1.scope. Oct 2 19:37:47.618503 systemd[1]: Started sshd@1-172.31.25.22:22-139.178.89.65:56454.service. Oct 2 19:37:47.798271 sshd[1772]: Accepted publickey for core from 139.178.89.65 port 56454 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:47.801553 sshd[1772]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:47.810323 systemd-logind[1562]: New session 2 of user core. Oct 2 19:37:47.811280 systemd[1]: Started session-2.scope. Oct 2 19:37:47.958274 sshd[1772]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:47.964274 systemd-logind[1562]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:37:47.965554 systemd[1]: sshd@1-172.31.25.22:22-139.178.89.65:56454.service: Deactivated successfully. Oct 2 19:37:47.966867 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:37:47.968125 systemd-logind[1562]: Removed session 2. Oct 2 19:37:47.989802 systemd[1]: Started sshd@2-172.31.25.22:22-139.178.89.65:56470.service. Oct 2 19:37:48.167924 sshd[1778]: Accepted publickey for core from 139.178.89.65 port 56470 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:48.171131 sshd[1778]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:48.179808 systemd-logind[1562]: New session 3 of user core. Oct 2 19:37:48.180208 systemd[1]: Started session-3.scope. Oct 2 19:37:48.313269 sshd[1778]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:48.320190 systemd[1]: sshd@2-172.31.25.22:22-139.178.89.65:56470.service: Deactivated successfully. Oct 2 19:37:48.321376 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:37:48.322994 systemd-logind[1562]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:37:48.324454 systemd-logind[1562]: Removed session 3. Oct 2 19:37:48.344646 systemd[1]: Started sshd@3-172.31.25.22:22-139.178.89.65:56474.service. Oct 2 19:37:48.525061 sshd[1784]: Accepted publickey for core from 139.178.89.65 port 56474 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:48.528294 sshd[1784]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:48.535764 systemd-logind[1562]: New session 4 of user core. Oct 2 19:37:48.537461 systemd[1]: Started session-4.scope. Oct 2 19:37:48.683049 sshd[1784]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:48.689153 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:37:48.690390 systemd-logind[1562]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:37:48.690807 systemd[1]: sshd@3-172.31.25.22:22-139.178.89.65:56474.service: Deactivated successfully. Oct 2 19:37:48.693037 systemd-logind[1562]: Removed session 4. Oct 2 19:37:48.712263 systemd[1]: Started sshd@4-172.31.25.22:22-139.178.89.65:56488.service. Oct 2 19:37:48.885426 sshd[1790]: Accepted publickey for core from 139.178.89.65 port 56488 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:48.888620 sshd[1790]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:48.896750 systemd-logind[1562]: New session 5 of user core. Oct 2 19:37:48.897607 systemd[1]: Started session-5.scope. Oct 2 19:37:49.023744 sudo[1793]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:37:49.024239 sudo[1793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:49.040945 dbus-daemon[1553]: avc: received setenforce notice (enforcing=1) Oct 2 19:37:49.044393 sudo[1793]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:49.069050 sshd[1790]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:49.077013 systemd-logind[1562]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:37:49.078635 systemd[1]: sshd@4-172.31.25.22:22-139.178.89.65:56488.service: Deactivated successfully. Oct 2 19:37:49.079979 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:37:49.081284 systemd-logind[1562]: Removed session 5. Oct 2 19:37:49.099527 systemd[1]: Started sshd@5-172.31.25.22:22-139.178.89.65:56492.service. Oct 2 19:37:49.279095 sshd[1797]: Accepted publickey for core from 139.178.89.65 port 56492 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:49.282172 sshd[1797]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:49.290810 systemd-logind[1562]: New session 6 of user core. Oct 2 19:37:49.291024 systemd[1]: Started session-6.scope. Oct 2 19:37:49.411215 sudo[1801]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:37:49.411727 sudo[1801]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:49.419148 sudo[1801]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:49.432493 sudo[1800]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:37:49.433440 sudo[1800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:49.457219 systemd[1]: Stopping audit-rules.service... Oct 2 19:37:49.461000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:37:49.464173 kernel: kauditd_printk_skb: 73 callbacks suppressed Oct 2 19:37:49.464231 kernel: audit: type=1305 audit(1696275469.461:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:37:49.464464 auditctl[1804]: No rules Oct 2 19:37:49.461000 audit[1804]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffde3fe290 a2=420 a3=0 items=0 ppid=1 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:49.470197 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:37:49.470532 systemd[1]: Stopped audit-rules.service. Oct 2 19:37:49.473875 systemd[1]: Starting audit-rules.service... Oct 2 19:37:49.480730 kernel: audit: type=1300 audit(1696275469.461:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffde3fe290 a2=420 a3=0 items=0 ppid=1 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:49.461000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:37:49.485335 kernel: audit: type=1327 audit(1696275469.461:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:37:49.485406 kernel: audit: type=1131 audit(1696275469.468:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.547112 augenrules[1821]: No rules Oct 2 19:37:49.548814 systemd[1]: Finished audit-rules.service. Oct 2 19:37:49.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.552982 sudo[1800]: pam_unix(sudo:session): session closed for user root Oct 2 19:37:49.549000 audit[1800]: USER_END pid=1800 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.567431 kernel: audit: type=1130 audit(1696275469.548:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.567495 kernel: audit: type=1106 audit(1696275469.549:166): pid=1800 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.567537 kernel: audit: type=1104 audit(1696275469.549:167): pid=1800 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.549000 audit[1800]: CRED_DISP pid=1800 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.580089 sshd[1797]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:49.581000 audit[1797]: USER_END pid=1797 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.584756 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:37:49.585810 systemd[1]: sshd@5-172.31.25.22:22-139.178.89.65:56492.service: Deactivated successfully. Oct 2 19:37:49.589138 systemd-logind[1562]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:37:49.591177 systemd-logind[1562]: Removed session 6. Oct 2 19:37:49.581000 audit[1797]: CRED_DISP pid=1797 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.603695 kernel: audit: type=1106 audit(1696275469.581:168): pid=1797 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.611842 kernel: audit: type=1104 audit(1696275469.581:169): pid=1797 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.611917 kernel: audit: type=1131 audit(1696275469.582:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.22:22-139.178.89.65:56492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.22:22-139.178.89.65:56492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.615181 systemd[1]: Started sshd@6-172.31.25.22:22-139.178.89.65:56506.service. Oct 2 19:37:49.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.22:22-139.178.89.65:56506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.791000 audit[1827]: USER_ACCT pid=1827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.792378 sshd[1827]: Accepted publickey for core from 139.178.89.65 port 56506 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:37:49.794000 audit[1827]: CRED_ACQ pid=1827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.794000 audit[1827]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc53292f0 a2=3 a3=1 items=0 ppid=1 pid=1827 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:49.794000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:37:49.795663 sshd[1827]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:37:49.804125 systemd[1]: Started session-7.scope. Oct 2 19:37:49.804849 systemd-logind[1562]: New session 7 of user core. Oct 2 19:37:49.813000 audit[1827]: USER_START pid=1827 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.820000 audit[1829]: CRED_ACQ pid=1829 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:49.924000 audit[1830]: USER_ACCT pid=1830 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.925308 sudo[1830]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:37:49.925000 audit[1830]: CRED_REFR pid=1830 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:49.926359 sudo[1830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:37:49.929000 audit[1830]: USER_START pid=1830 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:37:50.742303 systemd[1]: Starting docker.service... Oct 2 19:37:50.852031 env[1845]: time="2023-10-02T19:37:50.851943201Z" level=info msg="Starting up" Oct 2 19:37:50.855392 env[1845]: time="2023-10-02T19:37:50.855345969Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:37:50.855584 env[1845]: time="2023-10-02T19:37:50.855555597Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:37:50.855742 env[1845]: time="2023-10-02T19:37:50.855709113Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:37:50.855849 env[1845]: time="2023-10-02T19:37:50.855822429Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:37:50.861022 env[1845]: time="2023-10-02T19:37:50.860959461Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:37:50.861022 env[1845]: time="2023-10-02T19:37:50.861003381Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:37:50.861245 env[1845]: time="2023-10-02T19:37:50.861038277Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:37:50.861245 env[1845]: time="2023-10-02T19:37:50.861059721Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:37:50.869725 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport18994590-merged.mount: Deactivated successfully. Oct 2 19:37:50.911957 env[1845]: time="2023-10-02T19:37:50.911897781Z" level=info msg="Loading containers: start." Oct 2 19:37:51.019000 audit[1876]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1876 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.019000 audit[1876]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff3a48a00 a2=0 a3=1 items=0 ppid=1845 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.019000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:37:51.026000 audit[1878]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1878 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.026000 audit[1878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd07c5e00 a2=0 a3=1 items=0 ppid=1845 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.026000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:37:51.034000 audit[1880]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1880 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.034000 audit[1880]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd518cc00 a2=0 a3=1 items=0 ppid=1845 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.034000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:37:51.041000 audit[1882]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1882 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.041000 audit[1882]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc154c740 a2=0 a3=1 items=0 ppid=1845 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.041000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:37:51.049000 audit[1884]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1884 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.049000 audit[1884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc0943370 a2=0 a3=1 items=0 ppid=1845 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.049000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:37:51.084000 audit[1889]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.084000 audit[1889]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffdbf4f40 a2=0 a3=1 items=0 ppid=1845 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:37:51.099000 audit[1891]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1891 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.099000 audit[1891]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff2082df0 a2=0 a3=1 items=0 ppid=1845 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.099000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:37:51.106000 audit[1893]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.106000 audit[1893]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc55acf10 a2=0 a3=1 items=0 ppid=1845 pid=1893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.106000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:37:51.113000 audit[1895]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1895 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.113000 audit[1895]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffcec3ceb0 a2=0 a3=1 items=0 ppid=1845 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.113000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.133000 audit[1899]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1899 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.133000 audit[1899]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd487f670 a2=0 a3=1 items=0 ppid=1845 pid=1899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.133000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.136000 audit[1900]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1900 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.136000 audit[1900]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffcab35d0 a2=0 a3=1 items=0 ppid=1845 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.136000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.150768 kernel: Initializing XFRM netlink socket Oct 2 19:37:51.194710 env[1845]: time="2023-10-02T19:37:51.194642274Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:37:51.197302 (udev-worker)[1855]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:37:51.230000 audit[1908]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1908 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.230000 audit[1908]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd099d8e0 a2=0 a3=1 items=0 ppid=1845 pid=1908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.230000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:37:51.253000 audit[1911]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1911 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.253000 audit[1911]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd0901ca0 a2=0 a3=1 items=0 ppid=1845 pid=1911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.253000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:37:51.264000 audit[1914]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1914 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.264000 audit[1914]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdffc3740 a2=0 a3=1 items=0 ppid=1845 pid=1914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.264000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:37:51.271000 audit[1916]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1916 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.271000 audit[1916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffeb1ec9a0 a2=0 a3=1 items=0 ppid=1845 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.271000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:37:51.279000 audit[1918]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1918 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.279000 audit[1918]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc7a0e770 a2=0 a3=1 items=0 ppid=1845 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.279000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:37:51.287000 audit[1920]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1920 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.287000 audit[1920]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffcc46f930 a2=0 a3=1 items=0 ppid=1845 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.287000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:37:51.294000 audit[1922]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1922 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.294000 audit[1922]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffecd45a10 a2=0 a3=1 items=0 ppid=1845 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.294000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:37:51.312000 audit[1925]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1925 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.312000 audit[1925]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff14e9f50 a2=0 a3=1 items=0 ppid=1845 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.312000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:37:51.319000 audit[1927]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1927 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.319000 audit[1927]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffdb1d0ae0 a2=0 a3=1 items=0 ppid=1845 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.319000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:37:51.326000 audit[1929]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1929 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.326000 audit[1929]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffffa997920 a2=0 a3=1 items=0 ppid=1845 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.326000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:37:51.335000 audit[1931]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1931 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.335000 audit[1931]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc3a56f50 a2=0 a3=1 items=0 ppid=1845 pid=1931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.335000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:37:51.336800 systemd-networkd[1376]: docker0: Link UP Oct 2 19:37:51.358000 audit[1935]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1935 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.358000 audit[1935]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe11f77b0 a2=0 a3=1 items=0 ppid=1845 pid=1935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.358000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.363000 audit[1936]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1936 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:37:51.363000 audit[1936]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffeda15d40 a2=0 a3=1 items=0 ppid=1845 pid=1936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:51.363000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:37:51.364691 env[1845]: time="2023-10-02T19:37:51.364635859Z" level=info msg="Loading containers: done." Oct 2 19:37:51.394279 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3965047895-merged.mount: Deactivated successfully. Oct 2 19:37:51.409884 env[1845]: time="2023-10-02T19:37:51.409789315Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:37:51.410348 env[1845]: time="2023-10-02T19:37:51.410298391Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:37:51.410602 env[1845]: time="2023-10-02T19:37:51.410557459Z" level=info msg="Daemon has completed initialization" Oct 2 19:37:51.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:51.443053 systemd[1]: Started docker.service. Oct 2 19:37:51.451313 env[1845]: time="2023-10-02T19:37:51.451225640Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:37:51.499273 systemd[1]: Reloading. Oct 2 19:37:51.706764 /usr/lib/systemd/system-generators/torcx-generator[1982]: time="2023-10-02T19:37:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:37:51.706824 /usr/lib/systemd/system-generators/torcx-generator[1982]: time="2023-10-02T19:37:51Z" level=info msg="torcx already run" Oct 2 19:37:51.909201 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:37:51.909240 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:37:51.951603 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.099000 audit: BPF prog-id=37 op=LOAD Oct 2 19:37:52.099000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit: BPF prog-id=38 op=LOAD Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.100000 audit: BPF prog-id=39 op=LOAD Oct 2 19:37:52.100000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:37:52.100000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:37:52.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit: BPF prog-id=40 op=LOAD Oct 2 19:37:52.104000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit: BPF prog-id=41 op=LOAD Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.104000 audit: BPF prog-id=42 op=LOAD Oct 2 19:37:52.104000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:37:52.104000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.107000 audit: BPF prog-id=43 op=LOAD Oct 2 19:37:52.107000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.109000 audit: BPF prog-id=44 op=LOAD Oct 2 19:37:52.109000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.110000 audit: BPF prog-id=45 op=LOAD Oct 2 19:37:52.110000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit: BPF prog-id=46 op=LOAD Oct 2 19:37:52.112000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit: BPF prog-id=47 op=LOAD Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.112000 audit: BPF prog-id=48 op=LOAD Oct 2 19:37:52.112000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:37:52.112000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit: BPF prog-id=49 op=LOAD Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.114000 audit: BPF prog-id=50 op=LOAD Oct 2 19:37:52.114000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:37:52.114000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.116000 audit: BPF prog-id=51 op=LOAD Oct 2 19:37:52.116000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit: BPF prog-id=52 op=LOAD Oct 2 19:37:52.122000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit: BPF prog-id=53 op=LOAD Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:52.122000 audit: BPF prog-id=54 op=LOAD Oct 2 19:37:52.122000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:37:52.122000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:37:52.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:52.142287 systemd[1]: Started kubelet.service. Oct 2 19:37:52.313642 kubelet[2037]: E1002 19:37:52.313563 2037 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:37:52.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:37:52.324187 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:37:52.324494 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:37:52.719810 env[1566]: time="2023-10-02T19:37:52.719730382Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:37:53.354556 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2614382977.mount: Deactivated successfully. Oct 2 19:37:57.530234 env[1566]: time="2023-10-02T19:37:57.530175410Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:37:57.534948 env[1566]: time="2023-10-02T19:37:57.534855890Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:37:57.538799 env[1566]: time="2023-10-02T19:37:57.538740998Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:37:57.540971 env[1566]: time="2023-10-02T19:37:57.540916850Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:37:57.543084 env[1566]: time="2023-10-02T19:37:57.543033314Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 19:37:57.572232 env[1566]: time="2023-10-02T19:37:57.572170298Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:38:01.406633 env[1566]: time="2023-10-02T19:38:01.406571657Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:01.409193 env[1566]: time="2023-10-02T19:38:01.409146233Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:01.414340 env[1566]: time="2023-10-02T19:38:01.414291629Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:01.418450 env[1566]: time="2023-10-02T19:38:01.418401497Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:01.419937 env[1566]: time="2023-10-02T19:38:01.419892317Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 19:38:01.449710 env[1566]: time="2023-10-02T19:38:01.449627657Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:38:02.458476 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:38:02.458614 kernel: audit: type=1130 audit(1696275482.454:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.454986 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:38:02.455329 systemd[1]: Stopped kubelet.service. Oct 2 19:38:02.457891 systemd[1]: Started kubelet.service. Oct 2 19:38:02.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.474431 kernel: audit: type=1131 audit(1696275482.454:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.474543 kernel: audit: type=1130 audit(1696275482.457:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:02.615089 kubelet[2067]: E1002 19:38:02.615028 2067 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:38:02.622470 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:38:02.622822 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:38:02.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:02.632707 kernel: audit: type=1131 audit(1696275482.622:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:03.918324 env[1566]: time="2023-10-02T19:38:03.918268581Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:03.921392 env[1566]: time="2023-10-02T19:38:03.921345154Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:03.924428 env[1566]: time="2023-10-02T19:38:03.924366970Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:03.927654 env[1566]: time="2023-10-02T19:38:03.927593194Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:03.929414 env[1566]: time="2023-10-02T19:38:03.929352562Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 19:38:03.957816 env[1566]: time="2023-10-02T19:38:03.957759262Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:38:05.403234 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3031510989.mount: Deactivated successfully. Oct 2 19:38:06.172482 env[1566]: time="2023-10-02T19:38:06.172412397Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:06.175254 env[1566]: time="2023-10-02T19:38:06.175191489Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:06.177936 env[1566]: time="2023-10-02T19:38:06.177887733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:06.180085 env[1566]: time="2023-10-02T19:38:06.180026265Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:06.181481 env[1566]: time="2023-10-02T19:38:06.181425585Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 19:38:06.209997 env[1566]: time="2023-10-02T19:38:06.209925885Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:38:06.677658 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2124822775.mount: Deactivated successfully. Oct 2 19:38:06.685341 env[1566]: time="2023-10-02T19:38:06.685285583Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:06.688002 env[1566]: time="2023-10-02T19:38:06.687957443Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:06.690722 env[1566]: time="2023-10-02T19:38:06.690646343Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:06.693104 env[1566]: time="2023-10-02T19:38:06.693044975Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:06.694371 env[1566]: time="2023-10-02T19:38:06.694322519Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:38:06.722872 env[1566]: time="2023-10-02T19:38:06.722814935Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:38:07.824950 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount479917634.mount: Deactivated successfully. Oct 2 19:38:08.465568 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:38:08.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:08.474709 kernel: audit: type=1131 audit(1696275488.465:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:08.500000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:38:08.500000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:38:08.506086 kernel: audit: type=1334 audit(1696275488.500:418): prog-id=42 op=UNLOAD Oct 2 19:38:08.506157 kernel: audit: type=1334 audit(1696275488.500:419): prog-id=41 op=UNLOAD Oct 2 19:38:08.506209 kernel: audit: type=1334 audit(1696275488.500:420): prog-id=40 op=UNLOAD Oct 2 19:38:08.500000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:38:12.267992 env[1566]: time="2023-10-02T19:38:12.267910158Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:12.271162 env[1566]: time="2023-10-02T19:38:12.271102084Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:12.278583 env[1566]: time="2023-10-02T19:38:12.278517040Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:12.281584 env[1566]: time="2023-10-02T19:38:12.281533580Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:12.283050 env[1566]: time="2023-10-02T19:38:12.283002299Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 19:38:12.311856 env[1566]: time="2023-10-02T19:38:12.311794106Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:38:12.704983 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:38:12.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.705312 systemd[1]: Stopped kubelet.service. Oct 2 19:38:12.707932 systemd[1]: Started kubelet.service. Oct 2 19:38:12.730274 kernel: audit: type=1130 audit(1696275492.704:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.730421 kernel: audit: type=1131 audit(1696275492.704:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.730471 kernel: audit: type=1130 audit(1696275492.707:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:12.878822 kubelet[2097]: E1002 19:38:12.878630 2097 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:38:12.881654 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2720949547.mount: Deactivated successfully. Oct 2 19:38:12.886097 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:38:12.886414 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:38:12.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:12.895813 kernel: audit: type=1131 audit(1696275492.886:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:38:14.049692 env[1566]: time="2023-10-02T19:38:14.049612140Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:14.053206 env[1566]: time="2023-10-02T19:38:14.053132173Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:14.057041 env[1566]: time="2023-10-02T19:38:14.056994209Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:14.061314 env[1566]: time="2023-10-02T19:38:14.061254778Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:14.062374 env[1566]: time="2023-10-02T19:38:14.062330825Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 19:38:21.970616 systemd[1]: Stopped kubelet.service. Oct 2 19:38:21.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:21.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:21.987704 kernel: audit: type=1130 audit(1696275501.970:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:21.987856 kernel: audit: type=1131 audit(1696275501.970:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.019538 systemd[1]: Reloading. Oct 2 19:38:22.225948 /usr/lib/systemd/system-generators/torcx-generator[2190]: time="2023-10-02T19:38:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:38:22.226010 /usr/lib/systemd/system-generators/torcx-generator[2190]: time="2023-10-02T19:38:22Z" level=info msg="torcx already run" Oct 2 19:38:22.433606 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:38:22.433646 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:38:22.476123 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:38:22.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648252 kernel: audit: type=1400 audit(1696275502.630:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648381 kernel: audit: type=1400 audit(1696275502.638:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656128 kernel: audit: type=1400 audit(1696275502.638:429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.663927 kernel: audit: type=1400 audit(1696275502.638:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.664012 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.673688 kernel: audit: type=1400 audit(1696275502.638:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.673752 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.683788 kernel: audit: type=1400 audit(1696275502.638:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.638000 audit: BPF prog-id=55 op=LOAD Oct 2 19:38:22.639000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit: BPF prog-id=56 op=LOAD Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.639000 audit: BPF prog-id=57 op=LOAD Oct 2 19:38:22.639000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:38:22.639000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.647000 audit: BPF prog-id=58 op=LOAD Oct 2 19:38:22.647000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.655000 audit: BPF prog-id=59 op=LOAD Oct 2 19:38:22.655000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.663000 audit: BPF prog-id=60 op=LOAD Oct 2 19:38:22.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit: BPF prog-id=64 op=LOAD Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.685000 audit: BPF prog-id=65 op=LOAD Oct 2 19:38:22.685000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:38:22.685000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.687000 audit: BPF prog-id=66 op=LOAD Oct 2 19:38:22.687000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit: BPF prog-id=67 op=LOAD Oct 2 19:38:22.692000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit: BPF prog-id=68 op=LOAD Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:22.692000 audit: BPF prog-id=69 op=LOAD Oct 2 19:38:22.692000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:38:22.692000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:38:22.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:22.742252 systemd[1]: Started kubelet.service. Oct 2 19:38:22.878971 kubelet[2243]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:22.878971 kubelet[2243]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:38:22.878971 kubelet[2243]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:22.879547 kubelet[2243]: I1002 19:38:22.879210 2243 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:38:22.929579 update_engine[1563]: I1002 19:38:22.929523 1563 update_attempter.cc:505] Updating boot flags... Oct 2 19:38:24.269443 kubelet[2243]: I1002 19:38:24.269386 2243 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:38:24.269443 kubelet[2243]: I1002 19:38:24.269433 2243 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:38:24.270116 kubelet[2243]: I1002 19:38:24.269847 2243 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:38:24.278451 kubelet[2243]: E1002 19:38:24.278416 2243 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.25.22:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.278805 kubelet[2243]: I1002 19:38:24.278778 2243 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:38:24.283641 kubelet[2243]: W1002 19:38:24.283596 2243 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:38:24.286533 kubelet[2243]: I1002 19:38:24.286277 2243 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:38:24.287370 kubelet[2243]: I1002 19:38:24.287344 2243 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:38:24.287585 kubelet[2243]: I1002 19:38:24.287562 2243 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:38:24.287961 kubelet[2243]: I1002 19:38:24.287936 2243 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:38:24.288076 kubelet[2243]: I1002 19:38:24.288055 2243 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:38:24.288383 kubelet[2243]: I1002 19:38:24.288363 2243 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:24.295326 kubelet[2243]: I1002 19:38:24.295273 2243 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:38:24.295326 kubelet[2243]: I1002 19:38:24.295320 2243 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:38:24.295546 kubelet[2243]: I1002 19:38:24.295473 2243 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:38:24.295604 kubelet[2243]: I1002 19:38:24.295559 2243 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:38:24.297218 kubelet[2243]: W1002 19:38:24.297157 2243 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.25.22:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.297446 kubelet[2243]: E1002 19:38:24.297423 2243 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.25.22:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.297906 kubelet[2243]: I1002 19:38:24.297878 2243 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:38:24.298845 kubelet[2243]: W1002 19:38:24.298816 2243 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:38:24.300189 kubelet[2243]: I1002 19:38:24.300157 2243 server.go:1168] "Started kubelet" Oct 2 19:38:24.300515 kubelet[2243]: W1002 19:38:24.300460 2243 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.25.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-22&limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.300651 kubelet[2243]: E1002 19:38:24.300629 2243 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.25.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-22&limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.303000 audit[2243]: AVC avc: denied { mac_admin } for pid=2243 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.303000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.303000 audit[2243]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ac3890 a1=40005719e0 a2=4000ac3860 a3=25 items=0 ppid=1 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.303000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.305510 kubelet[2243]: I1002 19:38:24.305465 2243 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:38:24.304000 audit[2243]: AVC avc: denied { mac_admin } for pid=2243 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.304000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.304000 audit[2243]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000897760 a1=40005719f8 a2=4000ac3920 a3=25 items=0 ppid=1 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.306123 kubelet[2243]: E1002 19:38:24.306082 2243 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:38:24.306211 kubelet[2243]: E1002 19:38:24.306132 2243 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:38:24.306634 kubelet[2243]: I1002 19:38:24.306506 2243 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:38:24.304000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.306965 kubelet[2243]: I1002 19:38:24.306939 2243 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:38:24.307112 kubelet[2243]: I1002 19:38:24.307071 2243 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:38:24.307298 kubelet[2243]: I1002 19:38:24.307275 2243 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:38:24.308193 kubelet[2243]: I1002 19:38:24.308153 2243 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:38:24.310798 kubelet[2243]: E1002 19:38:24.305375 2243 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-25-22.178a61957b014636", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-25-22", UID:"ip-172-31-25-22", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-25-22"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 300115510, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 38, 24, 300115510, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.25.22:6443/api/v1/namespaces/default/events": dial tcp 172.31.25.22:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:38:24.314960 kubelet[2243]: I1002 19:38:24.314656 2243 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:38:24.314960 kubelet[2243]: I1002 19:38:24.314904 2243 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:38:24.316766 kubelet[2243]: E1002 19:38:24.316071 2243 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-22?timeout=10s\": dial tcp 172.31.25.22:6443: connect: connection refused" interval="200ms" Oct 2 19:38:24.316766 kubelet[2243]: W1002 19:38:24.316256 2243 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.25.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.316766 kubelet[2243]: E1002 19:38:24.316350 2243 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.25.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.322000 audit[2436]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.322000 audit[2436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=4 a1=fffff109e680 a2=0 a3=1 items=0 ppid=2243 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:38:24.327000 audit[2437]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.327000 audit[2437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=4 a1=ffffdfe194d0 a2=0 a3=1 items=0 ppid=2243 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.327000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:38:24.347000 audit[2441]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.347000 audit[2441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=4 a1=ffffcd119070 a2=0 a3=1 items=0 ppid=2243 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:24.358000 audit[2443]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.358000 audit[2443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=4 a1=ffffda726ff0 a2=0 a3=1 items=0 ppid=2243 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.358000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:24.369792 kubelet[2243]: I1002 19:38:24.369759 2243 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:38:24.369977 kubelet[2243]: I1002 19:38:24.369957 2243 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:38:24.370095 kubelet[2243]: I1002 19:38:24.370075 2243 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:24.374579 kubelet[2243]: I1002 19:38:24.374539 2243 policy_none.go:49] "None policy: Start" Oct 2 19:38:24.375744 kubelet[2243]: I1002 19:38:24.375717 2243 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:38:24.375953 kubelet[2243]: I1002 19:38:24.375932 2243 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:38:24.385211 systemd[1]: Created slice kubepods.slice. Oct 2 19:38:24.389000 audit[2446]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.389000 audit[2446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=4 a1=fffff52c0b70 a2=0 a3=1 items=0 ppid=2243 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.389000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:38:24.391648 kubelet[2243]: I1002 19:38:24.391622 2243 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:38:24.395000 audit[2448]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2448 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:24.395000 audit[2448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=4 a1=ffffc2d5b3d0 a2=0 a3=1 items=0 ppid=2243 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:38:24.396320 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:38:24.397838 kubelet[2243]: I1002 19:38:24.397793 2243 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:38:24.397943 kubelet[2243]: I1002 19:38:24.397902 2243 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:38:24.397943 kubelet[2243]: I1002 19:38:24.397939 2243 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:38:24.398085 kubelet[2243]: E1002 19:38:24.398015 2243 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:38:24.402417 kubelet[2243]: W1002 19:38:24.402318 2243 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.25.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.402417 kubelet[2243]: E1002 19:38:24.402409 2243 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.25.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:24.408152 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:38:24.410000 audit[2449]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.410000 audit[2449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=4 a1=ffffc6352490 a2=0 a3=1 items=0 ppid=2243 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.410000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:38:24.415000 audit[2450]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2450 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:24.415000 audit[2450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=4 a1=ffffea950440 a2=0 a3=1 items=0 ppid=2243 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.415000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:38:24.419000 audit[2451]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.419000 audit[2451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=4 a1=ffffe5262e40 a2=0 a3=1 items=0 ppid=2243 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:38:24.424038 kubelet[2243]: I1002 19:38:24.424001 2243 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:38:24.423000 audit[2243]: AVC avc: denied { mac_admin } for pid=2243 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:24.423000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:24.423000 audit[2243]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400109e150 a1=4001108a38 a2=400109e120 a3=25 items=0 ppid=1 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.423000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:24.424760 kubelet[2243]: I1002 19:38:24.424576 2243 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-22" Oct 2 19:38:24.425273 kubelet[2243]: E1002 19:38:24.425234 2243 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.22:6443/api/v1/nodes\": dial tcp 172.31.25.22:6443: connect: connection refused" node="ip-172-31-25-22" Oct 2 19:38:24.425382 kubelet[2243]: I1002 19:38:24.425294 2243 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:38:24.426948 kubelet[2243]: I1002 19:38:24.426126 2243 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:38:24.430112 kubelet[2243]: E1002 19:38:24.430065 2243 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-25-22\" not found" Oct 2 19:38:24.431000 audit[2452]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2452 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:24.431000 audit[2452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=4 a1=ffffda081d80 a2=0 a3=1 items=0 ppid=2243 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.431000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:38:24.432000 audit[2453]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:24.432000 audit[2453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=4 a1=fffffb60a2b0 a2=0 a3=1 items=0 ppid=2243 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.432000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:38:24.435000 audit[2454]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2454 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:24.435000 audit[2454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=4 a1=ffffc5265250 a2=0 a3=1 items=0 ppid=2243 pid=2454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:24.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:38:24.498847 kubelet[2243]: I1002 19:38:24.498793 2243 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:24.500994 kubelet[2243]: I1002 19:38:24.500961 2243 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:24.503782 kubelet[2243]: I1002 19:38:24.503748 2243 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:24.515914 systemd[1]: Created slice kubepods-burstable-pod7fcb9936e998596219eb310e1a9c79e8.slice. Oct 2 19:38:24.519081 kubelet[2243]: E1002 19:38:24.519046 2243 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-22?timeout=10s\": dial tcp 172.31.25.22:6443: connect: connection refused" interval="400ms" Oct 2 19:38:24.531133 systemd[1]: Created slice kubepods-burstable-podfedb34b975e3de4872fdb5afa3ff1842.slice. Oct 2 19:38:24.549406 systemd[1]: Created slice kubepods-burstable-pod01e2ca262904979244a269e9b1b6dcbd.slice. Oct 2 19:38:24.617406 kubelet[2243]: I1002 19:38:24.617347 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7fcb9936e998596219eb310e1a9c79e8-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-22\" (UID: \"7fcb9936e998596219eb310e1a9c79e8\") " pod="kube-system/kube-apiserver-ip-172-31-25-22" Oct 2 19:38:24.617567 kubelet[2243]: I1002 19:38:24.617446 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:24.617567 kubelet[2243]: I1002 19:38:24.617551 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:24.617754 kubelet[2243]: I1002 19:38:24.617624 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7fcb9936e998596219eb310e1a9c79e8-ca-certs\") pod \"kube-apiserver-ip-172-31-25-22\" (UID: \"7fcb9936e998596219eb310e1a9c79e8\") " pod="kube-system/kube-apiserver-ip-172-31-25-22" Oct 2 19:38:24.617754 kubelet[2243]: I1002 19:38:24.617729 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:24.617867 kubelet[2243]: I1002 19:38:24.617780 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:24.617867 kubelet[2243]: I1002 19:38:24.617853 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:24.617992 kubelet[2243]: I1002 19:38:24.617921 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/01e2ca262904979244a269e9b1b6dcbd-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-22\" (UID: \"01e2ca262904979244a269e9b1b6dcbd\") " pod="kube-system/kube-scheduler-ip-172-31-25-22" Oct 2 19:38:24.618059 kubelet[2243]: I1002 19:38:24.617992 2243 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7fcb9936e998596219eb310e1a9c79e8-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-22\" (UID: \"7fcb9936e998596219eb310e1a9c79e8\") " pod="kube-system/kube-apiserver-ip-172-31-25-22" Oct 2 19:38:24.628213 kubelet[2243]: I1002 19:38:24.628180 2243 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-22" Oct 2 19:38:24.628823 kubelet[2243]: E1002 19:38:24.628797 2243 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.22:6443/api/v1/nodes\": dial tcp 172.31.25.22:6443: connect: connection refused" node="ip-172-31-25-22" Oct 2 19:38:24.830494 env[1566]: time="2023-10-02T19:38:24.829920010Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-22,Uid:7fcb9936e998596219eb310e1a9c79e8,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:24.846594 env[1566]: time="2023-10-02T19:38:24.846515103Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-22,Uid:fedb34b975e3de4872fdb5afa3ff1842,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:24.855562 env[1566]: time="2023-10-02T19:38:24.855486380Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-22,Uid:01e2ca262904979244a269e9b1b6dcbd,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:24.920541 kubelet[2243]: E1002 19:38:24.920493 2243 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-22?timeout=10s\": dial tcp 172.31.25.22:6443: connect: connection refused" interval="800ms" Oct 2 19:38:25.031015 kubelet[2243]: I1002 19:38:25.030972 2243 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-22" Oct 2 19:38:25.031464 kubelet[2243]: E1002 19:38:25.031434 2243 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.22:6443/api/v1/nodes\": dial tcp 172.31.25.22:6443: connect: connection refused" node="ip-172-31-25-22" Oct 2 19:38:25.360201 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2137822789.mount: Deactivated successfully. Oct 2 19:38:25.369859 env[1566]: time="2023-10-02T19:38:25.369804956Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.373781 env[1566]: time="2023-10-02T19:38:25.373735024Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.375329 env[1566]: time="2023-10-02T19:38:25.375288752Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.378267 env[1566]: time="2023-10-02T19:38:25.378222089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.379876 env[1566]: time="2023-10-02T19:38:25.379835863Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.382778 env[1566]: time="2023-10-02T19:38:25.382697777Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.384218 env[1566]: time="2023-10-02T19:38:25.384166774Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.385766 env[1566]: time="2023-10-02T19:38:25.385721977Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.388959 kubelet[2243]: W1002 19:38:25.388831 2243 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.25.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:25.388959 kubelet[2243]: E1002 19:38:25.388915 2243 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.25.22:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:25.398138 env[1566]: time="2023-10-02T19:38:25.398085689Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.404013 env[1566]: time="2023-10-02T19:38:25.403956287Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.407333 env[1566]: time="2023-10-02T19:38:25.407284059Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.440583 env[1566]: time="2023-10-02T19:38:25.440518242Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:38:25.458662 env[1566]: time="2023-10-02T19:38:25.458517079Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:25.458662 env[1566]: time="2023-10-02T19:38:25.458600550Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:25.459025 env[1566]: time="2023-10-02T19:38:25.458627262Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:25.460699 env[1566]: time="2023-10-02T19:38:25.459622169Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/763bd11ad40fcd2f5e78fad031628fbd526304f86c351aa62b190073820342b6 pid=2465 runtime=io.containerd.runc.v2 Oct 2 19:38:25.485934 env[1566]: time="2023-10-02T19:38:25.485585312Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:25.485934 env[1566]: time="2023-10-02T19:38:25.485666455Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:25.485934 env[1566]: time="2023-10-02T19:38:25.485712774Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:25.486323 env[1566]: time="2023-10-02T19:38:25.486224256Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/73667ba6ba9a485368acce84c66e0e42d2fd8daec04270108e9754425ed9b3ac pid=2479 runtime=io.containerd.runc.v2 Oct 2 19:38:25.501255 systemd[1]: Started cri-containerd-763bd11ad40fcd2f5e78fad031628fbd526304f86c351aa62b190073820342b6.scope. Oct 2 19:38:25.549589 env[1566]: time="2023-10-02T19:38:25.548899376Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:25.549589 env[1566]: time="2023-10-02T19:38:25.549057318Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:25.549589 env[1566]: time="2023-10-02T19:38:25.549143153Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:25.552547 systemd[1]: Started cri-containerd-73667ba6ba9a485368acce84c66e0e42d2fd8daec04270108e9754425ed9b3ac.scope. Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.557000 audit: BPF prog-id=70 op=LOAD Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2465 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736336264313161643430666364326635653738666164303331363238 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2465 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736336264313161643430666364326635653738666164303331363238 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.560000 audit: BPF prog-id=71 op=LOAD Oct 2 19:38:25.560000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2465 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736336264313161643430666364326635653738666164303331363238 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit: BPF prog-id=72 op=LOAD Oct 2 19:38:25.561000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2465 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736336264313161643430666364326635653738666164303331363238 Oct 2 19:38:25.561000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:38:25.561000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.561000 audit: BPF prog-id=73 op=LOAD Oct 2 19:38:25.561000 audit[2484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2465 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736336264313161643430666364326635653738666164303331363238 Oct 2 19:38:25.567863 env[1566]: time="2023-10-02T19:38:25.563297721Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/437ae90624e554a10008b3155f01faf0b51d040aeac06e719f17260c69aa93e2 pid=2505 runtime=io.containerd.runc.v2 Oct 2 19:38:25.600885 systemd[1]: Started cri-containerd-437ae90624e554a10008b3155f01faf0b51d040aeac06e719f17260c69aa93e2.scope. Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.642000 audit: BPF prog-id=74 op=LOAD Oct 2 19:38:25.647000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.647000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2479 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363637626136626139613438353336386163636538346336366530 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2479 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363637626136626139613438353336386163636538346336366530 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit: BPF prog-id=75 op=LOAD Oct 2 19:38:25.649000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2479 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363637626136626139613438353336386163636538346336366530 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.649000 audit: BPF prog-id=76 op=LOAD Oct 2 19:38:25.649000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2479 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363637626136626139613438353336386163636538346336366530 Oct 2 19:38:25.650000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:38:25.650000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.650000 audit: BPF prog-id=77 op=LOAD Oct 2 19:38:25.650000 audit[2502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2479 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733363637626136626139613438353336386163636538346336366530 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit: BPF prog-id=78 op=LOAD Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2505 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433376165393036323465353534613130303038623331353566303166 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2505 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433376165393036323465353534613130303038623331353566303166 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.676000 audit: BPF prog-id=79 op=LOAD Oct 2 19:38:25.676000 audit[2534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2505 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433376165393036323465353534613130303038623331353566303166 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit: BPF prog-id=80 op=LOAD Oct 2 19:38:25.677000 audit[2534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2505 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433376165393036323465353534613130303038623331353566303166 Oct 2 19:38:25.677000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:38:25.677000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.677000 audit: BPF prog-id=81 op=LOAD Oct 2 19:38:25.677000 audit[2534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2505 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433376165393036323465353534613130303038623331353566303166 Oct 2 19:38:25.685685 env[1566]: time="2023-10-02T19:38:25.685612505Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-22,Uid:fedb34b975e3de4872fdb5afa3ff1842,Namespace:kube-system,Attempt:0,} returns sandbox id \"763bd11ad40fcd2f5e78fad031628fbd526304f86c351aa62b190073820342b6\"" Oct 2 19:38:25.697412 env[1566]: time="2023-10-02T19:38:25.697349082Z" level=info msg="CreateContainer within sandbox \"763bd11ad40fcd2f5e78fad031628fbd526304f86c351aa62b190073820342b6\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:38:25.707796 kubelet[2243]: W1002 19:38:25.707604 2243 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.25.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-22&limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:25.708156 kubelet[2243]: E1002 19:38:25.708030 2243 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.25.22:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-22&limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:25.721535 kubelet[2243]: E1002 19:38:25.721423 2243 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-22?timeout=10s\": dial tcp 172.31.25.22:6443: connect: connection refused" interval="1.6s" Oct 2 19:38:25.742115 env[1566]: time="2023-10-02T19:38:25.742041049Z" level=info msg="CreateContainer within sandbox \"763bd11ad40fcd2f5e78fad031628fbd526304f86c351aa62b190073820342b6\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d\"" Oct 2 19:38:25.743168 env[1566]: time="2023-10-02T19:38:25.743111158Z" level=info msg="StartContainer for \"1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d\"" Oct 2 19:38:25.759887 env[1566]: time="2023-10-02T19:38:25.759810125Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-22,Uid:01e2ca262904979244a269e9b1b6dcbd,Namespace:kube-system,Attempt:0,} returns sandbox id \"73667ba6ba9a485368acce84c66e0e42d2fd8daec04270108e9754425ed9b3ac\"" Oct 2 19:38:25.764492 env[1566]: time="2023-10-02T19:38:25.764437647Z" level=info msg="CreateContainer within sandbox \"73667ba6ba9a485368acce84c66e0e42d2fd8daec04270108e9754425ed9b3ac\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:38:25.783904 env[1566]: time="2023-10-02T19:38:25.783820210Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-22,Uid:7fcb9936e998596219eb310e1a9c79e8,Namespace:kube-system,Attempt:0,} returns sandbox id \"437ae90624e554a10008b3155f01faf0b51d040aeac06e719f17260c69aa93e2\"" Oct 2 19:38:25.788871 env[1566]: time="2023-10-02T19:38:25.788810296Z" level=info msg="CreateContainer within sandbox \"73667ba6ba9a485368acce84c66e0e42d2fd8daec04270108e9754425ed9b3ac\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7\"" Oct 2 19:38:25.790559 env[1566]: time="2023-10-02T19:38:25.790505249Z" level=info msg="CreateContainer within sandbox \"437ae90624e554a10008b3155f01faf0b51d040aeac06e719f17260c69aa93e2\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:38:25.791900 env[1566]: time="2023-10-02T19:38:25.791835528Z" level=info msg="StartContainer for \"1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7\"" Oct 2 19:38:25.810331 kubelet[2243]: W1002 19:38:25.810208 2243 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.25.22:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:25.810331 kubelet[2243]: E1002 19:38:25.810297 2243 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.25.22:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:25.823709 env[1566]: time="2023-10-02T19:38:25.823605274Z" level=info msg="CreateContainer within sandbox \"437ae90624e554a10008b3155f01faf0b51d040aeac06e719f17260c69aa93e2\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"9c654c1f2e9b5e0e89d1bebe236dfeff17d4c5c2954e7035e2c1704978314b0d\"" Oct 2 19:38:25.824467 env[1566]: time="2023-10-02T19:38:25.824410812Z" level=info msg="StartContainer for \"9c654c1f2e9b5e0e89d1bebe236dfeff17d4c5c2954e7035e2c1704978314b0d\"" Oct 2 19:38:25.834601 kubelet[2243]: I1002 19:38:25.834096 2243 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-22" Oct 2 19:38:25.834601 kubelet[2243]: E1002 19:38:25.834567 2243 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.25.22:6443/api/v1/nodes\": dial tcp 172.31.25.22:6443: connect: connection refused" node="ip-172-31-25-22" Oct 2 19:38:25.842662 systemd[1]: Started cri-containerd-1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d.scope. Oct 2 19:38:25.900425 systemd[1]: Started cri-containerd-1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7.scope. Oct 2 19:38:25.916762 systemd[1]: Started cri-containerd-9c654c1f2e9b5e0e89d1bebe236dfeff17d4c5c2954e7035e2c1704978314b0d.scope. Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.928000 audit: BPF prog-id=82 op=LOAD Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2465 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323662383131346462643032616564333262626164623531623964 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2465 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323662383131346462643032616564333262626164623531623964 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit: BPF prog-id=83 op=LOAD Oct 2 19:38:25.930000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2465 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323662383131346462643032616564333262626164623531623964 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit: BPF prog-id=84 op=LOAD Oct 2 19:38:25.930000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2465 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323662383131346462643032616564333262626164623531623964 Oct 2 19:38:25.930000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:38:25.930000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { perfmon } for pid=2591 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit[2591]: AVC avc: denied { bpf } for pid=2591 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.930000 audit: BPF prog-id=85 op=LOAD Oct 2 19:38:25.930000 audit[2591]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2465 pid=2591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161323662383131346462643032616564333262626164623531623964 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.992000 audit: BPF prog-id=86 op=LOAD Oct 2 19:38:25.994000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.994000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2505 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363534633166326539623565306538396431626562653233366466 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2505 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363534633166326539623565306538396431626562653233366466 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.995000 audit: BPF prog-id=87 op=LOAD Oct 2 19:38:25.995000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2505 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363534633166326539623565306538396431626562653233366466 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.996000 audit: BPF prog-id=88 op=LOAD Oct 2 19:38:25.996000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2505 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363534633166326539623565306538396431626562653233366466 Oct 2 19:38:25.998000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:38:25.999730 kubelet[2243]: W1002 19:38:25.999645 2243 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.25.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:25.999825 kubelet[2243]: E1002 19:38:25.999747 2243 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.25.22:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:25.999000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:25.999000 audit: BPF prog-id=89 op=LOAD Oct 2 19:38:25.999000 audit[2619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2505 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:25.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363534633166326539623565306538396431626562653233366466 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.012000 audit: BPF prog-id=90 op=LOAD Oct 2 19:38:26.014000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.014000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2479 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663266383037633434313939623238636163346664313131636363 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2479 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663266383037633434313939623238636163346664313131636363 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.015000 audit: BPF prog-id=91 op=LOAD Oct 2 19:38:26.015000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2479 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663266383037633434313939623238636163346664313131636363 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.018000 audit: BPF prog-id=92 op=LOAD Oct 2 19:38:26.018000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2479 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663266383037633434313939623238636163346664313131636363 Oct 2 19:38:26.019000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:38:26.019000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { perfmon } for pid=2607 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit[2607]: AVC avc: denied { bpf } for pid=2607 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:26.020000 audit: BPF prog-id=93 op=LOAD Oct 2 19:38:26.020000 audit[2607]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2479 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:26.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663266383037633434313939623238636163346664313131636363 Oct 2 19:38:26.037240 env[1566]: time="2023-10-02T19:38:26.037120763Z" level=info msg="StartContainer for \"1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d\" returns successfully" Oct 2 19:38:26.083010 env[1566]: time="2023-10-02T19:38:26.082946897Z" level=info msg="StartContainer for \"9c654c1f2e9b5e0e89d1bebe236dfeff17d4c5c2954e7035e2c1704978314b0d\" returns successfully" Oct 2 19:38:26.164601 env[1566]: time="2023-10-02T19:38:26.164463143Z" level=info msg="StartContainer for \"1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7\" returns successfully" Oct 2 19:38:26.303530 kubelet[2243]: E1002 19:38:26.303457 2243 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.25.22:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.25.22:6443: connect: connection refused Oct 2 19:38:27.437373 kubelet[2243]: I1002 19:38:27.437338 2243 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-22" Oct 2 19:38:28.437055 kernel: kauditd_printk_skb: 615 callbacks suppressed Oct 2 19:38:28.437186 kernel: audit: type=1400 audit(1696275508.424:693): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:28.424000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:28.424000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000fba000 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:28.452536 kernel: audit: type=1300 audit(1696275508.424:693): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000fba000 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:28.424000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:28.466029 kernel: audit: type=1327 audit(1696275508.424:693): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:28.437000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:28.476124 kernel: audit: type=1400 audit(1696275508.437:694): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:28.437000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000cb6a0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:28.489078 kernel: audit: type=1300 audit(1696275508.437:694): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000cb6a0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:28.437000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:28.499855 kernel: audit: type=1327 audit(1696275508.437:694): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:29.943000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.943000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40040fe000 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:38:29.957786 kernel: audit: type=1400 audit(1696275509.943:695): avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.943000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:29.988316 kernel: audit: type=1300 audit(1696275509.943:695): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40040fe000 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:38:29.988413 kernel: audit: type=1327 audit(1696275509.943:695): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:30.018295 kernel: audit: type=1400 audit(1696275509.943:696): avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.943000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.943000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40068f2580 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:38:29.943000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:29.954000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.954000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=40040ccff0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:38:29.954000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:29.955000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:29.955000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=40040fe180 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:38:29.955000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:30.031000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:30.031000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=65 a1=400632e0c0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:38:30.032000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:30.032000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=40045c0b40 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:38:30.032000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:30.031000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:38:30.412802 kubelet[2243]: I1002 19:38:30.412630 2243 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-25-22" Oct 2 19:38:30.594822 kubelet[2243]: E1002 19:38:30.594784 2243 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-25-22\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-25-22" Oct 2 19:38:31.300159 kubelet[2243]: I1002 19:38:31.300114 2243 apiserver.go:52] "Watching apiserver" Oct 2 19:38:31.315108 kubelet[2243]: I1002 19:38:31.315063 2243 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:38:31.362592 kubelet[2243]: I1002 19:38:31.362550 2243 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:38:33.430177 systemd[1]: Reloading. Oct 2 19:38:33.735781 /usr/lib/systemd/system-generators/torcx-generator[2713]: time="2023-10-02T19:38:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:38:33.736446 /usr/lib/systemd/system-generators/torcx-generator[2713]: time="2023-10-02T19:38:33Z" level=info msg="torcx already run" Oct 2 19:38:33.992788 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:38:33.993201 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:38:34.038043 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:38:34.238247 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:38:34.238381 kernel: audit: type=1400 audit(1696275514.228:701): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.253904 kernel: audit: type=1400 audit(1696275514.228:702): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254056 kernel: audit: type=1400 audit(1696275514.228:703): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.262017 kernel: audit: type=1400 audit(1696275514.228:704): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.262132 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.271695 kernel: audit: type=1400 audit(1696275514.228:705): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.271785 kernel: audit: audit_lost=31 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.281902 kernel: audit: type=1400 audit(1696275514.228:706): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.282026 kernel: audit: backlog limit exceeded Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.291747 kernel: audit: type=1400 audit(1696275514.228:707): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit: BPF prog-id=94 op=LOAD Oct 2 19:38:34.230000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit: BPF prog-id=95 op=LOAD Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.237000 audit: BPF prog-id=96 op=LOAD Oct 2 19:38:34.237000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:38:34.237000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.245000 audit: BPF prog-id=97 op=LOAD Oct 2 19:38:34.245000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.253000 audit: BPF prog-id=98 op=LOAD Oct 2 19:38:34.253000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.261000 audit: BPF prog-id=99 op=LOAD Oct 2 19:38:34.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.300000 audit: BPF prog-id=107 op=LOAD Oct 2 19:38:34.300000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.301000 audit: BPF prog-id=108 op=LOAD Oct 2 19:38:34.302000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit: BPF prog-id=109 op=LOAD Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.302000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:38:34.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.304000 audit: BPF prog-id=111 op=LOAD Oct 2 19:38:34.304000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.310000 audit: BPF prog-id=112 op=LOAD Oct 2 19:38:34.311000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit: BPF prog-id=113 op=LOAD Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.311000 audit: BPF prog-id=114 op=LOAD Oct 2 19:38:34.311000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:38:34.311000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:38:34.374360 systemd[1]: Stopping kubelet.service... Oct 2 19:38:34.395524 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:38:34.395984 systemd[1]: Stopped kubelet.service. Oct 2 19:38:34.396081 systemd[1]: kubelet.service: Consumed 1.953s CPU time. Oct 2 19:38:34.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:34.401109 systemd[1]: Started kubelet.service. Oct 2 19:38:34.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:34.576894 kubelet[2768]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:34.577431 kubelet[2768]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:38:34.577537 kubelet[2768]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:38:34.577994 kubelet[2768]: I1002 19:38:34.577933 2768 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:38:34.592223 kubelet[2768]: I1002 19:38:34.592177 2768 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:38:34.592436 kubelet[2768]: I1002 19:38:34.592413 2768 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:38:34.593121 kubelet[2768]: I1002 19:38:34.593082 2768 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:38:34.597965 kubelet[2768]: I1002 19:38:34.597928 2768 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:38:34.603593 kubelet[2768]: I1002 19:38:34.603541 2768 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:38:34.610311 kubelet[2768]: W1002 19:38:34.610276 2768 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:38:34.612327 kubelet[2768]: I1002 19:38:34.612278 2768 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:38:34.613241 kubelet[2768]: I1002 19:38:34.613208 2768 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:38:34.613548 kubelet[2768]: I1002 19:38:34.613521 2768 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:38:34.614112 kubelet[2768]: I1002 19:38:34.614078 2768 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:38:34.614283 kubelet[2768]: I1002 19:38:34.614248 2768 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:38:34.614566 kubelet[2768]: I1002 19:38:34.614539 2768 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:34.623125 kubelet[2768]: I1002 19:38:34.623085 2768 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:38:34.623354 kubelet[2768]: I1002 19:38:34.623331 2768 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:38:34.623638 kubelet[2768]: I1002 19:38:34.623614 2768 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:38:34.623889 kubelet[2768]: I1002 19:38:34.623866 2768 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:38:34.632115 kubelet[2768]: I1002 19:38:34.632075 2768 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:38:34.633839 kubelet[2768]: I1002 19:38:34.633795 2768 server.go:1168] "Started kubelet" Oct 2 19:38:34.641000 audit[2768]: AVC avc: denied { mac_admin } for pid=2768 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.641000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:34.641000 audit[2768]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d3e060 a1=40005a5140 a2=4000d3e030 a3=25 items=0 ppid=1 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:34.641000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:34.642991 kubelet[2768]: I1002 19:38:34.642959 2768 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:38:34.642000 audit[2768]: AVC avc: denied { mac_admin } for pid=2768 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:34.642000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:34.642000 audit[2768]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b510a0 a1=40005a5158 a2=4000d3e0f0 a3=25 items=0 ppid=1 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:34.642000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:34.643565 kubelet[2768]: I1002 19:38:34.643543 2768 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:38:34.643807 kubelet[2768]: I1002 19:38:34.643785 2768 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:38:34.646519 kubelet[2768]: E1002 19:38:34.646485 2768 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:38:34.646759 kubelet[2768]: E1002 19:38:34.646736 2768 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:38:34.651256 kubelet[2768]: I1002 19:38:34.651222 2768 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:38:34.653591 kubelet[2768]: I1002 19:38:34.653406 2768 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:38:34.664829 kubelet[2768]: I1002 19:38:34.651599 2768 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:38:34.669210 kubelet[2768]: I1002 19:38:34.669175 2768 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:38:34.673903 kubelet[2768]: I1002 19:38:34.651733 2768 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:38:34.769826 kubelet[2768]: I1002 19:38:34.769789 2768 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-25-22" Oct 2 19:38:34.793000 audit[2786]: USER_ACCT pid=2786 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:34.794012 sudo[2786]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:38:34.793000 audit[2786]: CRED_REFR pid=2786 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:34.794516 sudo[2786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:38:34.803000 audit[2786]: USER_START pid=2786 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:34.858625 kubelet[2768]: I1002 19:38:34.858480 2768 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:38:34.869999 kubelet[2768]: I1002 19:38:34.869961 2768 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-25-22" Oct 2 19:38:34.870329 kubelet[2768]: I1002 19:38:34.870308 2768 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-25-22" Oct 2 19:38:34.879074 kubelet[2768]: I1002 19:38:34.879034 2768 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:38:34.880107 kubelet[2768]: I1002 19:38:34.880070 2768 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:38:34.880581 kubelet[2768]: I1002 19:38:34.880539 2768 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:38:34.880878 kubelet[2768]: E1002 19:38:34.880846 2768 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:38:34.981995 kubelet[2768]: E1002 19:38:34.981954 2768 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:38:35.025164 kubelet[2768]: I1002 19:38:35.025128 2768 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:38:35.025395 kubelet[2768]: I1002 19:38:35.025369 2768 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:38:35.025527 kubelet[2768]: I1002 19:38:35.025505 2768 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:38:35.025957 kubelet[2768]: I1002 19:38:35.025932 2768 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:38:35.026304 kubelet[2768]: I1002 19:38:35.026281 2768 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:38:35.026561 kubelet[2768]: I1002 19:38:35.026540 2768 policy_none.go:49] "None policy: Start" Oct 2 19:38:35.029006 kubelet[2768]: I1002 19:38:35.028971 2768 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:38:35.029232 kubelet[2768]: I1002 19:38:35.029209 2768 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:38:35.029601 kubelet[2768]: I1002 19:38:35.029576 2768 state_mem.go:75] "Updated machine memory state" Oct 2 19:38:35.043624 kubelet[2768]: I1002 19:38:35.043571 2768 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:38:35.043000 audit[2768]: AVC avc: denied { mac_admin } for pid=2768 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:35.043000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:38:35.043000 audit[2768]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400117de30 a1=40012c4f48 a2=400117de00 a3=25 items=0 ppid=1 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:35.043000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:38:35.044900 kubelet[2768]: I1002 19:38:35.044873 2768 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:38:35.046973 kubelet[2768]: I1002 19:38:35.046779 2768 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:38:35.125000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:35.125000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ef09c0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:35.125000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:35.127000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:35.127000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ef0b00 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:35.127000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:35.129000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:35.129000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ef0c40 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:35.129000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:35.131000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:35.131000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ef0d60 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:35.131000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:35.182550 kubelet[2768]: I1002 19:38:35.182506 2768 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:35.182912 kubelet[2768]: I1002 19:38:35.182888 2768 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:35.188695 kubelet[2768]: I1002 19:38:35.184700 2768 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:35.281711 kubelet[2768]: I1002 19:38:35.281589 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7fcb9936e998596219eb310e1a9c79e8-ca-certs\") pod \"kube-apiserver-ip-172-31-25-22\" (UID: \"7fcb9936e998596219eb310e1a9c79e8\") " pod="kube-system/kube-apiserver-ip-172-31-25-22" Oct 2 19:38:35.281984 kubelet[2768]: I1002 19:38:35.281961 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7fcb9936e998596219eb310e1a9c79e8-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-22\" (UID: \"7fcb9936e998596219eb310e1a9c79e8\") " pod="kube-system/kube-apiserver-ip-172-31-25-22" Oct 2 19:38:35.282179 kubelet[2768]: I1002 19:38:35.282159 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7fcb9936e998596219eb310e1a9c79e8-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-22\" (UID: \"7fcb9936e998596219eb310e1a9c79e8\") " pod="kube-system/kube-apiserver-ip-172-31-25-22" Oct 2 19:38:35.383129 kubelet[2768]: I1002 19:38:35.382999 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:35.383129 kubelet[2768]: I1002 19:38:35.383074 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:35.383323 kubelet[2768]: I1002 19:38:35.383138 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:35.383323 kubelet[2768]: I1002 19:38:35.383209 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:35.383323 kubelet[2768]: I1002 19:38:35.383254 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fedb34b975e3de4872fdb5afa3ff1842-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-22\" (UID: \"fedb34b975e3de4872fdb5afa3ff1842\") " pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:35.383323 kubelet[2768]: I1002 19:38:35.383298 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/01e2ca262904979244a269e9b1b6dcbd-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-22\" (UID: \"01e2ca262904979244a269e9b1b6dcbd\") " pod="kube-system/kube-scheduler-ip-172-31-25-22" Oct 2 19:38:35.641546 kubelet[2768]: I1002 19:38:35.641411 2768 apiserver.go:52] "Watching apiserver" Oct 2 19:38:35.683408 kubelet[2768]: I1002 19:38:35.683349 2768 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:38:35.685069 kubelet[2768]: I1002 19:38:35.685023 2768 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:38:35.819415 sudo[2786]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:35.817000 audit[2786]: USER_END pid=2786 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:35.818000 audit[2786]: CRED_DISP pid=2786 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:35.936380 kubelet[2768]: E1002 19:38:35.936246 2768 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-25-22\" already exists" pod="kube-system/kube-apiserver-ip-172-31-25-22" Oct 2 19:38:35.937807 kubelet[2768]: E1002 19:38:35.937776 2768 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-25-22\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-25-22" Oct 2 19:38:35.975271 kubelet[2768]: I1002 19:38:35.975218 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-25-22" podStartSLOduration=0.975131701 podCreationTimestamp="2023-10-02 19:38:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:35.95805996 +0000 UTC m=+1.534232955" watchObservedRunningTime="2023-10-02 19:38:35.975131701 +0000 UTC m=+1.551304708" Oct 2 19:38:36.006135 kubelet[2768]: I1002 19:38:36.006081 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-25-22" podStartSLOduration=1.005916397 podCreationTimestamp="2023-10-02 19:38:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:35.976882369 +0000 UTC m=+1.553055460" watchObservedRunningTime="2023-10-02 19:38:36.005916397 +0000 UTC m=+1.582089404" Oct 2 19:38:36.006577 kubelet[2768]: I1002 19:38:36.006550 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-25-22" podStartSLOduration=1.006488433 podCreationTimestamp="2023-10-02 19:38:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:36.00565463 +0000 UTC m=+1.581827661" watchObservedRunningTime="2023-10-02 19:38:36.006488433 +0000 UTC m=+1.582661476" Oct 2 19:38:38.040182 sudo[1830]: pam_unix(sudo:session): session closed for user root Oct 2 19:38:38.038000 audit[1830]: USER_END pid=1830 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:38.038000 audit[1830]: CRED_DISP pid=1830 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:38:38.065011 sshd[1827]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:38.066000 audit[1827]: USER_END pid=1827 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:38:38.066000 audit[1827]: CRED_DISP pid=1827 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:38:38.071782 systemd-logind[1562]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:38:38.072021 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:38:38.072391 systemd[1]: session-7.scope: Consumed 11.475s CPU time. Oct 2 19:38:38.074102 systemd[1]: sshd@6-172.31.25.22:22-139.178.89.65:56506.service: Deactivated successfully. Oct 2 19:38:38.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.22:22-139.178.89.65:56506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:38.076327 systemd-logind[1562]: Removed session 7. Oct 2 19:38:45.868000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:38:45.872688 kernel: kauditd_printk_skb: 440 callbacks suppressed Oct 2 19:38:45.872811 kernel: audit: type=1400 audit(1696275525.868:879): avc: denied { watch } for pid=2623 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:38:45.868000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d9ec80 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:45.895896 kernel: audit: type=1300 audit(1696275525.868:879): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d9ec80 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:38:45.896273 kernel: audit: type=1327 audit(1696275525.868:879): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:45.868000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:47.385436 kubelet[2768]: I1002 19:38:47.385400 2768 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:38:47.387015 env[1566]: time="2023-10-02T19:38:47.386935035Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:38:47.388159 kubelet[2768]: I1002 19:38:47.388128 2768 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:38:47.918259 kubelet[2768]: I1002 19:38:47.918183 2768 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:47.929560 kubelet[2768]: W1002 19:38:47.929506 2768 reflector.go:533] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:38:47.929773 kubelet[2768]: E1002 19:38:47.929575 2768 reflector.go:148] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:38:47.932362 kubelet[2768]: W1002 19:38:47.930229 2768 reflector.go:533] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:38:47.932362 kubelet[2768]: E1002 19:38:47.930288 2768 reflector.go:148] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:38:47.932067 systemd[1]: Created slice kubepods-besteffort-podc3aa8222_c1f5_491e_be9a_558356ac35aa.slice. Oct 2 19:38:47.936965 kubelet[2768]: I1002 19:38:47.936877 2768 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:47.954787 systemd[1]: Created slice kubepods-burstable-podc0f72afa_349b_4534_80fb_55a6b1bf7243.slice. Oct 2 19:38:47.961475 kubelet[2768]: I1002 19:38:47.961405 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c3aa8222-c1f5-491e-be9a-558356ac35aa-xtables-lock\") pod \"kube-proxy-xxz9j\" (UID: \"c3aa8222-c1f5-491e-be9a-558356ac35aa\") " pod="kube-system/kube-proxy-xxz9j" Oct 2 19:38:47.961475 kubelet[2768]: I1002 19:38:47.961485 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c3aa8222-c1f5-491e-be9a-558356ac35aa-lib-modules\") pod \"kube-proxy-xxz9j\" (UID: \"c3aa8222-c1f5-491e-be9a-558356ac35aa\") " pod="kube-system/kube-proxy-xxz9j" Oct 2 19:38:47.961788 kubelet[2768]: I1002 19:38:47.961532 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-cgroup\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.961788 kubelet[2768]: I1002 19:38:47.961590 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-run\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.961788 kubelet[2768]: I1002 19:38:47.961643 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c0f72afa-349b-4534-80fb-55a6b1bf7243-hubble-tls\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.961788 kubelet[2768]: I1002 19:38:47.961719 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fgv4l\" (UniqueName: \"kubernetes.io/projected/c0f72afa-349b-4534-80fb-55a6b1bf7243-kube-api-access-fgv4l\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.961788 kubelet[2768]: I1002 19:38:47.961776 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qwdq6\" (UniqueName: \"kubernetes.io/projected/c3aa8222-c1f5-491e-be9a-558356ac35aa-kube-api-access-qwdq6\") pod \"kube-proxy-xxz9j\" (UID: \"c3aa8222-c1f5-491e-be9a-558356ac35aa\") " pod="kube-system/kube-proxy-xxz9j" Oct 2 19:38:47.962120 kubelet[2768]: I1002 19:38:47.961823 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-host-proc-sys-net\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962120 kubelet[2768]: I1002 19:38:47.961870 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-host-proc-sys-kernel\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962120 kubelet[2768]: I1002 19:38:47.961917 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-bpf-maps\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962120 kubelet[2768]: I1002 19:38:47.961964 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/c3aa8222-c1f5-491e-be9a-558356ac35aa-kube-proxy\") pod \"kube-proxy-xxz9j\" (UID: \"c3aa8222-c1f5-491e-be9a-558356ac35aa\") " pod="kube-system/kube-proxy-xxz9j" Oct 2 19:38:47.962120 kubelet[2768]: I1002 19:38:47.962034 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-lib-modules\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962120 kubelet[2768]: I1002 19:38:47.962080 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c0f72afa-349b-4534-80fb-55a6b1bf7243-clustermesh-secrets\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962503 kubelet[2768]: I1002 19:38:47.962126 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-config-path\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962503 kubelet[2768]: I1002 19:38:47.962170 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-hostproc\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962503 kubelet[2768]: I1002 19:38:47.962215 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cni-path\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962503 kubelet[2768]: I1002 19:38:47.962260 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-etc-cni-netd\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:47.962503 kubelet[2768]: I1002 19:38:47.962312 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-xtables-lock\") pod \"cilium-89w6j\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " pod="kube-system/cilium-89w6j" Oct 2 19:38:48.250655 kubelet[2768]: I1002 19:38:48.250604 2768 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:38:48.265399 kubelet[2768]: I1002 19:38:48.265344 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34148176-92a1-42fe-9ad2-7fb35bd495ad-cilium-config-path\") pod \"cilium-operator-574c4bb98d-scmwl\" (UID: \"34148176-92a1-42fe-9ad2-7fb35bd495ad\") " pod="kube-system/cilium-operator-574c4bb98d-scmwl" Oct 2 19:38:48.265903 kubelet[2768]: I1002 19:38:48.265860 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9n56b\" (UniqueName: \"kubernetes.io/projected/34148176-92a1-42fe-9ad2-7fb35bd495ad-kube-api-access-9n56b\") pod \"cilium-operator-574c4bb98d-scmwl\" (UID: \"34148176-92a1-42fe-9ad2-7fb35bd495ad\") " pod="kube-system/cilium-operator-574c4bb98d-scmwl" Oct 2 19:38:48.268873 systemd[1]: Created slice kubepods-besteffort-pod34148176_92a1_42fe_9ad2_7fb35bd495ad.slice. Oct 2 19:38:49.142905 env[1566]: time="2023-10-02T19:38:49.142824143Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xxz9j,Uid:c3aa8222-c1f5-491e-be9a-558356ac35aa,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:49.164027 env[1566]: time="2023-10-02T19:38:49.163530649Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-89w6j,Uid:c0f72afa-349b-4534-80fb-55a6b1bf7243,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:49.177862 env[1566]: time="2023-10-02T19:38:49.177803793Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-scmwl,Uid:34148176-92a1-42fe-9ad2-7fb35bd495ad,Namespace:kube-system,Attempt:0,}" Oct 2 19:38:49.210226 env[1566]: time="2023-10-02T19:38:49.210119354Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:49.210529 env[1566]: time="2023-10-02T19:38:49.210465421Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:49.210750 env[1566]: time="2023-10-02T19:38:49.210700992Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:49.211380 env[1566]: time="2023-10-02T19:38:49.211299178Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a9fb2e1291d7bce20c1821a29a47098008dda4779020f2114ff14d1877e522ac pid=2845 runtime=io.containerd.runc.v2 Oct 2 19:38:49.236593 env[1566]: time="2023-10-02T19:38:49.236446512Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:49.236593 env[1566]: time="2023-10-02T19:38:49.236531759Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:49.236879 env[1566]: time="2023-10-02T19:38:49.236590055Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:49.237422 env[1566]: time="2023-10-02T19:38:49.237331629Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601 pid=2872 runtime=io.containerd.runc.v2 Oct 2 19:38:49.244317 env[1566]: time="2023-10-02T19:38:49.244199126Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:38:49.244579 env[1566]: time="2023-10-02T19:38:49.244528213Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:38:49.250324 env[1566]: time="2023-10-02T19:38:49.250253361Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:38:49.251495 env[1566]: time="2023-10-02T19:38:49.251401698Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817 pid=2867 runtime=io.containerd.runc.v2 Oct 2 19:38:49.292109 systemd[1]: Started cri-containerd-a9fb2e1291d7bce20c1821a29a47098008dda4779020f2114ff14d1877e522ac.scope. Oct 2 19:38:49.300716 systemd[1]: Started cri-containerd-9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601.scope. Oct 2 19:38:49.330730 systemd[1]: Started cri-containerd-95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817.scope. Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406488 kernel: audit: type=1400 audit(1696275529.388:880): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406695 kernel: audit: type=1400 audit(1696275529.388:881): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.420999 kernel: audit: type=1400 audit(1696275529.388:882): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.421166 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:38:49.421248 kernel: audit: type=1400 audit(1696275529.388:883): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.428732 kernel: audit: audit_lost=116 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.439805 kernel: audit: type=1400 audit(1696275529.388:884): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.397000 audit: BPF prog-id=115 op=LOAD Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2872 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931343132323439353062616432336162383036376264643931613335 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2872 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931343132323439353062616432336162383036376264643931613335 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit: BPF prog-id=116 op=LOAD Oct 2 19:38:49.406000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2872 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931343132323439353062616432336162383036376264643931613335 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.406000 audit: BPF prog-id=117 op=LOAD Oct 2 19:38:49.406000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2872 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931343132323439353062616432336162383036376264643931613335 Oct 2 19:38:49.406000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:38:49.407000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.407000 audit: BPF prog-id=118 op=LOAD Oct 2 19:38:49.407000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2872 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931343132323439353062616432336162383036376264643931613335 Oct 2 19:38:49.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.439000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.439000 audit[2893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2867 pid=2893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.446000 audit: BPF prog-id=120 op=LOAD Oct 2 19:38:49.452000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.452000 audit[2868]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2845 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139666232653132393164376263653230633138323161323961343730 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2845 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139666232653132393164376263653230633138323161323961343730 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.453000 audit: BPF prog-id=121 op=LOAD Oct 2 19:38:49.453000 audit[2868]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2845 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139666232653132393164376263653230633138323161323961343730 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.454000 audit: BPF prog-id=122 op=LOAD Oct 2 19:38:49.454000 audit[2868]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2845 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139666232653132393164376263653230633138323161323961343730 Oct 2 19:38:49.456000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:38:49.456000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { perfmon } for pid=2868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646133663533366633656265393064383930623733646266356130 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2868]: AVC avc: denied { bpf } for pid=2868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit[2893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2867 pid=2893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646133663533366633656265393064383930623733646266356130 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.456000 audit: BPF prog-id=123 op=LOAD Oct 2 19:38:49.456000 audit[2868]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2845 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.458000 audit: BPF prog-id=124 op=LOAD Oct 2 19:38:49.458000 audit[2893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2867 pid=2893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139666232653132393164376263653230633138323161323961343730 Oct 2 19:38:49.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646133663533366633656265393064383930623733646266356130 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.458000 audit: BPF prog-id=125 op=LOAD Oct 2 19:38:49.458000 audit[2893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2867 pid=2893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646133663533366633656265393064383930623733646266356130 Oct 2 19:38:49.458000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:38:49.459000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { perfmon } for pid=2893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit[2893]: AVC avc: denied { bpf } for pid=2893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.459000 audit: BPF prog-id=126 op=LOAD Oct 2 19:38:49.459000 audit[2893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2867 pid=2893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646133663533366633656265393064383930623733646266356130 Oct 2 19:38:49.522351 env[1566]: time="2023-10-02T19:38:49.522290003Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xxz9j,Uid:c3aa8222-c1f5-491e-be9a-558356ac35aa,Namespace:kube-system,Attempt:0,} returns sandbox id \"a9fb2e1291d7bce20c1821a29a47098008dda4779020f2114ff14d1877e522ac\"" Oct 2 19:38:49.533064 env[1566]: time="2023-10-02T19:38:49.532996121Z" level=info msg="CreateContainer within sandbox \"a9fb2e1291d7bce20c1821a29a47098008dda4779020f2114ff14d1877e522ac\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:38:49.538131 env[1566]: time="2023-10-02T19:38:49.538069994Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-89w6j,Uid:c0f72afa-349b-4534-80fb-55a6b1bf7243,Namespace:kube-system,Attempt:0,} returns sandbox id \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\"" Oct 2 19:38:49.545882 env[1566]: time="2023-10-02T19:38:49.545815721Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:38:49.559335 env[1566]: time="2023-10-02T19:38:49.559280019Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-scmwl,Uid:34148176-92a1-42fe-9ad2-7fb35bd495ad,Namespace:kube-system,Attempt:0,} returns sandbox id \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\"" Oct 2 19:38:49.579912 env[1566]: time="2023-10-02T19:38:49.579825065Z" level=info msg="CreateContainer within sandbox \"a9fb2e1291d7bce20c1821a29a47098008dda4779020f2114ff14d1877e522ac\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"4b25f06c715f98829d40e6ed6ae20c9c7ef26372f99b39238ab849e304b2ae57\"" Oct 2 19:38:49.581039 env[1566]: time="2023-10-02T19:38:49.580976978Z" level=info msg="StartContainer for \"4b25f06c715f98829d40e6ed6ae20c9c7ef26372f99b39238ab849e304b2ae57\"" Oct 2 19:38:49.629035 systemd[1]: Started cri-containerd-4b25f06c715f98829d40e6ed6ae20c9c7ef26372f99b39238ab849e304b2ae57.scope. Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2845 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323566303663373135663938383239643430653665643661653230 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit: BPF prog-id=127 op=LOAD Oct 2 19:38:49.691000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2845 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323566303663373135663938383239643430653665643661653230 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.691000 audit: BPF prog-id=128 op=LOAD Oct 2 19:38:49.691000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2845 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323566303663373135663938383239643430653665643661653230 Oct 2 19:38:49.698000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:38:49.698000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:38:49.698000 audit: BPF prog-id=129 op=LOAD Oct 2 19:38:49.698000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2845 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462323566303663373135663938383239643430653665643661653230 Oct 2 19:38:49.737277 env[1566]: time="2023-10-02T19:38:49.737208198Z" level=info msg="StartContainer for \"4b25f06c715f98829d40e6ed6ae20c9c7ef26372f99b39238ab849e304b2ae57\" returns successfully" Oct 2 19:38:49.936000 audit[3019]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3019 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.936000 audit[3019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe4312350 a2=0 a3=ffffa8a096c0 items=0 ppid=2980 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.936000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:38:49.943000 audit[3020]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=3020 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.943000 audit[3020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffbdccdd0 a2=0 a3=ffff959f46c0 items=0 ppid=2980 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.943000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:38:49.962000 audit[3021]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=3021 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.962000 audit[3021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc5f07bf0 a2=0 a3=ffff9285c6c0 items=0 ppid=2980 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.962000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:38:49.969000 audit[3022]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=3022 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.969000 audit[3022]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1be1e40 a2=0 a3=ffffb4cab6c0 items=0 ppid=2980 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:38:49.982000 audit[3023]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=3023 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:49.982000 audit[3023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffadb9aa0 a2=0 a3=ffff8663d6c0 items=0 ppid=2980 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.982000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:38:49.982000 audit[3024]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3024 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:49.982000 audit[3024]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd4c1ca00 a2=0 a3=ffffb80876c0 items=0 ppid=2980 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:49.982000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:38:50.041000 audit[3025]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.041000 audit[3025]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd56b3950 a2=0 a3=ffffb74966c0 items=0 ppid=2980 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:38:50.059000 audit[3027]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3027 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.059000 audit[3027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff3b5e620 a2=0 a3=ffffb42b76c0 items=0 ppid=2980 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:38:50.073000 audit[3030]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.073000 audit[3030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff81d4600 a2=0 a3=ffff986fe6c0 items=0 ppid=2980 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.073000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:38:50.078000 audit[3031]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.078000 audit[3031]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff64af3d0 a2=0 a3=ffffae9766c0 items=0 ppid=2980 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:38:50.087000 audit[3033]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3033 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.087000 audit[3033]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffd912940 a2=0 a3=ffffafc8e6c0 items=0 ppid=2980 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:38:50.094000 audit[3034]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.094000 audit[3034]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe05fa3e0 a2=0 a3=ffffa9c196c0 items=0 ppid=2980 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:38:50.104000 audit[3036]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.104000 audit[3036]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd6103c30 a2=0 a3=ffffb2f9b6c0 items=0 ppid=2980 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.104000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:38:50.117000 audit[3039]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3039 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.117000 audit[3039]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcdbf0b50 a2=0 a3=ffffbebb76c0 items=0 ppid=2980 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:38:50.121000 audit[3040]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.121000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1bcb9f0 a2=0 a3=ffff940fa6c0 items=0 ppid=2980 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.121000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:38:50.131000 audit[3042]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.131000 audit[3042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe5e4a790 a2=0 a3=ffffaf2fc6c0 items=0 ppid=2980 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.131000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:38:50.135000 audit[3043]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3043 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.135000 audit[3043]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffc112d50 a2=0 a3=ffffa0b6a6c0 items=0 ppid=2980 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.135000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:38:50.145000 audit[3045]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.145000 audit[3045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff10eb1d0 a2=0 a3=ffff8b6ef6c0 items=0 ppid=2980 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.145000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:50.170000 audit[3048]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.170000 audit[3048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd968fea0 a2=0 a3=ffff9ef706c0 items=0 ppid=2980 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.170000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:50.184000 audit[3051]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.184000 audit[3051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd38401c0 a2=0 a3=ffff8da066c0 items=0 ppid=2980 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.184000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:38:50.189000 audit[3052]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.189000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcd4580d0 a2=0 a3=ffff96b7a6c0 items=0 ppid=2980 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.189000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:38:50.201000 audit[3054]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.201000 audit[3054]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd58e6f20 a2=0 a3=ffff8e6b16c0 items=0 ppid=2980 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.201000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:50.215000 audit[3057]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.215000 audit[3057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd6ff8890 a2=0 a3=ffffbc2b36c0 items=0 ppid=2980 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.215000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:50.238000 audit[3062]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.238000 audit[3062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd78f470 a2=0 a3=ffff877896c0 items=0 ppid=2980 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.238000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:38:50.247000 audit[3064]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:38:50.247000 audit[3064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd0873370 a2=0 a3=ffff8cbed6c0 items=0 ppid=2980 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.247000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:38:50.275000 audit[3066]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3066 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:38:50.275000 audit[3066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe7a2cd80 a2=0 a3=ffff9f03f6c0 items=0 ppid=2980 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.275000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:50.292000 audit[3066]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3066 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:38:50.292000 audit[3066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffe7a2cd80 a2=0 a3=ffff9f03f6c0 items=0 ppid=2980 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.292000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:50.301000 audit[3073]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.301000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd702b1e0 a2=0 a3=ffff936526c0 items=0 ppid=2980 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.301000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:38:50.312000 audit[3075]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3075 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.312000 audit[3075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff3eb34e0 a2=0 a3=ffff9793e6c0 items=0 ppid=2980 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.312000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:38:50.326000 audit[3078]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3078 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.326000 audit[3078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcbe8ccb0 a2=0 a3=ffffb00456c0 items=0 ppid=2980 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.326000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:38:50.330000 audit[3079]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.330000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5f68720 a2=0 a3=ffffa1d226c0 items=0 ppid=2980 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.330000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:38:50.341000 audit[3081]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3081 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.341000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd0221e90 a2=0 a3=ffff9ee8c6c0 items=0 ppid=2980 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.341000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:38:50.346000 audit[3082]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3082 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.346000 audit[3082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9db7730 a2=0 a3=ffffb67456c0 items=0 ppid=2980 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.346000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:38:50.355000 audit[3084]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3084 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.355000 audit[3084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffde0358d0 a2=0 a3=ffffbdf056c0 items=0 ppid=2980 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.355000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:38:50.371000 audit[3087]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3087 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.371000 audit[3087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffffe7ef140 a2=0 a3=ffff99c2e6c0 items=0 ppid=2980 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.371000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:38:50.375000 audit[3088]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.375000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcbbb5120 a2=0 a3=ffffaeb0c6c0 items=0 ppid=2980 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.375000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:38:50.385000 audit[3090]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3090 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.385000 audit[3090]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd37cf130 a2=0 a3=ffff963446c0 items=0 ppid=2980 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.385000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:38:50.390000 audit[3091]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3091 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.390000 audit[3091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd2b05620 a2=0 a3=ffff9ea6f6c0 items=0 ppid=2980 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:38:50.404000 audit[3093]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3093 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.404000 audit[3093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff142b3c0 a2=0 a3=ffff862086c0 items=0 ppid=2980 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.404000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:38:50.424000 audit[3096]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.424000 audit[3096]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff7656f90 a2=0 a3=ffffb972f6c0 items=0 ppid=2980 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.424000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:38:50.441000 audit[3099]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3099 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.441000 audit[3099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffcfddee0 a2=0 a3=ffff9db606c0 items=0 ppid=2980 pid=3099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:38:50.445000 audit[3100]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3100 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.445000 audit[3100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcd1c33b0 a2=0 a3=ffffacade6c0 items=0 ppid=2980 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.445000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:38:50.455000 audit[3102]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.455000 audit[3102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd35346d0 a2=0 a3=ffffb57ab6c0 items=0 ppid=2980 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.455000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:50.472000 audit[3105]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.472000 audit[3105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe75f4100 a2=0 a3=ffff966aa6c0 items=0 ppid=2980 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.472000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:38:50.480000 audit[3106]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.480000 audit[3106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff375c2d0 a2=0 a3=ffffbd45c6c0 items=0 ppid=2980 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.480000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:38:50.494000 audit[3108]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.494000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc46cb090 a2=0 a3=ffffb99646c0 items=0 ppid=2980 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.494000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:50.513000 audit[3111]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=3111 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.513000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe2576190 a2=0 a3=ffffa5f2f6c0 items=0 ppid=2980 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.513000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:38:50.518000 audit[3112]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=3112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.518000 audit[3112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe4abaf70 a2=0 a3=ffff85e7a6c0 items=0 ppid=2980 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:38:50.527000 audit[3114]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=3114 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:38:50.527000 audit[3114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffedb3df30 a2=0 a3=ffff951606c0 items=0 ppid=2980 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.527000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:38:50.538000 audit[3116]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:38:50.538000 audit[3116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffcf62a570 a2=0 a3=ffffbc41c6c0 items=0 ppid=2980 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.538000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:50.540000 audit[3116]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:38:50.540000 audit[3116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffcf62a570 a2=0 a3=ffffbc41c6c0 items=0 ppid=2980 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:50.540000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:38:54.906522 kubelet[2768]: I1002 19:38:54.906470 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-xxz9j" podStartSLOduration=7.906418338 podCreationTimestamp="2023-10-02 19:38:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:38:49.981039999 +0000 UTC m=+15.557213006" watchObservedRunningTime="2023-10-02 19:38:54.906418338 +0000 UTC m=+20.482591333" Oct 2 19:38:57.198031 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount448443080.mount: Deactivated successfully. Oct 2 19:39:01.558146 env[1566]: time="2023-10-02T19:39:01.558079447Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:01.594323 env[1566]: time="2023-10-02T19:39:01.594250185Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:01.619328 env[1566]: time="2023-10-02T19:39:01.619145004Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:01.621402 env[1566]: time="2023-10-02T19:39:01.621303609Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:39:01.627333 env[1566]: time="2023-10-02T19:39:01.625720096Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:39:01.628226 env[1566]: time="2023-10-02T19:39:01.628040485Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:39:01.716563 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3704472169.mount: Deactivated successfully. Oct 2 19:39:01.753869 env[1566]: time="2023-10-02T19:39:01.753642582Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\"" Oct 2 19:39:01.759198 env[1566]: time="2023-10-02T19:39:01.759109259Z" level=info msg="StartContainer for \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\"" Oct 2 19:39:01.809621 systemd[1]: Started cri-containerd-a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a.scope. Oct 2 19:39:01.853390 systemd[1]: cri-containerd-a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a.scope: Deactivated successfully. Oct 2 19:39:02.448060 env[1566]: time="2023-10-02T19:39:02.447988467Z" level=info msg="shim disconnected" id=a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a Oct 2 19:39:02.448402 env[1566]: time="2023-10-02T19:39:02.448365758Z" level=warning msg="cleaning up after shim disconnected" id=a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a namespace=k8s.io Oct 2 19:39:02.448530 env[1566]: time="2023-10-02T19:39:02.448500422Z" level=info msg="cleaning up dead shim" Oct 2 19:39:02.482411 env[1566]: time="2023-10-02T19:39:02.482341293Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3143 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:02Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:02.483345 env[1566]: time="2023-10-02T19:39:02.483185792Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:39:02.484088 env[1566]: time="2023-10-02T19:39:02.484026535Z" level=error msg="Failed to pipe stderr of container \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\"" error="reading from a closed fifo" Oct 2 19:39:02.484292 env[1566]: time="2023-10-02T19:39:02.484168195Z" level=error msg="Failed to pipe stdout of container \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\"" error="reading from a closed fifo" Oct 2 19:39:02.490054 env[1566]: time="2023-10-02T19:39:02.489952668Z" level=error msg="StartContainer for \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:02.490890 kubelet[2768]: E1002 19:39:02.490452 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a" Oct 2 19:39:02.490890 kubelet[2768]: E1002 19:39:02.490599 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:02.490890 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:02.490890 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:39:02.491628 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fgv4l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:02.491822 kubelet[2768]: E1002 19:39:02.490663 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:02.709796 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a-rootfs.mount: Deactivated successfully. Oct 2 19:39:03.022856 env[1566]: time="2023-10-02T19:39:03.019995122Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:39:03.079911 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2462271782.mount: Deactivated successfully. Oct 2 19:39:03.120723 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2645704476.mount: Deactivated successfully. Oct 2 19:39:03.146900 env[1566]: time="2023-10-02T19:39:03.146835818Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\"" Oct 2 19:39:03.150484 env[1566]: time="2023-10-02T19:39:03.150425662Z" level=info msg="StartContainer for \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\"" Oct 2 19:39:03.198516 systemd[1]: Started cri-containerd-d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002.scope. Oct 2 19:39:03.257265 systemd[1]: cri-containerd-d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002.scope: Deactivated successfully. Oct 2 19:39:03.316355 env[1566]: time="2023-10-02T19:39:03.316112569Z" level=info msg="shim disconnected" id=d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002 Oct 2 19:39:03.316355 env[1566]: time="2023-10-02T19:39:03.316274221Z" level=warning msg="cleaning up after shim disconnected" id=d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002 namespace=k8s.io Oct 2 19:39:03.316355 env[1566]: time="2023-10-02T19:39:03.316297825Z" level=info msg="cleaning up dead shim" Oct 2 19:39:03.360404 env[1566]: time="2023-10-02T19:39:03.360275111Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3178 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:03.360986 env[1566]: time="2023-10-02T19:39:03.360899158Z" level=error msg="copy shim log" error="read /proc/self/fd/96: file already closed" Oct 2 19:39:03.361274 env[1566]: time="2023-10-02T19:39:03.361215046Z" level=error msg="Failed to pipe stdout of container \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\"" error="reading from a closed fifo" Oct 2 19:39:03.361575 env[1566]: time="2023-10-02T19:39:03.361528305Z" level=error msg="Failed to pipe stderr of container \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\"" error="reading from a closed fifo" Oct 2 19:39:03.367085 env[1566]: time="2023-10-02T19:39:03.367003947Z" level=error msg="StartContainer for \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:03.367710 kubelet[2768]: E1002 19:39:03.367539 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002" Oct 2 19:39:03.368050 kubelet[2768]: E1002 19:39:03.367889 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:03.368050 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:03.368050 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:39:03.368262 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fgv4l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:03.368262 kubelet[2768]: E1002 19:39:03.367973 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:04.008111 kubelet[2768]: I1002 19:39:04.008071 2768 scope.go:115] "RemoveContainer" containerID="a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a" Oct 2 19:39:04.011283 kubelet[2768]: I1002 19:39:04.011243 2768 scope.go:115] "RemoveContainer" containerID="a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a" Oct 2 19:39:04.023024 env[1566]: time="2023-10-02T19:39:04.022971250Z" level=info msg="RemoveContainer for \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\"" Oct 2 19:39:04.033451 env[1566]: time="2023-10-02T19:39:04.033391919Z" level=info msg="RemoveContainer for \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\" returns successfully" Oct 2 19:39:04.034155 env[1566]: time="2023-10-02T19:39:04.034102690Z" level=info msg="RemoveContainer for \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\"" Oct 2 19:39:04.034367 env[1566]: time="2023-10-02T19:39:04.034330630Z" level=info msg="RemoveContainer for \"a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a\" returns successfully" Oct 2 19:39:04.035464 kubelet[2768]: E1002 19:39:04.035141 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:04.212497 env[1566]: time="2023-10-02T19:39:04.212439588Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:04.215461 env[1566]: time="2023-10-02T19:39:04.215407053Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:04.218810 env[1566]: time="2023-10-02T19:39:04.218730857Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:39:04.220544 env[1566]: time="2023-10-02T19:39:04.220475272Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:39:04.228545 env[1566]: time="2023-10-02T19:39:04.228456691Z" level=info msg="CreateContainer within sandbox \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:39:04.248861 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1558934178.mount: Deactivated successfully. Oct 2 19:39:04.263608 env[1566]: time="2023-10-02T19:39:04.262757443Z" level=info msg="CreateContainer within sandbox \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\"" Oct 2 19:39:04.265358 env[1566]: time="2023-10-02T19:39:04.265287388Z" level=info msg="StartContainer for \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\"" Oct 2 19:39:04.312588 systemd[1]: Started cri-containerd-a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726.scope. Oct 2 19:39:04.369817 kernel: kauditd_printk_skb: 364 callbacks suppressed Oct 2 19:39:04.369965 kernel: audit: type=1400 audit(1696275544.365:989): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384997 kernel: audit: type=1400 audit(1696275544.365:990): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.393557 kernel: audit: type=1400 audit(1696275544.365:991): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.402396 kernel: audit: type=1400 audit(1696275544.365:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.415199 kernel: audit: type=1400 audit(1696275544.365:993): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.423268 kernel: audit: type=1400 audit(1696275544.365:994): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.431887 kernel: audit: type=1400 audit(1696275544.365:995): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.440088 kernel: audit: type=1400 audit(1696275544.365:996): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.448253 kernel: audit: type=1400 audit(1696275544.365:997): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.456416 kernel: audit: type=1400 audit(1696275544.368:998): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit: BPF prog-id=130 op=LOAD Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2872 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:04.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326134373966313161376237363965353338343631626132306566 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2872 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:04.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326134373966313161376237363965353338343631626132306566 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.368000 audit: BPF prog-id=131 op=LOAD Oct 2 19:39:04.368000 audit[3199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2872 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:04.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326134373966313161376237363965353338343631626132306566 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.376000 audit: BPF prog-id=132 op=LOAD Oct 2 19:39:04.376000 audit[3199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2872 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:04.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326134373966313161376237363965353338343631626132306566 Oct 2 19:39:04.383000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:39:04.384000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { perfmon } for pid=3199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit[3199]: AVC avc: denied { bpf } for pid=3199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:39:04.384000 audit: BPF prog-id=133 op=LOAD Oct 2 19:39:04.384000 audit[3199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2872 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:04.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137326134373966313161376237363965353338343631626132306566 Oct 2 19:39:04.467782 env[1566]: time="2023-10-02T19:39:04.467712796Z" level=info msg="StartContainer for \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\" returns successfully" Oct 2 19:39:04.544000 audit[3210]: AVC avc: denied { map_create } for pid=3210 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c948 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c202,c948 tclass=bpf permissive=0 Oct 2 19:39:04.544000 audit[3210]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400068f768 a2=48 a3=0 items=0 ppid=2872 pid=3210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c202,c948 key=(null) Oct 2 19:39:04.544000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:39:05.022882 kubelet[2768]: E1002 19:39:05.022845 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:05.316237 kubelet[2768]: I1002 19:39:05.316076 2768 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-scmwl" podStartSLOduration=2.656986904 podCreationTimestamp="2023-10-02 19:38:48 +0000 UTC" firstStartedPulling="2023-10-02 19:38:49.561918691 +0000 UTC m=+15.138091686" lastFinishedPulling="2023-10-02 19:39:04.220949823 +0000 UTC m=+29.797122842" observedRunningTime="2023-10-02 19:39:05.203061885 +0000 UTC m=+30.779234880" watchObservedRunningTime="2023-10-02 19:39:05.31601806 +0000 UTC m=+30.892191067" Oct 2 19:39:05.556319 kubelet[2768]: W1002 19:39:05.556260 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc0f72afa_349b_4534_80fb_55a6b1bf7243.slice/cri-containerd-a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a.scope WatchSource:0}: container "a56e47d85ab153f7f252dff3e105ba9cbee7b4b3804b53521956884bb19c1d6a" in namespace "k8s.io": not found Oct 2 19:39:08.677883 kubelet[2768]: W1002 19:39:08.676933 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc0f72afa_349b_4534_80fb_55a6b1bf7243.slice/cri-containerd-d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002.scope WatchSource:0}: task d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002 not found: not found Oct 2 19:39:16.892711 env[1566]: time="2023-10-02T19:39:16.892629761Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:39:16.912434 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3252503009.mount: Deactivated successfully. Oct 2 19:39:16.926253 env[1566]: time="2023-10-02T19:39:16.926181550Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\"" Oct 2 19:39:16.927082 env[1566]: time="2023-10-02T19:39:16.927023354Z" level=info msg="StartContainer for \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\"" Oct 2 19:39:16.977854 systemd[1]: Started cri-containerd-3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575.scope. Oct 2 19:39:17.017598 systemd[1]: cri-containerd-3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575.scope: Deactivated successfully. Oct 2 19:39:17.137035 env[1566]: time="2023-10-02T19:39:17.136929678Z" level=info msg="shim disconnected" id=3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575 Oct 2 19:39:17.137333 env[1566]: time="2023-10-02T19:39:17.137080795Z" level=warning msg="cleaning up after shim disconnected" id=3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575 namespace=k8s.io Oct 2 19:39:17.137333 env[1566]: time="2023-10-02T19:39:17.137106907Z" level=info msg="cleaning up dead shim" Oct 2 19:39:17.165408 env[1566]: time="2023-10-02T19:39:17.164540176Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3255 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:17Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:17.165586 env[1566]: time="2023-10-02T19:39:17.165452504Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 19:39:17.167824 env[1566]: time="2023-10-02T19:39:17.167756563Z" level=error msg="Failed to pipe stdout of container \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\"" error="reading from a closed fifo" Oct 2 19:39:17.168034 env[1566]: time="2023-10-02T19:39:17.167988296Z" level=error msg="Failed to pipe stderr of container \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\"" error="reading from a closed fifo" Oct 2 19:39:17.173359 env[1566]: time="2023-10-02T19:39:17.173289489Z" level=error msg="StartContainer for \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:17.173962 kubelet[2768]: E1002 19:39:17.173893 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575" Oct 2 19:39:17.177015 kubelet[2768]: E1002 19:39:17.176893 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:17.177015 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:17.177015 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:39:17.177015 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fgv4l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:17.177015 kubelet[2768]: E1002 19:39:17.176976 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:17.907165 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575-rootfs.mount: Deactivated successfully. Oct 2 19:39:18.057104 kubelet[2768]: I1002 19:39:18.057046 2768 scope.go:115] "RemoveContainer" containerID="d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002" Oct 2 19:39:18.057775 kubelet[2768]: I1002 19:39:18.057744 2768 scope.go:115] "RemoveContainer" containerID="d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002" Oct 2 19:39:18.060213 env[1566]: time="2023-10-02T19:39:18.060147908Z" level=info msg="RemoveContainer for \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\"" Oct 2 19:39:18.061430 env[1566]: time="2023-10-02T19:39:18.061305842Z" level=info msg="RemoveContainer for \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\"" Oct 2 19:39:18.062488 env[1566]: time="2023-10-02T19:39:18.061596135Z" level=error msg="RemoveContainer for \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\" failed" error="failed to set removing state for container \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\": container is already in removing state" Oct 2 19:39:18.062591 kubelet[2768]: E1002 19:39:18.062081 2768 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\": container is already in removing state" containerID="d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002" Oct 2 19:39:18.062591 kubelet[2768]: E1002 19:39:18.062163 2768 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002": container is already in removing state; Skipping pod "cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)" Oct 2 19:39:18.062922 kubelet[2768]: E1002 19:39:18.062865 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:18.068932 env[1566]: time="2023-10-02T19:39:18.068832480Z" level=info msg="RemoveContainer for \"d6218ea5d7eae3c2826fecf29015dca1b0d4655b54175cc8adce63f828324002\" returns successfully" Oct 2 19:39:20.243415 kubelet[2768]: W1002 19:39:20.243344 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc0f72afa_349b_4534_80fb_55a6b1bf7243.slice/cri-containerd-3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575.scope WatchSource:0}: task 3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575 not found: not found Oct 2 19:39:28.233753 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:39:28.233939 kernel: audit: type=1130 audit(1696275568.226:1008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.22:22-139.178.89.65:43572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:28.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.22:22-139.178.89.65:43572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:28.227743 systemd[1]: Started sshd@7-172.31.25.22:22-139.178.89.65:43572.service. Oct 2 19:39:28.415000 audit[3274]: USER_ACCT pid=3274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:28.417428 sshd[3274]: Accepted publickey for core from 139.178.89.65 port 43572 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:28.429732 kernel: audit: type=1101 audit(1696275568.415:1009): pid=3274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:28.428000 audit[3274]: CRED_ACQ pid=3274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:28.431112 sshd[3274]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:28.447959 kernel: audit: type=1103 audit(1696275568.428:1010): pid=3274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:28.448101 kernel: audit: type=1006 audit(1696275568.428:1011): pid=3274 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:39:28.448175 kernel: audit: type=1300 audit(1696275568.428:1011): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc89b6c80 a2=3 a3=1 items=0 ppid=1 pid=3274 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:28.428000 audit[3274]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc89b6c80 a2=3 a3=1 items=0 ppid=1 pid=3274 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:28.447012 systemd[1]: Started session-8.scope. Oct 2 19:39:28.450695 systemd-logind[1562]: New session 8 of user core. Oct 2 19:39:28.428000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:28.463227 kernel: audit: type=1327 audit(1696275568.428:1011): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:28.437000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:28.474583 kernel: audit: type=1400 audit(1696275568.437:1012): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:28.437000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142e080 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:28.487498 kernel: audit: type=1300 audit(1696275568.437:1012): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142e080 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:28.437000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:28.498414 kernel: audit: type=1327 audit(1696275568.437:1012): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:28.437000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:28.508902 kernel: audit: type=1400 audit(1696275568.437:1013): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:28.437000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001543470 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:28.437000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:28.463000 audit[3274]: USER_START pid=3274 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:28.470000 audit[3276]: CRED_ACQ pid=3276 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:28.769644 sshd[3274]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:28.771000 audit[3274]: USER_END pid=3274 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:28.771000 audit[3274]: CRED_DISP pid=3274 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:28.777260 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:39:28.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.22:22-139.178.89.65:43572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:28.779185 systemd[1]: sshd@7-172.31.25.22:22-139.178.89.65:43572.service: Deactivated successfully. Oct 2 19:39:28.780445 systemd-logind[1562]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:39:28.785814 systemd-logind[1562]: Removed session 8. Oct 2 19:39:29.944000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.944000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40057f80a0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:39:29.944000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:29.944000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.944000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40085bdcb0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:39:29.944000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:29.955000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.955000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4008693890 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:39:29.955000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:29.955000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:29.955000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40086938c0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:39:29.955000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:30.033000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:30.033000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40086938f0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:39:30.033000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:30.062000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:30.062000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40055e8840 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:39:30.062000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:39:31.882246 kubelet[2768]: E1002 19:39:31.882187 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:35.127000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:35.130939 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:39:35.131084 kernel: audit: type=1400 audit(1696275575.127:1025): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:35.127000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142f600 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:35.153376 kernel: audit: type=1300 audit(1696275575.127:1025): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142f600 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:35.153518 kernel: audit: type=1327 audit(1696275575.127:1025): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:35.127000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:35.130000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:35.173775 kernel: audit: type=1400 audit(1696275575.130:1026): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:35.173912 kernel: audit: type=1300 audit(1696275575.130:1026): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400139cd40 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:35.130000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400139cd40 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:35.130000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:35.197119 kernel: audit: type=1327 audit(1696275575.130:1026): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:35.197257 kernel: audit: type=1400 audit(1696275575.130:1027): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:35.130000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:35.130000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400139cd60 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:35.219706 kernel: audit: type=1300 audit(1696275575.130:1027): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400139cd60 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:35.130000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:35.230709 kernel: audit: type=1327 audit(1696275575.130:1027): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:35.230857 kernel: audit: type=1400 audit(1696275575.130:1028): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:35.130000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:35.130000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400139ce80 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:39:35.130000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:38.804242 systemd[1]: Started sshd@8-172.31.25.22:22-139.178.89.65:38028.service. Oct 2 19:39:38.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.22:22-139.178.89.65:38028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:38.986000 audit[3289]: USER_ACCT pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:38.988792 sshd[3289]: Accepted publickey for core from 139.178.89.65 port 38028 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:38.989000 audit[3289]: CRED_ACQ pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:38.990000 audit[3289]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe119b6c0 a2=3 a3=1 items=0 ppid=1 pid=3289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:38.990000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:38.993539 sshd[3289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:39.003753 systemd-logind[1562]: New session 9 of user core. Oct 2 19:39:39.004115 systemd[1]: Started session-9.scope. Oct 2 19:39:39.013000 audit[3289]: USER_START pid=3289 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:39.020000 audit[3291]: CRED_ACQ pid=3291 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:39.299055 sshd[3289]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:39.300000 audit[3289]: USER_END pid=3289 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:39.301000 audit[3289]: CRED_DISP pid=3289 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:39.306253 systemd-logind[1562]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:39:39.306584 systemd[1]: sshd@8-172.31.25.22:22-139.178.89.65:38028.service: Deactivated successfully. Oct 2 19:39:39.308103 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:39:39.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.22:22-139.178.89.65:38028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:39.310351 systemd-logind[1562]: Removed session 9. Oct 2 19:39:45.886480 env[1566]: time="2023-10-02T19:39:45.886106785Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:39:45.907559 env[1566]: time="2023-10-02T19:39:45.907360777Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\"" Oct 2 19:39:45.911206 env[1566]: time="2023-10-02T19:39:45.908561524Z" level=info msg="StartContainer for \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\"" Oct 2 19:39:45.961764 systemd[1]: Started cri-containerd-a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c.scope. Oct 2 19:39:46.004808 systemd[1]: cri-containerd-a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c.scope: Deactivated successfully. Oct 2 19:39:46.018876 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c-rootfs.mount: Deactivated successfully. Oct 2 19:39:46.037705 env[1566]: time="2023-10-02T19:39:46.037344542Z" level=info msg="shim disconnected" id=a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c Oct 2 19:39:46.037985 env[1566]: time="2023-10-02T19:39:46.037837839Z" level=warning msg="cleaning up after shim disconnected" id=a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c namespace=k8s.io Oct 2 19:39:46.038261 env[1566]: time="2023-10-02T19:39:46.037974783Z" level=info msg="cleaning up dead shim" Oct 2 19:39:46.072741 env[1566]: time="2023-10-02T19:39:46.072631844Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3325 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:46.073241 env[1566]: time="2023-10-02T19:39:46.073150761Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:39:46.073619 env[1566]: time="2023-10-02T19:39:46.073554430Z" level=error msg="Failed to pipe stdout of container \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\"" error="reading from a closed fifo" Oct 2 19:39:46.073769 env[1566]: time="2023-10-02T19:39:46.073718267Z" level=error msg="Failed to pipe stderr of container \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\"" error="reading from a closed fifo" Oct 2 19:39:46.076257 env[1566]: time="2023-10-02T19:39:46.076184464Z" level=error msg="StartContainer for \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:46.076571 kubelet[2768]: E1002 19:39:46.076522 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c" Oct 2 19:39:46.077451 kubelet[2768]: E1002 19:39:46.076705 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:46.077451 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:46.077451 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:39:46.077451 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fgv4l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:46.077451 kubelet[2768]: E1002 19:39:46.076766 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:46.130730 kubelet[2768]: I1002 19:39:46.130654 2768 scope.go:115] "RemoveContainer" containerID="3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575" Oct 2 19:39:46.131373 kubelet[2768]: I1002 19:39:46.131333 2768 scope.go:115] "RemoveContainer" containerID="3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575" Oct 2 19:39:46.138470 env[1566]: time="2023-10-02T19:39:46.138304810Z" level=info msg="RemoveContainer for \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\"" Oct 2 19:39:46.140384 env[1566]: time="2023-10-02T19:39:46.140325602Z" level=info msg="RemoveContainer for \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\"" Oct 2 19:39:46.140915 env[1566]: time="2023-10-02T19:39:46.140771547Z" level=error msg="RemoveContainer for \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\" failed" error="failed to set removing state for container \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\": container is already in removing state" Oct 2 19:39:46.141498 kubelet[2768]: E1002 19:39:46.141462 2768 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\": container is already in removing state" containerID="3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575" Oct 2 19:39:46.141810 kubelet[2768]: I1002 19:39:46.141783 2768 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575} err="rpc error: code = Unknown desc = failed to set removing state for container \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\": container is already in removing state" Oct 2 19:39:46.146008 env[1566]: time="2023-10-02T19:39:46.145926999Z" level=info msg="RemoveContainer for \"3caf46141799b9497847fc2ed9ef730bd4cb58face142367c0c62168e9b86575\" returns successfully" Oct 2 19:39:46.147940 kubelet[2768]: E1002 19:39:46.147322 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:49.142959 kubelet[2768]: W1002 19:39:49.142902 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc0f72afa_349b_4534_80fb_55a6b1bf7243.slice/cri-containerd-a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c.scope WatchSource:0}: task a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c not found: not found Oct 2 19:39:49.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.22:22-139.178.89.65:33186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:49.329515 systemd[1]: Started sshd@9-172.31.25.22:22-139.178.89.65:33186.service. Oct 2 19:39:49.332113 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:39:49.332186 kernel: audit: type=1130 audit(1696275589.328:1038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.22:22-139.178.89.65:33186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:49.517000 audit[3340]: USER_ACCT pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.522775 sshd[3340]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:49.525340 sshd[3340]: Accepted publickey for core from 139.178.89.65 port 33186 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:39:49.520000 audit[3340]: CRED_ACQ pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.540065 kernel: audit: type=1101 audit(1696275589.517:1039): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.540221 kernel: audit: type=1103 audit(1696275589.520:1040): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.546851 kernel: audit: type=1006 audit(1696275589.520:1041): pid=3340 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:39:49.520000 audit[3340]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccac0830 a2=3 a3=1 items=0 ppid=1 pid=3340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:49.560040 kernel: audit: type=1300 audit(1696275589.520:1041): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccac0830 a2=3 a3=1 items=0 ppid=1 pid=3340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:49.520000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:49.564104 kernel: audit: type=1327 audit(1696275589.520:1041): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:49.566983 systemd[1]: Started session-10.scope. Oct 2 19:39:49.568419 systemd-logind[1562]: New session 10 of user core. Oct 2 19:39:49.579000 audit[3340]: USER_START pid=3340 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.597000 audit[3342]: CRED_ACQ pid=3342 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.610177 kernel: audit: type=1105 audit(1696275589.579:1042): pid=3340 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.610356 kernel: audit: type=1103 audit(1696275589.597:1043): pid=3342 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.865588 sshd[3340]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:49.868000 audit[3340]: USER_END pid=3340 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.874135 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:39:49.875774 systemd[1]: sshd@9-172.31.25.22:22-139.178.89.65:33186.service: Deactivated successfully. Oct 2 19:39:49.868000 audit[3340]: CRED_DISP pid=3340 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.892463 kernel: audit: type=1106 audit(1696275589.868:1044): pid=3340 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.892614 kernel: audit: type=1104 audit(1696275589.868:1045): pid=3340 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:39:49.892639 systemd-logind[1562]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:39:49.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.22:22-139.178.89.65:33186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:49.894355 systemd-logind[1562]: Removed session 10. Oct 2 19:39:57.883942 kubelet[2768]: E1002 19:39:57.883891 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:39:59.896961 systemd[1]: Started sshd@10-172.31.25.22:22-139.178.89.65:44722.service. Oct 2 19:39:59.905074 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:39:59.905138 kernel: audit: type=1130 audit(1696275599.895:1047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.22:22-139.178.89.65:44722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:59.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.22:22-139.178.89.65:44722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:00.084000 audit[3355]: USER_ACCT pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.086480 sshd[3355]: Accepted publickey for core from 139.178.89.65 port 44722 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:00.098832 kernel: audit: type=1101 audit(1696275600.084:1048): pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.097000 audit[3355]: CRED_ACQ pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.100042 sshd[3355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:00.115648 kernel: audit: type=1103 audit(1696275600.097:1049): pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.115800 kernel: audit: type=1006 audit(1696275600.097:1050): pid=3355 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:40:00.097000 audit[3355]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1a3fa30 a2=3 a3=1 items=0 ppid=1 pid=3355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:00.126720 kernel: audit: type=1300 audit(1696275600.097:1050): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1a3fa30 a2=3 a3=1 items=0 ppid=1 pid=3355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:00.097000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:00.130536 kernel: audit: type=1327 audit(1696275600.097:1050): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:00.137051 systemd-logind[1562]: New session 11 of user core. Oct 2 19:40:00.140052 systemd[1]: Started session-11.scope. Oct 2 19:40:00.148000 audit[3355]: USER_START pid=3355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.156000 audit[3357]: CRED_ACQ pid=3357 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.171608 kernel: audit: type=1105 audit(1696275600.148:1051): pid=3355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.171785 kernel: audit: type=1103 audit(1696275600.156:1052): pid=3357 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.452376 sshd[3355]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:00.452000 audit[3355]: USER_END pid=3355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.459387 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:40:00.460897 systemd[1]: sshd@10-172.31.25.22:22-139.178.89.65:44722.service: Deactivated successfully. Oct 2 19:40:00.452000 audit[3355]: CRED_DISP pid=3355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.475624 kernel: audit: type=1106 audit(1696275600.452:1053): pid=3355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.475769 kernel: audit: type=1104 audit(1696275600.452:1054): pid=3355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:00.475690 systemd-logind[1562]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:40:00.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.22:22-139.178.89.65:44722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:00.477313 systemd-logind[1562]: Removed session 11. Oct 2 19:40:10.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.22:22-139.178.89.65:39024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:10.483330 systemd[1]: Started sshd@11-172.31.25.22:22-139.178.89.65:39024.service. Oct 2 19:40:10.485913 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:10.486041 kernel: audit: type=1130 audit(1696275610.482:1056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.22:22-139.178.89.65:39024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:10.662000 audit[3368]: USER_ACCT pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:10.663243 sshd[3368]: Accepted publickey for core from 139.178.89.65 port 39024 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:10.674836 kernel: audit: type=1101 audit(1696275610.662:1057): pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:10.676607 sshd[3368]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:10.675000 audit[3368]: CRED_ACQ pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:10.696161 kernel: audit: type=1103 audit(1696275610.675:1058): pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:10.696332 kernel: audit: type=1006 audit(1696275610.675:1059): pid=3368 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:40:10.675000 audit[3368]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4104320 a2=3 a3=1 items=0 ppid=1 pid=3368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:10.707022 kernel: audit: type=1300 audit(1696275610.675:1059): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4104320 a2=3 a3=1 items=0 ppid=1 pid=3368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:10.675000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:10.710814 kernel: audit: type=1327 audit(1696275610.675:1059): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:10.715825 systemd-logind[1562]: New session 12 of user core. Oct 2 19:40:10.716375 systemd[1]: Started session-12.scope. Oct 2 19:40:10.725000 audit[3368]: USER_START pid=3368 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:10.738867 kernel: audit: type=1105 audit(1696275610.725:1060): pid=3368 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:10.738999 kernel: audit: type=1103 audit(1696275610.737:1061): pid=3370 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:10.737000 audit[3370]: CRED_ACQ pid=3370 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:11.018966 sshd[3368]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:11.020000 audit[3368]: USER_END pid=3368 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:11.026937 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:40:11.028396 systemd[1]: sshd@11-172.31.25.22:22-139.178.89.65:39024.service: Deactivated successfully. Oct 2 19:40:11.034654 systemd-logind[1562]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:40:11.023000 audit[3368]: CRED_DISP pid=3368 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:11.045357 kernel: audit: type=1106 audit(1696275611.020:1062): pid=3368 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:11.045439 kernel: audit: type=1104 audit(1696275611.023:1063): pid=3368 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:11.045546 systemd-logind[1562]: Removed session 12. Oct 2 19:40:11.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.22:22-139.178.89.65:39024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:12.882623 kubelet[2768]: E1002 19:40:12.882582 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:40:21.049061 systemd[1]: Started sshd@12-172.31.25.22:22-139.178.89.65:59536.service. Oct 2 19:40:21.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.22:22-139.178.89.65:59536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:21.051352 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:21.051449 kernel: audit: type=1130 audit(1696275621.048:1065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.22:22-139.178.89.65:59536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:21.233000 audit[3382]: USER_ACCT pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.234139 sshd[3382]: Accepted publickey for core from 139.178.89.65 port 59536 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:21.247759 kernel: audit: type=1101 audit(1696275621.233:1066): pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.247000 audit[3382]: CRED_ACQ pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.249069 sshd[3382]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:21.258569 systemd[1]: Started session-13.scope. Oct 2 19:40:21.260059 systemd-logind[1562]: New session 13 of user core. Oct 2 19:40:21.264138 kernel: audit: type=1103 audit(1696275621.247:1067): pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.264264 kernel: audit: type=1006 audit(1696275621.247:1068): pid=3382 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:40:21.247000 audit[3382]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc27a5020 a2=3 a3=1 items=0 ppid=1 pid=3382 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:21.275613 kernel: audit: type=1300 audit(1696275621.247:1068): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc27a5020 a2=3 a3=1 items=0 ppid=1 pid=3382 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:21.247000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:21.281727 kernel: audit: type=1327 audit(1696275621.247:1068): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:21.271000 audit[3382]: USER_START pid=3382 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.293709 kernel: audit: type=1105 audit(1696275621.271:1069): pid=3382 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.281000 audit[3384]: CRED_ACQ pid=3384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.303152 kernel: audit: type=1103 audit(1696275621.281:1070): pid=3384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.542292 sshd[3382]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:21.543000 audit[3382]: USER_END pid=3382 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.545000 audit[3382]: CRED_DISP pid=3382 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.556984 systemd[1]: sshd@12-172.31.25.22:22-139.178.89.65:59536.service: Deactivated successfully. Oct 2 19:40:21.566860 kernel: audit: type=1106 audit(1696275621.543:1071): pid=3382 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.567012 kernel: audit: type=1104 audit(1696275621.545:1072): pid=3382 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:21.558277 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:40:21.567717 systemd-logind[1562]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:40:21.569529 systemd-logind[1562]: Removed session 13. Oct 2 19:40:21.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.22:22-139.178.89.65:59536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:26.886781 env[1566]: time="2023-10-02T19:40:26.886713135Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:40:26.917121 env[1566]: time="2023-10-02T19:40:26.917043790Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\"" Oct 2 19:40:26.933429 env[1566]: time="2023-10-02T19:40:26.931968074Z" level=info msg="StartContainer for \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\"" Oct 2 19:40:26.988974 systemd[1]: Started cri-containerd-60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396.scope. Oct 2 19:40:27.036355 systemd[1]: cri-containerd-60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396.scope: Deactivated successfully. Oct 2 19:40:27.062644 env[1566]: time="2023-10-02T19:40:27.062574013Z" level=info msg="shim disconnected" id=60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396 Oct 2 19:40:27.063097 env[1566]: time="2023-10-02T19:40:27.063056258Z" level=warning msg="cleaning up after shim disconnected" id=60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396 namespace=k8s.io Oct 2 19:40:27.063222 env[1566]: time="2023-10-02T19:40:27.063195098Z" level=info msg="cleaning up dead shim" Oct 2 19:40:27.102964 env[1566]: time="2023-10-02T19:40:27.102893899Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:40:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3418 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:40:27Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:40:27.103634 env[1566]: time="2023-10-02T19:40:27.103557728Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:40:27.104208 env[1566]: time="2023-10-02T19:40:27.104154212Z" level=error msg="Failed to pipe stderr of container \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\"" error="reading from a closed fifo" Oct 2 19:40:27.104414 env[1566]: time="2023-10-02T19:40:27.104369672Z" level=error msg="Failed to pipe stdout of container \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\"" error="reading from a closed fifo" Oct 2 19:40:27.107310 env[1566]: time="2023-10-02T19:40:27.107106515Z" level=error msg="StartContainer for \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:40:27.107875 kubelet[2768]: E1002 19:40:27.107788 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396" Oct 2 19:40:27.108435 kubelet[2768]: E1002 19:40:27.108056 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:40:27.108435 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:40:27.108435 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:40:27.108435 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fgv4l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:40:27.108435 kubelet[2768]: E1002 19:40:27.108192 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:40:27.234386 kubelet[2768]: I1002 19:40:27.234333 2768 scope.go:115] "RemoveContainer" containerID="a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c" Oct 2 19:40:27.235210 kubelet[2768]: I1002 19:40:27.234891 2768 scope.go:115] "RemoveContainer" containerID="a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c" Oct 2 19:40:27.241432 env[1566]: time="2023-10-02T19:40:27.241367850Z" level=info msg="RemoveContainer for \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\"" Oct 2 19:40:27.242315 env[1566]: time="2023-10-02T19:40:27.242219490Z" level=info msg="RemoveContainer for \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\"" Oct 2 19:40:27.242497 env[1566]: time="2023-10-02T19:40:27.242438839Z" level=error msg="RemoveContainer for \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\" failed" error="failed to set removing state for container \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\": container is already in removing state" Oct 2 19:40:27.243070 kubelet[2768]: E1002 19:40:27.243039 2768 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\": container is already in removing state" containerID="a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c" Oct 2 19:40:27.243282 kubelet[2768]: E1002 19:40:27.243258 2768 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c": container is already in removing state; Skipping pod "cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)" Oct 2 19:40:27.244068 kubelet[2768]: E1002 19:40:27.244026 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:40:27.249938 env[1566]: time="2023-10-02T19:40:27.247602684Z" level=info msg="RemoveContainer for \"a65ec46513ac942a15310f430a2cfa975fadeab77e7f78ca73471a709f0e033c\" returns successfully" Oct 2 19:40:27.901842 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396-rootfs.mount: Deactivated successfully. Oct 2 19:40:28.438000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:28.441697 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:28.441807 kernel: audit: type=1400 audit(1696275628.438:1074): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:28.438000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:28.461165 kernel: audit: type=1400 audit(1696275628.438:1075): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:28.461312 kernel: audit: type=1300 audit(1696275628.438:1075): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002151e00 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:28.438000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002151e00 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:28.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:28.484073 kernel: audit: type=1327 audit(1696275628.438:1075): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:28.484197 kernel: audit: type=1300 audit(1696275628.438:1074): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001853d40 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:28.438000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001853d40 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:28.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:28.507064 kernel: audit: type=1327 audit(1696275628.438:1074): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:29.946000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.946000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.966224 kernel: audit: type=1400 audit(1696275629.946:1076): avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.966391 kernel: audit: type=1400 audit(1696275629.946:1077): avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.966553 kernel: audit: type=1300 audit(1696275629.946:1077): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d2d8f00 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:40:29.946000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d2d8f00 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:40:29.946000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:29.989309 kernel: audit: type=1327 audit(1696275629.946:1077): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:29.946000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4009d3c0f0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:40:29.946000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:29.957000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.957000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009d3c150 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:40:29.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:29.957000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:29.957000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009c6e840 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:40:29.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:30.034000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:30.034000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009d3c180 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:40:30.034000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:30.064000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:30.064000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d2d9100 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:40:30.064000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:40:30.169614 kubelet[2768]: W1002 19:40:30.169497 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc0f72afa_349b_4534_80fb_55a6b1bf7243.slice/cri-containerd-60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396.scope WatchSource:0}: task 60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396 not found: not found Oct 2 19:40:31.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.22:22-139.178.89.65:43178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:31.576016 systemd[1]: Started sshd@13-172.31.25.22:22-139.178.89.65:43178.service. Oct 2 19:40:31.760000 audit[3433]: USER_ACCT pid=3433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:31.761415 sshd[3433]: Accepted publickey for core from 139.178.89.65 port 43178 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:31.763000 audit[3433]: CRED_ACQ pid=3433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:31.764000 audit[3433]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd34ced0 a2=3 a3=1 items=0 ppid=1 pid=3433 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:31.764000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:31.765808 sshd[3433]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:31.775162 systemd[1]: Started session-14.scope. Oct 2 19:40:31.775934 systemd-logind[1562]: New session 14 of user core. Oct 2 19:40:31.785000 audit[3433]: USER_START pid=3433 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:31.792000 audit[3435]: CRED_ACQ pid=3435 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:32.070018 sshd[3433]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:32.071000 audit[3433]: USER_END pid=3433 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:32.071000 audit[3433]: CRED_DISP pid=3433 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:32.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.22:22-139.178.89.65:43178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:32.077145 systemd[1]: sshd@13-172.31.25.22:22-139.178.89.65:43178.service: Deactivated successfully. Oct 2 19:40:32.078470 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:40:32.078815 systemd-logind[1562]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:40:32.083813 systemd-logind[1562]: Removed session 14. Oct 2 19:40:34.653820 kubelet[2768]: E1002 19:40:34.653717 2768 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:40:35.081912 kubelet[2768]: E1002 19:40:35.081878 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:35.128000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:35.131374 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:40:35.131466 kernel: audit: type=1400 audit(1696275635.128:1091): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:35.128000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869740 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:35.153933 kernel: audit: type=1300 audit(1696275635.128:1091): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869740 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:35.154042 kernel: audit: type=1327 audit(1696275635.128:1091): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:35.128000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:35.132000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:35.174190 kernel: audit: type=1400 audit(1696275635.132:1092): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:35.174316 kernel: audit: type=1300 audit(1696275635.132:1092): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000250ec0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:35.132000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000250ec0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:35.132000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:35.197246 kernel: audit: type=1327 audit(1696275635.132:1092): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:35.197343 kernel: audit: type=1400 audit(1696275635.132:1093): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:35.132000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:35.132000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869780 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:35.219272 kernel: audit: type=1300 audit(1696275635.132:1093): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869780 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:35.219351 kernel: audit: type=1327 audit(1696275635.132:1093): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:35.132000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:35.133000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:35.239259 kernel: audit: type=1400 audit(1696275635.133:1094): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:35.133000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018698c0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:40:35.133000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:37.883562 kubelet[2768]: E1002 19:40:37.882337 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:40:40.083861 kubelet[2768]: E1002 19:40:40.083824 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:42.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.22:22-139.178.89.65:37250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:42.101882 systemd[1]: Started sshd@14-172.31.25.22:22-139.178.89.65:37250.service. Oct 2 19:40:42.105703 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:40:42.105821 kernel: audit: type=1130 audit(1696275642.101:1095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.22:22-139.178.89.65:37250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:42.280000 audit[3447]: USER_ACCT pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.281967 sshd[3447]: Accepted publickey for core from 139.178.89.65 port 37250 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:42.293786 kernel: audit: type=1101 audit(1696275642.280:1096): pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.293000 audit[3447]: CRED_ACQ pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.296043 sshd[3447]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:42.312462 kernel: audit: type=1103 audit(1696275642.293:1097): pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.312561 kernel: audit: type=1006 audit(1696275642.294:1098): pid=3447 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:40:42.312641 kernel: audit: type=1300 audit(1696275642.294:1098): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb5d8c90 a2=3 a3=1 items=0 ppid=1 pid=3447 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:42.294000 audit[3447]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb5d8c90 a2=3 a3=1 items=0 ppid=1 pid=3447 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:42.311701 systemd[1]: Started session-15.scope. Oct 2 19:40:42.315069 systemd-logind[1562]: New session 15 of user core. Oct 2 19:40:42.328125 kernel: audit: type=1327 audit(1696275642.294:1098): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:42.294000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:42.329000 audit[3447]: USER_START pid=3447 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.335000 audit[3449]: CRED_ACQ pid=3449 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.351850 kernel: audit: type=1105 audit(1696275642.329:1099): pid=3447 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.351954 kernel: audit: type=1103 audit(1696275642.335:1100): pid=3449 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.606293 sshd[3447]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:42.607000 audit[3447]: USER_END pid=3447 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.610899 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:40:42.612063 systemd[1]: sshd@14-172.31.25.22:22-139.178.89.65:37250.service: Deactivated successfully. Oct 2 19:40:42.620949 systemd-logind[1562]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:40:42.607000 audit[3447]: CRED_DISP pid=3447 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.631050 kernel: audit: type=1106 audit(1696275642.607:1101): pid=3447 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.631172 kernel: audit: type=1104 audit(1696275642.607:1102): pid=3447 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:42.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.22:22-139.178.89.65:37250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:42.631908 systemd-logind[1562]: Removed session 15. Oct 2 19:40:45.086130 kubelet[2768]: E1002 19:40:45.086098 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:50.088048 kubelet[2768]: E1002 19:40:50.087992 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:50.883219 kubelet[2768]: E1002 19:40:50.883165 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:40:52.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.22:22-139.178.89.65:34286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:52.634799 systemd[1]: Started sshd@15-172.31.25.22:22-139.178.89.65:34286.service. Oct 2 19:40:52.637151 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:52.637215 kernel: audit: type=1130 audit(1696275652.634:1104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.22:22-139.178.89.65:34286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:52.810000 audit[3462]: USER_ACCT pid=3462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:52.811868 sshd[3462]: Accepted publickey for core from 139.178.89.65 port 34286 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:40:52.823816 kernel: audit: type=1101 audit(1696275652.810:1105): pid=3462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:52.825247 sshd[3462]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:52.823000 audit[3462]: CRED_ACQ pid=3462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:52.835800 kernel: audit: type=1103 audit(1696275652.823:1106): pid=3462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:52.823000 audit[3462]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe95a1660 a2=3 a3=1 items=0 ppid=1 pid=3462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:52.853086 kernel: audit: type=1006 audit(1696275652.823:1107): pid=3462 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:40:52.853172 kernel: audit: type=1300 audit(1696275652.823:1107): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe95a1660 a2=3 a3=1 items=0 ppid=1 pid=3462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:52.823000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:52.857115 kernel: audit: type=1327 audit(1696275652.823:1107): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:52.861772 systemd-logind[1562]: New session 16 of user core. Oct 2 19:40:52.862937 systemd[1]: Started session-16.scope. Oct 2 19:40:52.872000 audit[3462]: USER_START pid=3462 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:52.887860 kernel: audit: type=1105 audit(1696275652.872:1108): pid=3462 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:52.888010 kernel: audit: type=1103 audit(1696275652.885:1109): pid=3464 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:52.885000 audit[3464]: CRED_ACQ pid=3464 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:53.156369 sshd[3462]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:53.158000 audit[3462]: USER_END pid=3462 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:53.162257 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:40:53.163691 systemd[1]: sshd@15-172.31.25.22:22-139.178.89.65:34286.service: Deactivated successfully. Oct 2 19:40:53.158000 audit[3462]: CRED_DISP pid=3462 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:53.179797 kernel: audit: type=1106 audit(1696275653.158:1110): pid=3462 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:53.179951 kernel: audit: type=1104 audit(1696275653.158:1111): pid=3462 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:40:53.179919 systemd-logind[1562]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:40:53.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.22:22-139.178.89.65:34286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:53.181751 systemd-logind[1562]: Removed session 16. Oct 2 19:40:55.089474 kubelet[2768]: E1002 19:40:55.089420 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:00.090416 kubelet[2768]: E1002 19:41:00.090380 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:03.190659 systemd[1]: Started sshd@16-172.31.25.22:22-139.178.89.65:46064.service. Oct 2 19:41:03.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.22:22-139.178.89.65:46064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:03.193849 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:03.193942 kernel: audit: type=1130 audit(1696275663.190:1113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.22:22-139.178.89.65:46064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:03.374000 audit[3475]: USER_ACCT pid=3475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.380075 sshd[3475]: Accepted publickey for core from 139.178.89.65 port 46064 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:03.386712 kernel: audit: type=1101 audit(1696275663.374:1114): pid=3475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.387000 audit[3475]: CRED_ACQ pid=3475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.388921 sshd[3475]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:03.404273 kernel: audit: type=1103 audit(1696275663.387:1115): pid=3475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.404391 kernel: audit: type=1006 audit(1696275663.387:1116): pid=3475 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:41:03.387000 audit[3475]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3ab85f0 a2=3 a3=1 items=0 ppid=1 pid=3475 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:03.409664 systemd[1]: Started session-17.scope. Oct 2 19:41:03.412165 systemd-logind[1562]: New session 17 of user core. Oct 2 19:41:03.415017 kernel: audit: type=1300 audit(1696275663.387:1116): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3ab85f0 a2=3 a3=1 items=0 ppid=1 pid=3475 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:03.387000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:03.418856 kernel: audit: type=1327 audit(1696275663.387:1116): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:03.424000 audit[3475]: USER_START pid=3475 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.437701 kernel: audit: type=1105 audit(1696275663.424:1117): pid=3475 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.437922 kernel: audit: type=1103 audit(1696275663.432:1118): pid=3477 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.432000 audit[3477]: CRED_ACQ pid=3477 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.705051 sshd[3475]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:03.706000 audit[3475]: USER_END pid=3475 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.711647 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:41:03.713177 systemd[1]: sshd@16-172.31.25.22:22-139.178.89.65:46064.service: Deactivated successfully. Oct 2 19:41:03.707000 audit[3475]: CRED_DISP pid=3475 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.729494 kernel: audit: type=1106 audit(1696275663.706:1119): pid=3475 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.729742 kernel: audit: type=1104 audit(1696275663.707:1120): pid=3475 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.22:22-139.178.89.65:46064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:03.720530 systemd-logind[1562]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:41:03.722085 systemd-logind[1562]: Removed session 17. Oct 2 19:41:03.741806 systemd[1]: Started sshd@17-172.31.25.22:22-139.178.89.65:46072.service. Oct 2 19:41:03.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.22:22-139.178.89.65:46072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:03.881899 kubelet[2768]: E1002 19:41:03.881819 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:41:03.918000 audit[3487]: USER_ACCT pid=3487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.919854 sshd[3487]: Accepted publickey for core from 139.178.89.65 port 46072 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:03.921000 audit[3487]: CRED_ACQ pid=3487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.922000 audit[3487]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe00d770 a2=3 a3=1 items=0 ppid=1 pid=3487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:03.922000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:03.923828 sshd[3487]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:03.932367 systemd-logind[1562]: New session 18 of user core. Oct 2 19:41:03.933355 systemd[1]: Started session-18.scope. Oct 2 19:41:03.943000 audit[3487]: USER_START pid=3487 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:03.950000 audit[3489]: CRED_ACQ pid=3489 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.092293 kubelet[2768]: E1002 19:41:05.092242 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:05.529845 sshd[3487]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:05.531000 audit[3487]: USER_END pid=3487 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.531000 audit[3487]: CRED_DISP pid=3487 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.536358 systemd-logind[1562]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:41:05.536781 systemd[1]: sshd@17-172.31.25.22:22-139.178.89.65:46072.service: Deactivated successfully. Oct 2 19:41:05.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.22:22-139.178.89.65:46072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:05.538245 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:41:05.541141 systemd-logind[1562]: Removed session 18. Oct 2 19:41:05.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.22:22-139.178.89.65:46084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:05.562461 systemd[1]: Started sshd@18-172.31.25.22:22-139.178.89.65:46084.service. Oct 2 19:41:05.742000 audit[3497]: USER_ACCT pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.743634 sshd[3497]: Accepted publickey for core from 139.178.89.65 port 46084 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:05.745000 audit[3497]: CRED_ACQ pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.745000 audit[3497]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe9f5280 a2=3 a3=1 items=0 ppid=1 pid=3497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:05.745000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:05.747384 sshd[3497]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:05.755762 systemd-logind[1562]: New session 19 of user core. Oct 2 19:41:05.756749 systemd[1]: Started session-19.scope. Oct 2 19:41:05.766000 audit[3497]: USER_START pid=3497 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:05.772000 audit[3499]: CRED_ACQ pid=3499 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:06.040808 sshd[3497]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:06.041000 audit[3497]: USER_END pid=3497 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:06.042000 audit[3497]: CRED_DISP pid=3497 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:06.047089 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:41:06.048292 systemd[1]: sshd@18-172.31.25.22:22-139.178.89.65:46084.service: Deactivated successfully. Oct 2 19:41:06.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.22:22-139.178.89.65:46084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:06.050102 systemd-logind[1562]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:41:06.052463 systemd-logind[1562]: Removed session 19. Oct 2 19:41:10.093276 kubelet[2768]: E1002 19:41:10.093201 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:15.094715 kubelet[2768]: E1002 19:41:15.094648 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:16.072898 systemd[1]: Started sshd@19-172.31.25.22:22-139.178.89.65:36724.service. Oct 2 19:41:16.076012 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:41:16.076064 kernel: audit: type=1130 audit(1696275676.072:1140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.22:22-139.178.89.65:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:16.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.22:22-139.178.89.65:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:16.253000 audit[3509]: USER_ACCT pid=3509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.254589 sshd[3509]: Accepted publickey for core from 139.178.89.65 port 36724 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:16.266726 kernel: audit: type=1101 audit(1696275676.253:1141): pid=3509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.266000 audit[3509]: CRED_ACQ pid=3509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.268423 sshd[3509]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:16.283354 kernel: audit: type=1103 audit(1696275676.266:1142): pid=3509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.283580 kernel: audit: type=1006 audit(1696275676.267:1143): pid=3509 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:41:16.267000 audit[3509]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0f2fe90 a2=3 a3=1 items=0 ppid=1 pid=3509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:16.294609 kernel: audit: type=1300 audit(1696275676.267:1143): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0f2fe90 a2=3 a3=1 items=0 ppid=1 pid=3509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:16.267000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:16.298729 kernel: audit: type=1327 audit(1696275676.267:1143): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:16.303927 systemd-logind[1562]: New session 20 of user core. Oct 2 19:41:16.304933 systemd[1]: Started session-20.scope. Oct 2 19:41:16.315000 audit[3509]: USER_START pid=3509 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.329710 kernel: audit: type=1105 audit(1696275676.315:1144): pid=3509 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.321000 audit[3511]: CRED_ACQ pid=3511 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.341741 kernel: audit: type=1103 audit(1696275676.321:1145): pid=3511 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.597626 sshd[3509]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:16.598000 audit[3509]: USER_END pid=3509 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.602461 systemd-logind[1562]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:41:16.604594 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:41:16.606804 systemd-logind[1562]: Removed session 20. Oct 2 19:41:16.608123 systemd[1]: sshd@19-172.31.25.22:22-139.178.89.65:36724.service: Deactivated successfully. Oct 2 19:41:16.598000 audit[3509]: CRED_DISP pid=3509 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.620196 kernel: audit: type=1106 audit(1696275676.598:1146): pid=3509 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.620266 kernel: audit: type=1104 audit(1696275676.598:1147): pid=3509 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:16.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.22:22-139.178.89.65:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:16.881891 kubelet[2768]: E1002 19:41:16.881744 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:41:20.096191 kubelet[2768]: E1002 19:41:20.096154 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:25.098338 kubelet[2768]: E1002 19:41:25.098263 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:26.626729 systemd[1]: Started sshd@20-172.31.25.22:22-139.178.89.65:41998.service. Oct 2 19:41:26.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.22:22-139.178.89.65:41998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:26.629649 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:26.629757 kernel: audit: type=1130 audit(1696275686.626:1149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.22:22-139.178.89.65:41998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:26.805000 audit[3522]: USER_ACCT pid=3522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:26.806311 sshd[3522]: Accepted publickey for core from 139.178.89.65 port 41998 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:26.818730 kernel: audit: type=1101 audit(1696275686.805:1150): pid=3522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:26.818000 audit[3522]: CRED_ACQ pid=3522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:26.828906 systemd[1]: Started session-21.scope. Oct 2 19:41:26.819777 sshd[3522]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:26.830790 systemd-logind[1562]: New session 21 of user core. Oct 2 19:41:26.837403 kernel: audit: type=1103 audit(1696275686.818:1151): pid=3522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:26.837555 kernel: audit: type=1006 audit(1696275686.818:1152): pid=3522 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:41:26.818000 audit[3522]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6564300 a2=3 a3=1 items=0 ppid=1 pid=3522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:26.848630 kernel: audit: type=1300 audit(1696275686.818:1152): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6564300 a2=3 a3=1 items=0 ppid=1 pid=3522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:26.818000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:26.852757 kernel: audit: type=1327 audit(1696275686.818:1152): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:26.852914 kernel: audit: type=1105 audit(1696275686.840:1153): pid=3522 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:26.840000 audit[3522]: USER_START pid=3522 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:26.847000 audit[3524]: CRED_ACQ pid=3524 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:26.873438 kernel: audit: type=1103 audit(1696275686.847:1154): pid=3524 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:27.121307 sshd[3522]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:27.122000 audit[3522]: USER_END pid=3522 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:27.128537 systemd-logind[1562]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:41:27.130739 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:41:27.132602 systemd-logind[1562]: Removed session 21. Oct 2 19:41:27.125000 audit[3522]: CRED_DISP pid=3522 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:27.133847 systemd[1]: sshd@20-172.31.25.22:22-139.178.89.65:41998.service: Deactivated successfully. Oct 2 19:41:27.144999 kernel: audit: type=1106 audit(1696275687.122:1155): pid=3522 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:27.145103 kernel: audit: type=1104 audit(1696275687.125:1156): pid=3522 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:27.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.22:22-139.178.89.65:41998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:28.440000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:28.440000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400139f860 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:28.440000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:28.440000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:28.440000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400139cbe0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:28.440000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:29.882359 kubelet[2768]: E1002 19:41:29.882302 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:41:29.947000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.947000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4008981900 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:41:29.947000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:29.947000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.947000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fbd76e0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:41:29.947000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:29.960000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.960000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:29.960000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400fbd7770 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:41:29.960000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fb73680 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:41:29.960000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:29.960000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:30.035000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:30.035000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400fbd7890 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:41:30.035000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:30.065000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:30.065000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d1a3e40 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:41:30.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:41:30.099763 kubelet[2768]: E1002 19:41:30.099729 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:35.101246 kubelet[2768]: E1002 19:41:35.101209 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:35.129000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:35.132811 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:41:35.132922 kernel: audit: type=1400 audit(1696275695.129:1166): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:35.129000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400139cfc0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:35.154858 kernel: audit: type=1300 audit(1696275695.129:1166): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400139cfc0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:35.155018 kernel: audit: type=1327 audit(1696275695.129:1166): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:35.129000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:35.135000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:35.174870 kernel: audit: type=1400 audit(1696275695.135:1167): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:35.174966 kernel: audit: type=1300 audit(1696275695.135:1167): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142ed80 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:35.135000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142ed80 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:35.135000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:35.197834 kernel: audit: type=1327 audit(1696275695.135:1167): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:35.197958 kernel: audit: type=1400 audit(1696275695.135:1168): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:35.135000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:35.135000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142edc0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:35.219963 kernel: audit: type=1300 audit(1696275695.135:1168): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142edc0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:35.220042 kernel: audit: type=1327 audit(1696275695.135:1168): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:35.135000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:35.135000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:35.240028 kernel: audit: type=1400 audit(1696275695.135:1169): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:35.135000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400142ee00 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:41:35.135000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:37.154495 systemd[1]: Started sshd@21-172.31.25.22:22-139.178.89.65:52784.service. Oct 2 19:41:37.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.22:22-139.178.89.65:52784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:37.335000 audit[3535]: USER_ACCT pid=3535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:37.337717 sshd[3535]: Accepted publickey for core from 139.178.89.65 port 52784 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:37.338000 audit[3535]: CRED_ACQ pid=3535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:37.338000 audit[3535]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2f190c0 a2=3 a3=1 items=0 ppid=1 pid=3535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:37.338000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:37.341554 sshd[3535]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:37.351341 systemd[1]: Started session-22.scope. Oct 2 19:41:37.352539 systemd-logind[1562]: New session 22 of user core. Oct 2 19:41:37.360000 audit[3535]: USER_START pid=3535 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:37.366000 audit[3537]: CRED_ACQ pid=3537 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:37.631280 sshd[3535]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:37.632000 audit[3535]: USER_END pid=3535 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:37.632000 audit[3535]: CRED_DISP pid=3535 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:37.637240 systemd[1]: sshd@21-172.31.25.22:22-139.178.89.65:52784.service: Deactivated successfully. Oct 2 19:41:37.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.22:22-139.178.89.65:52784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:37.638651 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:41:37.639819 systemd-logind[1562]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:41:37.641289 systemd-logind[1562]: Removed session 22. Oct 2 19:41:40.103840 kubelet[2768]: E1002 19:41:40.103661 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:42.883031 kubelet[2768]: E1002 19:41:42.882920 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:41:45.105178 kubelet[2768]: E1002 19:41:45.105136 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:47.662503 systemd[1]: Started sshd@22-172.31.25.22:22-139.178.89.65:54174.service. Oct 2 19:41:47.674091 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:41:47.674201 kernel: audit: type=1130 audit(1696275707.661:1179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.22:22-139.178.89.65:54174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:47.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.22:22-139.178.89.65:54174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:47.840000 audit[3546]: USER_ACCT pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:47.842667 sshd[3546]: Accepted publickey for core from 139.178.89.65 port 54174 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:47.854814 kernel: audit: type=1101 audit(1696275707.840:1180): pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:47.853000 audit[3546]: CRED_ACQ pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:47.856309 sshd[3546]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:47.871705 kernel: audit: type=1103 audit(1696275707.853:1181): pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:47.871819 kernel: audit: type=1006 audit(1696275707.853:1182): pid=3546 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:41:47.853000 audit[3546]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf87d4e0 a2=3 a3=1 items=0 ppid=1 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:47.879745 systemd[1]: Started session-23.scope. Oct 2 19:41:47.881684 systemd-logind[1562]: New session 23 of user core. Oct 2 19:41:47.882818 kernel: audit: type=1300 audit(1696275707.853:1182): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf87d4e0 a2=3 a3=1 items=0 ppid=1 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:47.882884 kernel: audit: type=1327 audit(1696275707.853:1182): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:47.853000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:47.892000 audit[3546]: USER_START pid=3546 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:47.905742 kernel: audit: type=1105 audit(1696275707.892:1183): pid=3546 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:47.905880 kernel: audit: type=1103 audit(1696275707.899:1184): pid=3548 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:47.899000 audit[3548]: CRED_ACQ pid=3548 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:48.171263 sshd[3546]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:48.171000 audit[3546]: USER_END pid=3546 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:48.176796 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:41:48.178120 systemd[1]: sshd@22-172.31.25.22:22-139.178.89.65:54174.service: Deactivated successfully. Oct 2 19:41:48.172000 audit[3546]: CRED_DISP pid=3546 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:48.194812 kernel: audit: type=1106 audit(1696275708.171:1185): pid=3546 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:48.194899 kernel: audit: type=1104 audit(1696275708.172:1186): pid=3546 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:48.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.22:22-139.178.89.65:54174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:48.195807 systemd-logind[1562]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:41:48.197424 systemd-logind[1562]: Removed session 23. Oct 2 19:41:50.106926 kubelet[2768]: E1002 19:41:50.106872 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:53.886152 env[1566]: time="2023-10-02T19:41:53.886078051Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:41:53.906904 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3683178457.mount: Deactivated successfully. Oct 2 19:41:53.915563 env[1566]: time="2023-10-02T19:41:53.915479314Z" level=info msg="CreateContainer within sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06\"" Oct 2 19:41:53.917952 env[1566]: time="2023-10-02T19:41:53.916474837Z" level=info msg="StartContainer for \"cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06\"" Oct 2 19:41:53.975323 systemd[1]: Started cri-containerd-cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06.scope. Oct 2 19:41:54.007654 systemd[1]: cri-containerd-cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06.scope: Deactivated successfully. Oct 2 19:41:54.034183 env[1566]: time="2023-10-02T19:41:54.034116100Z" level=info msg="shim disconnected" id=cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06 Oct 2 19:41:54.034637 env[1566]: time="2023-10-02T19:41:54.034605504Z" level=warning msg="cleaning up after shim disconnected" id=cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06 namespace=k8s.io Oct 2 19:41:54.034813 env[1566]: time="2023-10-02T19:41:54.034784762Z" level=info msg="cleaning up dead shim" Oct 2 19:41:54.061193 env[1566]: time="2023-10-02T19:41:54.061115979Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:41:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3583 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:41:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:41:54.061936 env[1566]: time="2023-10-02T19:41:54.061856222Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:41:54.063771 env[1566]: time="2023-10-02T19:41:54.063653920Z" level=error msg="Failed to pipe stdout of container \"cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06\"" error="reading from a closed fifo" Oct 2 19:41:54.064022 env[1566]: time="2023-10-02T19:41:54.063972081Z" level=error msg="Failed to pipe stderr of container \"cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06\"" error="reading from a closed fifo" Oct 2 19:41:54.066357 env[1566]: time="2023-10-02T19:41:54.066290227Z" level=error msg="StartContainer for \"cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:41:54.067463 kubelet[2768]: E1002 19:41:54.066881 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06" Oct 2 19:41:54.067463 kubelet[2768]: E1002 19:41:54.067062 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:41:54.067463 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:41:54.067463 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:41:54.067463 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fgv4l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:41:54.067463 kubelet[2768]: E1002 19:41:54.067147 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:41:54.442495 kubelet[2768]: I1002 19:41:54.442452 2768 scope.go:115] "RemoveContainer" containerID="60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396" Oct 2 19:41:54.443018 kubelet[2768]: I1002 19:41:54.442974 2768 scope.go:115] "RemoveContainer" containerID="60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396" Oct 2 19:41:54.447229 env[1566]: time="2023-10-02T19:41:54.447163004Z" level=info msg="RemoveContainer for \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\"" Oct 2 19:41:54.447820 env[1566]: time="2023-10-02T19:41:54.447761717Z" level=info msg="RemoveContainer for \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\"" Oct 2 19:41:54.447984 env[1566]: time="2023-10-02T19:41:54.447900835Z" level=error msg="RemoveContainer for \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\" failed" error="failed to set removing state for container \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\": container is already in removing state" Oct 2 19:41:54.448347 kubelet[2768]: E1002 19:41:54.448304 2768 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\": container is already in removing state" containerID="60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396" Oct 2 19:41:54.448755 kubelet[2768]: E1002 19:41:54.448657 2768 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396": container is already in removing state; Skipping pod "cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)" Oct 2 19:41:54.450333 kubelet[2768]: E1002 19:41:54.450298 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:41:54.451699 env[1566]: time="2023-10-02T19:41:54.451621357Z" level=info msg="RemoveContainer for \"60b5eb0345839a5496f436b67a87ed45fdb4f428722240062882f1d2da004396\" returns successfully" Oct 2 19:41:54.899277 systemd[1]: run-containerd-runc-k8s.io-cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06-runc.OfFfUg.mount: Deactivated successfully. Oct 2 19:41:54.899449 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06-rootfs.mount: Deactivated successfully. Oct 2 19:41:55.108513 kubelet[2768]: E1002 19:41:55.108438 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:57.140530 kubelet[2768]: W1002 19:41:57.140469 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc0f72afa_349b_4534_80fb_55a6b1bf7243.slice/cri-containerd-cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06.scope WatchSource:0}: task cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06 not found: not found Oct 2 19:41:58.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.22:22-139.178.89.65:53658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.204329 systemd[1]: Started sshd@23-172.31.25.22:22-139.178.89.65:53658.service. Oct 2 19:41:58.206730 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:58.206896 kernel: audit: type=1130 audit(1696275718.202:1188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.22:22-139.178.89.65:53658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.388000 audit[3598]: USER_ACCT pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.390692 sshd[3598]: Accepted publickey for core from 139.178.89.65 port 53658 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:41:58.402827 kernel: audit: type=1101 audit(1696275718.388:1189): pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.401000 audit[3598]: CRED_ACQ pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.404362 sshd[3598]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:58.420326 kernel: audit: type=1103 audit(1696275718.401:1190): pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.420463 kernel: audit: type=1006 audit(1696275718.401:1191): pid=3598 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:41:58.401000 audit[3598]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffecd78c50 a2=3 a3=1 items=0 ppid=1 pid=3598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:58.431337 kernel: audit: type=1300 audit(1696275718.401:1191): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffecd78c50 a2=3 a3=1 items=0 ppid=1 pid=3598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:58.401000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:58.435135 kernel: audit: type=1327 audit(1696275718.401:1191): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:58.437645 systemd-logind[1562]: New session 24 of user core. Oct 2 19:41:58.439749 systemd[1]: Started session-24.scope. Oct 2 19:41:58.448000 audit[3598]: USER_START pid=3598 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.467098 kernel: audit: type=1105 audit(1696275718.448:1192): pid=3598 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.467266 kernel: audit: type=1103 audit(1696275718.464:1193): pid=3600 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.464000 audit[3600]: CRED_ACQ pid=3600 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.737013 sshd[3598]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:58.737000 audit[3598]: USER_END pid=3598 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.744180 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:41:58.745559 systemd[1]: sshd@23-172.31.25.22:22-139.178.89.65:53658.service: Deactivated successfully. Oct 2 19:41:58.739000 audit[3598]: CRED_DISP pid=3598 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.751753 kernel: audit: type=1106 audit(1696275718.737:1194): pid=3598 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.761367 systemd-logind[1562]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:41:58.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.22:22-139.178.89.65:53658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:58.762863 kernel: audit: type=1104 audit(1696275718.739:1195): pid=3598 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:41:58.763049 systemd-logind[1562]: Removed session 24. Oct 2 19:42:00.109862 kubelet[2768]: E1002 19:42:00.109827 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:04.882667 kubelet[2768]: E1002 19:42:04.882529 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:42:05.111795 kubelet[2768]: E1002 19:42:05.111761 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:08.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.22:22-139.178.89.65:53430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:08.768143 systemd[1]: Started sshd@24-172.31.25.22:22-139.178.89.65:53430.service. Oct 2 19:42:08.771396 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:08.772316 kernel: audit: type=1130 audit(1696275728.767:1197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.22:22-139.178.89.65:53430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:08.951000 audit[3609]: USER_ACCT pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:08.952827 sshd[3609]: Accepted publickey for core from 139.178.89.65 port 53430 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:08.956991 sshd[3609]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:08.951000 audit[3609]: CRED_ACQ pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:08.971853 kernel: audit: type=1101 audit(1696275728.951:1198): pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:08.971970 kernel: audit: type=1103 audit(1696275728.951:1199): pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:08.977950 kernel: audit: type=1006 audit(1696275728.951:1200): pid=3609 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:42:08.951000 audit[3609]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe70a44d0 a2=3 a3=1 items=0 ppid=1 pid=3609 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:08.988909 kernel: audit: type=1300 audit(1696275728.951:1200): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe70a44d0 a2=3 a3=1 items=0 ppid=1 pid=3609 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:08.951000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:08.993310 kernel: audit: type=1327 audit(1696275728.951:1200): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:08.996829 systemd-logind[1562]: New session 25 of user core. Oct 2 19:42:08.998082 systemd[1]: Started session-25.scope. Oct 2 19:42:09.007000 audit[3609]: USER_START pid=3609 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:09.020000 audit[3611]: CRED_ACQ pid=3611 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:09.030933 kernel: audit: type=1105 audit(1696275729.007:1201): pid=3609 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:09.031034 kernel: audit: type=1103 audit(1696275729.020:1202): pid=3611 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:09.294937 sshd[3609]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:09.296000 audit[3609]: USER_END pid=3609 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:09.301241 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:42:09.302756 systemd[1]: sshd@24-172.31.25.22:22-139.178.89.65:53430.service: Deactivated successfully. Oct 2 19:42:09.296000 audit[3609]: CRED_DISP pid=3609 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:09.310077 systemd-logind[1562]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:42:09.312016 systemd-logind[1562]: Removed session 25. Oct 2 19:42:09.318267 kernel: audit: type=1106 audit(1696275729.296:1203): pid=3609 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:09.318365 kernel: audit: type=1104 audit(1696275729.296:1204): pid=3609 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:09.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.22:22-139.178.89.65:53430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:10.113414 kubelet[2768]: E1002 19:42:10.113360 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:15.115150 kubelet[2768]: E1002 19:42:15.115069 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:16.883814 kubelet[2768]: E1002 19:42:16.883760 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:42:19.328829 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:19.328962 kernel: audit: type=1130 audit(1696275739.325:1206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.22:22-139.178.89.65:59750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:19.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.22:22-139.178.89.65:59750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:19.325506 systemd[1]: Started sshd@25-172.31.25.22:22-139.178.89.65:59750.service. Oct 2 19:42:19.510000 audit[3620]: USER_ACCT pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.511850 sshd[3620]: Accepted publickey for core from 139.178.89.65 port 59750 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:19.522739 kernel: audit: type=1101 audit(1696275739.510:1207): pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.525000 audit[3620]: CRED_ACQ pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.526931 sshd[3620]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:19.542815 kernel: audit: type=1103 audit(1696275739.525:1208): pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.542947 kernel: audit: type=1006 audit(1696275739.525:1209): pid=3620 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:42:19.543099 kernel: audit: type=1300 audit(1696275739.525:1209): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe658fd70 a2=3 a3=1 items=0 ppid=1 pid=3620 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:19.525000 audit[3620]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe658fd70 a2=3 a3=1 items=0 ppid=1 pid=3620 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:19.525000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:19.557590 kernel: audit: type=1327 audit(1696275739.525:1209): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:19.562842 systemd-logind[1562]: New session 26 of user core. Oct 2 19:42:19.563624 systemd[1]: Started session-26.scope. Oct 2 19:42:19.572000 audit[3620]: USER_START pid=3620 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.581000 audit[3622]: CRED_ACQ pid=3622 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.596278 kernel: audit: type=1105 audit(1696275739.572:1210): pid=3620 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.596390 kernel: audit: type=1103 audit(1696275739.581:1211): pid=3622 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.849596 sshd[3620]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:19.851000 audit[3620]: USER_END pid=3620 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.856446 systemd-logind[1562]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:42:19.858632 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:42:19.861242 systemd-logind[1562]: Removed session 26. Oct 2 19:42:19.863512 systemd[1]: sshd@25-172.31.25.22:22-139.178.89.65:59750.service: Deactivated successfully. Oct 2 19:42:19.851000 audit[3620]: CRED_DISP pid=3620 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.873877 kernel: audit: type=1106 audit(1696275739.851:1212): pid=3620 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.873999 kernel: audit: type=1104 audit(1696275739.851:1213): pid=3620 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:19.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.22:22-139.178.89.65:59750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:20.116760 kubelet[2768]: E1002 19:42:20.116595 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:25.117794 kubelet[2768]: E1002 19:42:25.117714 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:28.444760 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:28.444922 kernel: audit: type=1400 audit(1696275748.441:1215): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:28.441000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:28.441000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002812ec0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:28.466265 kernel: audit: type=1300 audit(1696275748.441:1215): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002812ec0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:28.466434 kernel: audit: type=1327 audit(1696275748.441:1215): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:28.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:28.443000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:28.486635 kernel: audit: type=1400 audit(1696275748.443:1216): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:28.486771 kernel: audit: type=1300 audit(1696275748.443:1216): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e6de90 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:28.443000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e6de90 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:28.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:28.509790 kernel: audit: type=1327 audit(1696275748.443:1216): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:29.881418 systemd[1]: Started sshd@26-172.31.25.22:22-139.178.89.65:60078.service. Oct 2 19:42:29.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.22:22-139.178.89.65:60078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:29.892750 kernel: audit: type=1130 audit(1696275749.881:1217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.22:22-139.178.89.65:60078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:29.948000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.948000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.969617 kernel: audit: type=1400 audit(1696275749.948:1218): avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.969768 kernel: audit: type=1400 audit(1696275749.948:1219): avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.948000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d985b00 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:42:29.983121 kernel: audit: type=1300 audit(1696275749.948:1218): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d985b00 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:42:29.948000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:29.948000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4011ba3320 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:42:29.948000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:29.969000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.969000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4011ba3380 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:42:29.969000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:29.969000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:29.969000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4011ba33b0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:42:29.969000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:30.037000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:30.037000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4011c38ea0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:42:30.037000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:30.067000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:30.067000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400dcd6660 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:42:30.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:42:30.084178 sshd[3634]: Accepted publickey for core from 139.178.89.65 port 60078 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:30.083000 audit[3634]: USER_ACCT pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:30.087500 sshd[3634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:30.086000 audit[3634]: CRED_ACQ pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:30.086000 audit[3634]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd575580 a2=3 a3=1 items=0 ppid=1 pid=3634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:30.086000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:30.097623 systemd-logind[1562]: New session 27 of user core. Oct 2 19:42:30.097781 systemd[1]: Started session-27.scope. Oct 2 19:42:30.115000 audit[3634]: USER_START pid=3634 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:30.123000 audit[3637]: CRED_ACQ pid=3637 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:30.126237 kubelet[2768]: E1002 19:42:30.126187 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:30.396262 sshd[3634]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:30.397000 audit[3634]: USER_END pid=3634 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:30.397000 audit[3634]: CRED_DISP pid=3634 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:30.402195 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:42:30.403413 systemd-logind[1562]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:42:30.403754 systemd[1]: sshd@26-172.31.25.22:22-139.178.89.65:60078.service: Deactivated successfully. Oct 2 19:42:30.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.22:22-139.178.89.65:60078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:30.406321 systemd-logind[1562]: Removed session 27. Oct 2 19:42:30.882317 kubelet[2768]: E1002 19:42:30.882266 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-89w6j_kube-system(c0f72afa-349b-4534-80fb-55a6b1bf7243)\"" pod="kube-system/cilium-89w6j" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 Oct 2 19:42:35.127656 kubelet[2768]: E1002 19:42:35.127602 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:35.131000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:35.133880 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:42:35.133982 kernel: audit: type=1400 audit(1696275755.131:1232): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:35.131000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002813280 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:35.155944 kernel: audit: type=1300 audit(1696275755.131:1232): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002813280 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:35.156025 kernel: audit: type=1327 audit(1696275755.131:1232): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:35.131000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:35.136000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:35.176056 kernel: audit: type=1400 audit(1696275755.136:1233): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:35.176159 kernel: audit: type=1300 audit(1696275755.136:1233): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40028133a0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:35.136000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40028133a0 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:35.136000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:35.199148 kernel: audit: type=1327 audit(1696275755.136:1233): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:35.199272 kernel: audit: type=1400 audit(1696275755.137:1234): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:35.137000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:35.137000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002150820 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:35.137000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:35.231522 kernel: audit: type=1300 audit(1696275755.137:1234): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002150820 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:35.231615 kernel: audit: type=1327 audit(1696275755.137:1234): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:35.231694 kernel: audit: type=1400 audit(1696275755.137:1235): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:35.137000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:35.137000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002150840 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:42:35.137000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:38.595513 amazon-ssm-agent[1550]: 2023-10-02 19:42:38 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:42:38.695925 amazon-ssm-agent[1550]: 2023-10-02 19:42:38 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0df090b3fde0b0a15 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0df090b3fde0b0a15 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:42:38.695925 amazon-ssm-agent[1550]: status code: 400, request id: 1bcb4d6d-3c32-4fa6-b467-0decf74d21bc Oct 2 19:42:40.128517 kubelet[2768]: E1002 19:42:40.128447 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:40.438865 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:42:40.439032 kernel: audit: type=1130 audit(1696275760.427:1236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.22:22-139.178.89.65:35258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:40.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.22:22-139.178.89.65:35258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:40.427498 systemd[1]: Started sshd@27-172.31.25.22:22-139.178.89.65:35258.service. Oct 2 19:42:40.608000 audit[3650]: USER_ACCT pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.613244 sshd[3650]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:40.614785 sshd[3650]: Accepted publickey for core from 139.178.89.65 port 35258 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:40.611000 audit[3650]: CRED_ACQ pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.630743 kernel: audit: type=1101 audit(1696275760.608:1237): pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.630915 kernel: audit: type=1103 audit(1696275760.611:1238): pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.644657 kernel: audit: type=1006 audit(1696275760.611:1239): pid=3650 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:42:40.649184 systemd-logind[1562]: New session 28 of user core. Oct 2 19:42:40.649371 systemd[1]: Started session-28.scope. Oct 2 19:42:40.611000 audit[3650]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbdfbfa0 a2=3 a3=1 items=0 ppid=1 pid=3650 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:40.662117 kernel: audit: type=1300 audit(1696275760.611:1239): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbdfbfa0 a2=3 a3=1 items=0 ppid=1 pid=3650 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:40.611000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:40.665916 kernel: audit: type=1327 audit(1696275760.611:1239): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:40.673000 audit[3650]: USER_START pid=3650 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.680000 audit[3654]: CRED_ACQ pid=3654 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.695517 kernel: audit: type=1105 audit(1696275760.673:1240): pid=3650 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.695588 kernel: audit: type=1103 audit(1696275760.680:1241): pid=3654 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.964874 sshd[3650]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:40.971000 audit[3650]: USER_END pid=3650 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.986127 systemd[1]: sshd@27-172.31.25.22:22-139.178.89.65:35258.service: Deactivated successfully. Oct 2 19:42:40.987643 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:42:40.971000 audit[3650]: CRED_DISP pid=3650 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.999394 kernel: audit: type=1106 audit(1696275760.971:1242): pid=3650 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.999496 kernel: audit: type=1104 audit(1696275760.971:1243): pid=3650 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:40.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.22:22-139.178.89.65:35258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:41.003779 systemd-logind[1562]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:42:41.007343 systemd[1]: Started sshd@28-172.31.25.22:22-139.178.89.65:35268.service. Oct 2 19:42:41.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.22:22-139.178.89.65:35268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:41.010842 systemd-logind[1562]: Removed session 28. Oct 2 19:42:41.190000 audit[3663]: USER_ACCT pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:41.191287 sshd[3663]: Accepted publickey for core from 139.178.89.65 port 35268 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:41.193000 audit[3663]: CRED_ACQ pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:41.193000 audit[3663]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd4d8ec0 a2=3 a3=1 items=0 ppid=1 pid=3663 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:41.193000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:41.195173 sshd[3663]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:41.204809 systemd-logind[1562]: New session 29 of user core. Oct 2 19:42:41.205492 systemd[1]: Started session-29.scope. Oct 2 19:42:41.215000 audit[3663]: USER_START pid=3663 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:41.221000 audit[3665]: CRED_ACQ pid=3665 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:44.141191 env[1566]: time="2023-10-02T19:42:44.140665577Z" level=info msg="StopPodSandbox for \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\"" Oct 2 19:42:44.141191 env[1566]: time="2023-10-02T19:42:44.140827854Z" level=info msg="Container to stop \"cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:44.148376 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817-shm.mount: Deactivated successfully. Oct 2 19:42:44.172000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:42:44.172436 systemd[1]: cri-containerd-95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817.scope: Deactivated successfully. Oct 2 19:42:44.175000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:42:44.205248 env[1566]: time="2023-10-02T19:42:44.205171501Z" level=info msg="StopContainer for \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\" with timeout 30 (s)" Oct 2 19:42:44.205999 env[1566]: time="2023-10-02T19:42:44.205913707Z" level=info msg="Stop container \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\" with signal terminated" Oct 2 19:42:44.259095 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817-rootfs.mount: Deactivated successfully. Oct 2 19:42:44.260172 systemd[1]: cri-containerd-a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726.scope: Deactivated successfully. Oct 2 19:42:44.260000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:42:44.263000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:42:44.284951 env[1566]: time="2023-10-02T19:42:44.284869706Z" level=info msg="shim disconnected" id=95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817 Oct 2 19:42:44.285493 env[1566]: time="2023-10-02T19:42:44.284949711Z" level=warning msg="cleaning up after shim disconnected" id=95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817 namespace=k8s.io Oct 2 19:42:44.285493 env[1566]: time="2023-10-02T19:42:44.284973495Z" level=info msg="cleaning up dead shim" Oct 2 19:42:44.336991 env[1566]: time="2023-10-02T19:42:44.336917978Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3697 runtime=io.containerd.runc.v2\n" Oct 2 19:42:44.337611 env[1566]: time="2023-10-02T19:42:44.337559023Z" level=info msg="TearDown network for sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" successfully" Oct 2 19:42:44.337816 env[1566]: time="2023-10-02T19:42:44.337610132Z" level=info msg="StopPodSandbox for \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" returns successfully" Oct 2 19:42:44.362113 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726-rootfs.mount: Deactivated successfully. Oct 2 19:42:44.364725 env[1566]: time="2023-10-02T19:42:44.364604680Z" level=info msg="shim disconnected" id=a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726 Oct 2 19:42:44.364725 env[1566]: time="2023-10-02T19:42:44.364703657Z" level=warning msg="cleaning up after shim disconnected" id=a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726 namespace=k8s.io Oct 2 19:42:44.364725 env[1566]: time="2023-10-02T19:42:44.364727153Z" level=info msg="cleaning up dead shim" Oct 2 19:42:44.391648 env[1566]: time="2023-10-02T19:42:44.391480619Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3725 runtime=io.containerd.runc.v2\n" Oct 2 19:42:44.395297 env[1566]: time="2023-10-02T19:42:44.395233002Z" level=info msg="StopContainer for \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\" returns successfully" Oct 2 19:42:44.396332 env[1566]: time="2023-10-02T19:42:44.396229455Z" level=info msg="StopPodSandbox for \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\"" Oct 2 19:42:44.396647 env[1566]: time="2023-10-02T19:42:44.396596694Z" level=info msg="Container to stop \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:44.399859 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601-shm.mount: Deactivated successfully. Oct 2 19:42:44.421017 systemd[1]: cri-containerd-9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601.scope: Deactivated successfully. Oct 2 19:42:44.420000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:42:44.424734 kubelet[2768]: I1002 19:42:44.424459 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.424734 kubelet[2768]: I1002 19:42:44.424548 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-host-proc-sys-net\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.425605 kubelet[2768]: W1002 19:42:44.425000 2768 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/c0f72afa-349b-4534-80fb-55a6b1bf7243/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.427761 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-config-path\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.427867 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-run\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.427915 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c0f72afa-349b-4534-80fb-55a6b1bf7243-hubble-tls\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.427955 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-host-proc-sys-kernel\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.427995 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-lib-modules\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.428033 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-xtables-lock\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.428072 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-hostproc\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.428112 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-etc-cni-netd\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.428157 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c0f72afa-349b-4534-80fb-55a6b1bf7243-clustermesh-secrets\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.428201 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-cgroup\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428373 kubelet[2768]: I1002 19:42:44.428240 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cni-path\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.428000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:42:44.429741 kubelet[2768]: I1002 19:42:44.429130 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.429741 kubelet[2768]: I1002 19:42:44.429215 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.429987 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-fgv4l\" (UniqueName: \"kubernetes.io/projected/c0f72afa-349b-4534-80fb-55a6b1bf7243-kube-api-access-fgv4l\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430063 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-bpf-maps\") pod \"c0f72afa-349b-4534-80fb-55a6b1bf7243\" (UID: \"c0f72afa-349b-4534-80fb-55a6b1bf7243\") " Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430141 2768 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-host-proc-sys-net\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430172 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-run\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430197 2768 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-xtables-lock\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430245 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430293 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-hostproc" (OuterVolumeSpecName: "hostproc") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430361 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430442 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.431733 kubelet[2768]: I1002 19:42:44.430510 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.432449 kubelet[2768]: I1002 19:42:44.431998 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.432449 kubelet[2768]: I1002 19:42:44.432098 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cni-path" (OuterVolumeSpecName: "cni-path") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:44.434836 kubelet[2768]: I1002 19:42:44.434755 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:44.446207 systemd[1]: var-lib-kubelet-pods-c0f72afa\x2d349b\x2d4534\x2d80fb\x2d55a6b1bf7243-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:42:44.454827 kubelet[2768]: I1002 19:42:44.454738 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c0f72afa-349b-4534-80fb-55a6b1bf7243-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:42:44.462335 kubelet[2768]: I1002 19:42:44.462274 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c0f72afa-349b-4534-80fb-55a6b1bf7243-kube-api-access-fgv4l" (OuterVolumeSpecName: "kube-api-access-fgv4l") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "kube-api-access-fgv4l". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:44.462593 kubelet[2768]: I1002 19:42:44.462550 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c0f72afa-349b-4534-80fb-55a6b1bf7243-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "c0f72afa-349b-4534-80fb-55a6b1bf7243" (UID: "c0f72afa-349b-4534-80fb-55a6b1bf7243"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:44.517168 env[1566]: time="2023-10-02T19:42:44.517103158Z" level=info msg="shim disconnected" id=9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601 Oct 2 19:42:44.517798 env[1566]: time="2023-10-02T19:42:44.517746615Z" level=warning msg="cleaning up after shim disconnected" id=9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601 namespace=k8s.io Oct 2 19:42:44.517798 env[1566]: time="2023-10-02T19:42:44.517788532Z" level=info msg="cleaning up dead shim" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530729 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-config-path\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530781 2768 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c0f72afa-349b-4534-80fb-55a6b1bf7243-hubble-tls\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530811 2768 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-host-proc-sys-kernel\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530834 2768 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-lib-modules\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530858 2768 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-hostproc\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530881 2768 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-etc-cni-netd\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530904 2768 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c0f72afa-349b-4534-80fb-55a6b1bf7243-clustermesh-secrets\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530927 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cilium-cgroup\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530950 2768 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-cni-path\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.530974 2768 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c0f72afa-349b-4534-80fb-55a6b1bf7243-bpf-maps\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.531033 kubelet[2768]: I1002 19:42:44.531001 2768 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-fgv4l\" (UniqueName: \"kubernetes.io/projected/c0f72afa-349b-4534-80fb-55a6b1bf7243-kube-api-access-fgv4l\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.546413 env[1566]: time="2023-10-02T19:42:44.546340453Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3761 runtime=io.containerd.runc.v2\n" Oct 2 19:42:44.546969 env[1566]: time="2023-10-02T19:42:44.546919373Z" level=info msg="TearDown network for sandbox \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\" successfully" Oct 2 19:42:44.547088 env[1566]: time="2023-10-02T19:42:44.546968310Z" level=info msg="StopPodSandbox for \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\" returns successfully" Oct 2 19:42:44.586511 kubelet[2768]: I1002 19:42:44.586469 2768 scope.go:115] "RemoveContainer" containerID="a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726" Oct 2 19:42:44.590067 env[1566]: time="2023-10-02T19:42:44.589413286Z" level=info msg="RemoveContainer for \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\"" Oct 2 19:42:44.599575 env[1566]: time="2023-10-02T19:42:44.599506546Z" level=info msg="RemoveContainer for \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\" returns successfully" Oct 2 19:42:44.603112 kubelet[2768]: I1002 19:42:44.602972 2768 scope.go:115] "RemoveContainer" containerID="a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726" Oct 2 19:42:44.604894 systemd[1]: Removed slice kubepods-burstable-podc0f72afa_349b_4534_80fb_55a6b1bf7243.slice. Oct 2 19:42:44.606267 env[1566]: time="2023-10-02T19:42:44.606150149Z" level=error msg="ContainerStatus for \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\": not found" Oct 2 19:42:44.608652 kubelet[2768]: E1002 19:42:44.607490 2768 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\": not found" containerID="a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726" Oct 2 19:42:44.608652 kubelet[2768]: I1002 19:42:44.607637 2768 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726} err="failed to get container status \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\": rpc error: code = NotFound desc = an error occurred when try to find container \"a72a479f11a7b769e538461ba20eff6d2b875524562490eab4cf0268e9c8b726\": not found" Oct 2 19:42:44.608652 kubelet[2768]: I1002 19:42:44.607662 2768 scope.go:115] "RemoveContainer" containerID="cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06" Oct 2 19:42:44.618611 env[1566]: time="2023-10-02T19:42:44.618557364Z" level=info msg="RemoveContainer for \"cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06\"" Oct 2 19:42:44.623864 env[1566]: time="2023-10-02T19:42:44.623805920Z" level=info msg="RemoveContainer for \"cdf234dcbae9a83db5ae59cdd73f562244309436827ddcd58485ea00d4f9bd06\" returns successfully" Oct 2 19:42:44.636695 kubelet[2768]: W1002 19:42:44.635222 2768 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/34148176-92a1-42fe-9ad2-7fb35bd495ad/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:42:44.640368 kubelet[2768]: I1002 19:42:44.639233 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34148176-92a1-42fe-9ad2-7fb35bd495ad-cilium-config-path\") pod \"34148176-92a1-42fe-9ad2-7fb35bd495ad\" (UID: \"34148176-92a1-42fe-9ad2-7fb35bd495ad\") " Oct 2 19:42:44.640368 kubelet[2768]: I1002 19:42:44.639332 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9n56b\" (UniqueName: \"kubernetes.io/projected/34148176-92a1-42fe-9ad2-7fb35bd495ad-kube-api-access-9n56b\") pod \"34148176-92a1-42fe-9ad2-7fb35bd495ad\" (UID: \"34148176-92a1-42fe-9ad2-7fb35bd495ad\") " Oct 2 19:42:44.654882 kubelet[2768]: I1002 19:42:44.654727 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/34148176-92a1-42fe-9ad2-7fb35bd495ad-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "34148176-92a1-42fe-9ad2-7fb35bd495ad" (UID: "34148176-92a1-42fe-9ad2-7fb35bd495ad"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:44.656657 kubelet[2768]: I1002 19:42:44.655489 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/34148176-92a1-42fe-9ad2-7fb35bd495ad-kube-api-access-9n56b" (OuterVolumeSpecName: "kube-api-access-9n56b") pod "34148176-92a1-42fe-9ad2-7fb35bd495ad" (UID: "34148176-92a1-42fe-9ad2-7fb35bd495ad"). InnerVolumeSpecName "kube-api-access-9n56b". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:44.740217 kubelet[2768]: I1002 19:42:44.740169 2768 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-9n56b\" (UniqueName: \"kubernetes.io/projected/34148176-92a1-42fe-9ad2-7fb35bd495ad-kube-api-access-9n56b\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.740478 kubelet[2768]: I1002 19:42:44.740456 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34148176-92a1-42fe-9ad2-7fb35bd495ad-cilium-config-path\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:42:44.885868 kubelet[2768]: I1002 19:42:44.885818 2768 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=c0f72afa-349b-4534-80fb-55a6b1bf7243 path="/var/lib/kubelet/pods/c0f72afa-349b-4534-80fb-55a6b1bf7243/volumes" Oct 2 19:42:44.895324 systemd[1]: Removed slice kubepods-besteffort-pod34148176_92a1_42fe_9ad2_7fb35bd495ad.slice. Oct 2 19:42:45.130256 kubelet[2768]: E1002 19:42:45.130202 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:45.147777 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601-rootfs.mount: Deactivated successfully. Oct 2 19:42:45.147959 systemd[1]: var-lib-kubelet-pods-c0f72afa\x2d349b\x2d4534\x2d80fb\x2d55a6b1bf7243-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dfgv4l.mount: Deactivated successfully. Oct 2 19:42:45.148097 systemd[1]: var-lib-kubelet-pods-34148176\x2d92a1\x2d42fe\x2d9ad2\x2d7fb35bd495ad-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9n56b.mount: Deactivated successfully. Oct 2 19:42:45.148232 systemd[1]: var-lib-kubelet-pods-c0f72afa\x2d349b\x2d4534\x2d80fb\x2d55a6b1bf7243-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:42:46.109866 sshd[3663]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:46.113000 audit[3663]: USER_END pid=3663 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.116410 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:42:46.116556 kernel: audit: type=1106 audit(1696275766.113:1257): pid=3663 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.118745 systemd-logind[1562]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:42:46.121524 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:42:46.121893 systemd[1]: session-29.scope: Consumed 2.189s CPU time. Oct 2 19:42:46.123856 systemd[1]: sshd@28-172.31.25.22:22-139.178.89.65:35268.service: Deactivated successfully. Oct 2 19:42:46.126406 systemd-logind[1562]: Removed session 29. Oct 2 19:42:46.113000 audit[3663]: CRED_DISP pid=3663 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.137462 kernel: audit: type=1104 audit(1696275766.113:1258): pid=3663 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.146780 kernel: audit: type=1131 audit(1696275766.121:1259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.22:22-139.178.89.65:35268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.22:22-139.178.89.65:35268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.150203 systemd[1]: Started sshd@29-172.31.25.22:22-139.178.89.65:38066.service. Oct 2 19:42:46.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.22:22-139.178.89.65:38066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.162753 kernel: audit: type=1130 audit(1696275766.149:1260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.22:22-139.178.89.65:38066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.328000 audit[3778]: USER_ACCT pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.332534 sshd[3778]: Accepted publickey for core from 139.178.89.65 port 38066 ssh2: RSA SHA256:7JXBxnRlPbGQmmbR+r/0ht2yJ3EtkuLQ82x2+HEbSLE Oct 2 19:42:46.340708 kernel: audit: type=1101 audit(1696275766.328:1261): pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.342643 sshd[3778]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:46.341000 audit[3778]: CRED_ACQ pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.360645 kernel: audit: type=1103 audit(1696275766.341:1262): pid=3778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.360806 kernel: audit: type=1006 audit(1696275766.341:1263): pid=3778 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:42:46.341000 audit[3778]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8d5beb0 a2=3 a3=1 items=0 ppid=1 pid=3778 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:46.371658 kernel: audit: type=1300 audit(1696275766.341:1263): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8d5beb0 a2=3 a3=1 items=0 ppid=1 pid=3778 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:46.341000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:46.376196 kernel: audit: type=1327 audit(1696275766.341:1263): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:46.377783 systemd-logind[1562]: New session 30 of user core. Oct 2 19:42:46.380085 systemd[1]: Started session-30.scope. Oct 2 19:42:46.389000 audit[3778]: USER_START pid=3778 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.402717 kernel: audit: type=1105 audit(1696275766.389:1264): pid=3778 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.402000 audit[3780]: CRED_ACQ pid=3780 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:46.887274 kubelet[2768]: I1002 19:42:46.887240 2768 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=34148176-92a1-42fe-9ad2-7fb35bd495ad path="/var/lib/kubelet/pods/34148176-92a1-42fe-9ad2-7fb35bd495ad/volumes" Oct 2 19:42:48.052940 kubelet[2768]: I1002 19:42:48.052878 2768 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:42:48.053621 kubelet[2768]: E1002 19:42:48.053004 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: E1002 19:42:48.053033 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: E1002 19:42:48.053054 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: E1002 19:42:48.053072 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: E1002 19:42:48.053091 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="34148176-92a1-42fe-9ad2-7fb35bd495ad" containerName="cilium-operator" Oct 2 19:42:48.053621 kubelet[2768]: I1002 19:42:48.053138 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: I1002 19:42:48.053158 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: I1002 19:42:48.053176 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: I1002 19:42:48.053192 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: I1002 19:42:48.053208 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="34148176-92a1-42fe-9ad2-7fb35bd495ad" containerName="cilium-operator" Oct 2 19:42:48.053621 kubelet[2768]: E1002 19:42:48.053248 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: E1002 19:42:48.053268 2768 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: I1002 19:42:48.053305 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.053621 kubelet[2768]: I1002 19:42:48.053323 2768 memory_manager.go:346] "RemoveStaleState removing state" podUID="c0f72afa-349b-4534-80fb-55a6b1bf7243" containerName="mount-cgroup" Oct 2 19:42:48.065379 systemd[1]: Created slice kubepods-burstable-pod80f80e60_4ea0_4ba1_b9fb_2b329e3465d6.slice. Oct 2 19:42:48.089292 kubelet[2768]: W1002 19:42:48.089227 2768 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:42:48.089456 kubelet[2768]: E1002 19:42:48.089307 2768 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:42:48.089456 kubelet[2768]: W1002 19:42:48.089421 2768 reflector.go:533] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:42:48.089648 kubelet[2768]: E1002 19:42:48.089471 2768 reflector.go:148] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:42:48.089648 kubelet[2768]: W1002 19:42:48.089591 2768 reflector.go:533] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:42:48.089648 kubelet[2768]: E1002 19:42:48.089642 2768 reflector.go:148] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:42:48.089912 kubelet[2768]: W1002 19:42:48.089767 2768 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:42:48.089912 kubelet[2768]: E1002 19:42:48.089819 2768 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-25-22" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-22' and this object Oct 2 19:42:48.161962 kubelet[2768]: I1002 19:42:48.161883 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-host-proc-sys-kernel\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162135 kubelet[2768]: I1002 19:42:48.161986 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-hostproc\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162135 kubelet[2768]: I1002 19:42:48.162040 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-ipsec-secrets\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162135 kubelet[2768]: I1002 19:42:48.162085 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-host-proc-sys-net\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162135 kubelet[2768]: I1002 19:42:48.162131 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-run\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162428 kubelet[2768]: I1002 19:42:48.162174 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-bpf-maps\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162428 kubelet[2768]: I1002 19:42:48.162220 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-clustermesh-secrets\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162428 kubelet[2768]: I1002 19:42:48.162267 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-49tm6\" (UniqueName: \"kubernetes.io/projected/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-kube-api-access-49tm6\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162428 kubelet[2768]: I1002 19:42:48.162314 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-cgroup\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162428 kubelet[2768]: I1002 19:42:48.162363 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-lib-modules\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162428 kubelet[2768]: I1002 19:42:48.162418 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-etc-cni-netd\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162938 kubelet[2768]: I1002 19:42:48.162463 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-hubble-tls\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162938 kubelet[2768]: I1002 19:42:48.162512 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-config-path\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162938 kubelet[2768]: I1002 19:42:48.162557 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cni-path\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:48.162938 kubelet[2768]: I1002 19:42:48.162607 2768 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-xtables-lock\") pod \"cilium-fgmf2\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " pod="kube-system/cilium-fgmf2" Oct 2 19:42:49.264486 kubelet[2768]: E1002 19:42:49.264446 2768 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:42:49.265219 kubelet[2768]: E1002 19:42:49.265191 2768 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-config-path podName:80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 nodeName:}" failed. No retries permitted until 2023-10-02 19:42:49.765157786 +0000 UTC m=+255.341330781 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-config-path") pod "cilium-fgmf2" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:42:49.265443 kubelet[2768]: E1002 19:42:49.264606 2768 secret.go:194] Couldn't get secret kube-system/cilium-ipsec-keys: failed to sync secret cache: timed out waiting for the condition Oct 2 19:42:49.265853 kubelet[2768]: E1002 19:42:49.265819 2768 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-ipsec-secrets podName:80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 nodeName:}" failed. No retries permitted until 2023-10-02 19:42:49.765752943 +0000 UTC m=+255.341925974 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-ipsec-secrets" (UniqueName: "kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-ipsec-secrets") pod "cilium-fgmf2" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:42:49.874149 env[1566]: time="2023-10-02T19:42:49.874077902Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-fgmf2,Uid:80f80e60-4ea0-4ba1-b9fb-2b329e3465d6,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:49.914524 env[1566]: time="2023-10-02T19:42:49.914404988Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:49.914859 env[1566]: time="2023-10-02T19:42:49.914774087Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:49.915087 env[1566]: time="2023-10-02T19:42:49.915020905Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:49.915906 env[1566]: time="2023-10-02T19:42:49.915792331Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e pid=3798 runtime=io.containerd.runc.v2 Oct 2 19:42:49.958190 systemd[1]: Started cri-containerd-efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e.scope. Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.008000 audit: BPF prog-id=134 op=LOAD Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=3798 pid=3807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:50.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566626137666139643630316666363362313332396262316234623630 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=3798 pid=3807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:50.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566626137666139643630316666363362313332396262316234623630 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit: BPF prog-id=135 op=LOAD Oct 2 19:42:50.009000 audit[3807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=3798 pid=3807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:50.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566626137666139643630316666363362313332396262316234623630 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.009000 audit: BPF prog-id=136 op=LOAD Oct 2 19:42:50.009000 audit[3807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=3798 pid=3807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:50.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566626137666139643630316666363362313332396262316234623630 Oct 2 19:42:50.010000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:42:50.010000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { perfmon } for pid=3807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit[3807]: AVC avc: denied { bpf } for pid=3807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:50.010000 audit: BPF prog-id=137 op=LOAD Oct 2 19:42:50.010000 audit[3807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=3798 pid=3807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:50.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566626137666139643630316666363362313332396262316234623630 Oct 2 19:42:50.050967 env[1566]: time="2023-10-02T19:42:50.050910863Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-fgmf2,Uid:80f80e60-4ea0-4ba1-b9fb-2b329e3465d6,Namespace:kube-system,Attempt:0,} returns sandbox id \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\"" Oct 2 19:42:50.060277 env[1566]: time="2023-10-02T19:42:50.060183264Z" level=info msg="CreateContainer within sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:42:50.081982 env[1566]: time="2023-10-02T19:42:50.081888973Z" level=info msg="CreateContainer within sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\"" Oct 2 19:42:50.083283 env[1566]: time="2023-10-02T19:42:50.083193252Z" level=info msg="StartContainer for \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\"" Oct 2 19:42:50.134517 systemd[1]: Started cri-containerd-e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c.scope. Oct 2 19:42:50.141205 kubelet[2768]: E1002 19:42:50.136828 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:50.178030 systemd[1]: cri-containerd-e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c.scope: Deactivated successfully. Oct 2 19:42:50.209599 env[1566]: time="2023-10-02T19:42:50.209495752Z" level=info msg="shim disconnected" id=e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c Oct 2 19:42:50.209599 env[1566]: time="2023-10-02T19:42:50.209586689Z" level=warning msg="cleaning up after shim disconnected" id=e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c namespace=k8s.io Oct 2 19:42:50.210006 env[1566]: time="2023-10-02T19:42:50.209609873Z" level=info msg="cleaning up dead shim" Oct 2 19:42:50.241144 env[1566]: time="2023-10-02T19:42:50.241065887Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3861 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:50.241653 env[1566]: time="2023-10-02T19:42:50.241540371Z" level=error msg="copy shim log" error="read /proc/self/fd/33: file already closed" Oct 2 19:42:50.242524 env[1566]: time="2023-10-02T19:42:50.242461222Z" level=error msg="Failed to pipe stdout of container \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\"" error="reading from a closed fifo" Oct 2 19:42:50.242787 env[1566]: time="2023-10-02T19:42:50.242556755Z" level=error msg="Failed to pipe stderr of container \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\"" error="reading from a closed fifo" Oct 2 19:42:50.247706 env[1566]: time="2023-10-02T19:42:50.247581482Z" level=error msg="StartContainer for \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:50.248312 kubelet[2768]: E1002 19:42:50.248251 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c" Oct 2 19:42:50.248577 kubelet[2768]: E1002 19:42:50.248404 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:50.248577 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:50.248577 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:42:50.248577 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-49tm6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:50.249731 kubelet[2768]: E1002 19:42:50.249568 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fgmf2" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 Oct 2 19:42:50.621452 env[1566]: time="2023-10-02T19:42:50.621390347Z" level=info msg="CreateContainer within sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:42:50.639707 env[1566]: time="2023-10-02T19:42:50.639613246Z" level=info msg="CreateContainer within sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\"" Oct 2 19:42:50.641172 env[1566]: time="2023-10-02T19:42:50.641075613Z" level=info msg="StartContainer for \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\"" Oct 2 19:42:50.685721 systemd[1]: Started cri-containerd-f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9.scope. Oct 2 19:42:50.724595 systemd[1]: cri-containerd-f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9.scope: Deactivated successfully. Oct 2 19:42:50.742618 env[1566]: time="2023-10-02T19:42:50.742549391Z" level=info msg="shim disconnected" id=f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9 Oct 2 19:42:50.743072 env[1566]: time="2023-10-02T19:42:50.743039691Z" level=warning msg="cleaning up after shim disconnected" id=f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9 namespace=k8s.io Oct 2 19:42:50.743215 env[1566]: time="2023-10-02T19:42:50.743187064Z" level=info msg="cleaning up dead shim" Oct 2 19:42:50.768901 env[1566]: time="2023-10-02T19:42:50.768837361Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3900 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:50.769617 env[1566]: time="2023-10-02T19:42:50.769517958Z" level=error msg="copy shim log" error="read /proc/self/fd/33: file already closed" Oct 2 19:42:50.770470 env[1566]: time="2023-10-02T19:42:50.769876785Z" level=error msg="Failed to pipe stdout of container \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\"" error="reading from a closed fifo" Oct 2 19:42:50.770712 env[1566]: time="2023-10-02T19:42:50.770102399Z" level=error msg="Failed to pipe stderr of container \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\"" error="reading from a closed fifo" Oct 2 19:42:50.775106 env[1566]: time="2023-10-02T19:42:50.775039574Z" level=error msg="StartContainer for \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:50.775844 kubelet[2768]: E1002 19:42:50.775540 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9" Oct 2 19:42:50.775844 kubelet[2768]: E1002 19:42:50.775743 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:50.775844 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:50.775844 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:42:50.775844 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-49tm6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:50.775844 kubelet[2768]: E1002 19:42:50.775806 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fgmf2" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 Oct 2 19:42:51.621044 kubelet[2768]: I1002 19:42:51.620993 2768 scope.go:115] "RemoveContainer" containerID="e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c" Oct 2 19:42:51.622091 kubelet[2768]: I1002 19:42:51.622059 2768 scope.go:115] "RemoveContainer" containerID="e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c" Oct 2 19:42:51.625538 env[1566]: time="2023-10-02T19:42:51.625485810Z" level=info msg="RemoveContainer for \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\"" Oct 2 19:42:51.629738 env[1566]: time="2023-10-02T19:42:51.628816243Z" level=info msg="RemoveContainer for \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\"" Oct 2 19:42:51.629738 env[1566]: time="2023-10-02T19:42:51.628983549Z" level=error msg="RemoveContainer for \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\" failed" error="failed to set removing state for container \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\": container is already in removing state" Oct 2 19:42:51.630740 kubelet[2768]: E1002 19:42:51.630064 2768 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\": container is already in removing state" containerID="e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c" Oct 2 19:42:51.630740 kubelet[2768]: E1002 19:42:51.630156 2768 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c": container is already in removing state; Skipping pod "cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6)" Oct 2 19:42:51.631059 kubelet[2768]: E1002 19:42:51.631014 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6)\"" pod="kube-system/cilium-fgmf2" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 Oct 2 19:42:51.635261 env[1566]: time="2023-10-02T19:42:51.635199453Z" level=info msg="RemoveContainer for \"e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c\" returns successfully" Oct 2 19:42:53.316392 kubelet[2768]: W1002 19:42:53.316345 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod80f80e60_4ea0_4ba1_b9fb_2b329e3465d6.slice/cri-containerd-e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c.scope WatchSource:0}: container "e95105e4140406ea2281243d6bccdaebdcd9583a1a3282ead415e85b33ca693c" in namespace "k8s.io": not found Oct 2 19:42:55.138065 kubelet[2768]: E1002 19:42:55.138029 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:56.424820 kubelet[2768]: W1002 19:42:56.424757 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod80f80e60_4ea0_4ba1_b9fb_2b329e3465d6.slice/cri-containerd-f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9.scope WatchSource:0}: task f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9 not found: not found Oct 2 19:43:00.139654 kubelet[2768]: E1002 19:43:00.139579 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:04.886612 env[1566]: time="2023-10-02T19:43:04.886528016Z" level=info msg="CreateContainer within sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:43:04.911255 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2586433238.mount: Deactivated successfully. Oct 2 19:43:04.922575 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1531827583.mount: Deactivated successfully. Oct 2 19:43:04.925737 env[1566]: time="2023-10-02T19:43:04.925577185Z" level=info msg="CreateContainer within sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\"" Oct 2 19:43:04.928485 env[1566]: time="2023-10-02T19:43:04.928381412Z" level=info msg="StartContainer for \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\"" Oct 2 19:43:04.986382 systemd[1]: Started cri-containerd-975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa.scope. Oct 2 19:43:05.028195 systemd[1]: cri-containerd-975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa.scope: Deactivated successfully. Oct 2 19:43:05.048768 env[1566]: time="2023-10-02T19:43:05.048659640Z" level=info msg="shim disconnected" id=975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa Oct 2 19:43:05.049062 env[1566]: time="2023-10-02T19:43:05.048770953Z" level=warning msg="cleaning up after shim disconnected" id=975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa namespace=k8s.io Oct 2 19:43:05.049062 env[1566]: time="2023-10-02T19:43:05.048793921Z" level=info msg="cleaning up dead shim" Oct 2 19:43:05.087507 env[1566]: time="2023-10-02T19:43:05.087432720Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3938 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:05.088036 env[1566]: time="2023-10-02T19:43:05.087939964Z" level=error msg="copy shim log" error="read /proc/self/fd/33: file already closed" Oct 2 19:43:05.089879 env[1566]: time="2023-10-02T19:43:05.089819597Z" level=error msg="Failed to pipe stdout of container \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\"" error="reading from a closed fifo" Oct 2 19:43:05.090410 env[1566]: time="2023-10-02T19:43:05.089996514Z" level=error msg="Failed to pipe stderr of container \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\"" error="reading from a closed fifo" Oct 2 19:43:05.092376 env[1566]: time="2023-10-02T19:43:05.092293629Z" level=error msg="StartContainer for \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:05.093053 kubelet[2768]: E1002 19:43:05.092791 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa" Oct 2 19:43:05.093053 kubelet[2768]: E1002 19:43:05.092951 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:05.093053 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:05.093053 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:43:05.093053 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-49tm6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:05.093053 kubelet[2768]: E1002 19:43:05.093015 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fgmf2" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 Oct 2 19:43:05.142528 kubelet[2768]: E1002 19:43:05.141391 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:05.667523 kubelet[2768]: I1002 19:43:05.667470 2768 scope.go:115] "RemoveContainer" containerID="f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9" Oct 2 19:43:05.668177 kubelet[2768]: I1002 19:43:05.668148 2768 scope.go:115] "RemoveContainer" containerID="f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9" Oct 2 19:43:05.671051 env[1566]: time="2023-10-02T19:43:05.670997861Z" level=info msg="RemoveContainer for \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\"" Oct 2 19:43:05.671795 env[1566]: time="2023-10-02T19:43:05.671735290Z" level=info msg="RemoveContainer for \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\"" Oct 2 19:43:05.671938 env[1566]: time="2023-10-02T19:43:05.671900615Z" level=error msg="RemoveContainer for \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\" failed" error="failed to set removing state for container \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\": container is already in removing state" Oct 2 19:43:05.672224 kubelet[2768]: E1002 19:43:05.672191 2768 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\": container is already in removing state" containerID="f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9" Oct 2 19:43:05.672399 kubelet[2768]: E1002 19:43:05.672376 2768 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9": container is already in removing state; Skipping pod "cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6)" Oct 2 19:43:05.672984 kubelet[2768]: E1002 19:43:05.672961 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6)\"" pod="kube-system/cilium-fgmf2" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 Oct 2 19:43:05.678448 env[1566]: time="2023-10-02T19:43:05.678389912Z" level=info msg="RemoveContainer for \"f87ba6b6447f26db1eb19c527b49bc21236c0a6f29a7cef134550e1be47a25a9\" returns successfully" Oct 2 19:43:05.902576 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa-rootfs.mount: Deactivated successfully. Oct 2 19:43:08.154432 kubelet[2768]: W1002 19:43:08.154379 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod80f80e60_4ea0_4ba1_b9fb_2b329e3465d6.slice/cri-containerd-975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa.scope WatchSource:0}: task 975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa not found: not found Oct 2 19:43:10.143896 kubelet[2768]: E1002 19:43:10.143849 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:15.145767 kubelet[2768]: E1002 19:43:15.145710 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:18.882981 kubelet[2768]: E1002 19:43:18.882923 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6)\"" pod="kube-system/cilium-fgmf2" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 Oct 2 19:43:20.147190 kubelet[2768]: E1002 19:43:20.147151 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:25.149684 kubelet[2768]: E1002 19:43:25.149625 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:28.443000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.446778 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:43:28.446873 kernel: audit: type=1400 audit(1696275808.443:1284): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.443000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869b80 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:28.469187 kernel: audit: type=1300 audit(1696275808.443:1284): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001869b80 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:28.469364 kernel: audit: type=1327 audit(1696275808.443:1284): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.444000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.489538 kernel: audit: type=1400 audit(1696275808.444:1285): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.489628 kernel: audit: type=1300 audit(1696275808.444:1285): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001898330 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:28.444000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001898330 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:28.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.512270 kernel: audit: type=1327 audit(1696275808.444:1285): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:29.949000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.949000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a16b5c0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:43:29.972298 kernel: audit: type=1400 audit(1696275809.949:1286): avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.972447 kernel: audit: type=1300 audit(1696275809.949:1286): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a16b5c0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:43:29.972526 kernel: audit: type=1327 audit(1696275809.949:1286): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:29.949000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:29.949000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.992313 kernel: audit: type=1400 audit(1696275809.949:1287): avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.949000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400dcd75a0 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:43:29.949000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:29.970000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.970000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a353590 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:43:29.970000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:29.970000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:29.970000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a353650 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:43:29.970000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:30.038000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:30.038000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a16b650 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:43:30.038000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:30.068000 audit[2640]: AVC avc: denied { watch } for pid=2640 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:30.068000 audit[2640]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400dcd7780 a2=fc6 a3=0 items=0 ppid=2505 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c811 key=(null) Oct 2 19:43:30.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:43:30.151472 kubelet[2768]: E1002 19:43:30.151438 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:33.886095 env[1566]: time="2023-10-02T19:43:33.885956331Z" level=info msg="CreateContainer within sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:43:33.904518 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1069323427.mount: Deactivated successfully. Oct 2 19:43:33.918340 env[1566]: time="2023-10-02T19:43:33.918256247Z" level=info msg="CreateContainer within sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc\"" Oct 2 19:43:33.919387 env[1566]: time="2023-10-02T19:43:33.918973299Z" level=info msg="StartContainer for \"881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc\"" Oct 2 19:43:33.983763 systemd[1]: Started cri-containerd-881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc.scope. Oct 2 19:43:34.032396 systemd[1]: cri-containerd-881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc.scope: Deactivated successfully. Oct 2 19:43:34.055133 env[1566]: time="2023-10-02T19:43:34.055062080Z" level=info msg="shim disconnected" id=881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc Oct 2 19:43:34.055495 env[1566]: time="2023-10-02T19:43:34.055463159Z" level=warning msg="cleaning up after shim disconnected" id=881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc namespace=k8s.io Oct 2 19:43:34.055618 env[1566]: time="2023-10-02T19:43:34.055589771Z" level=info msg="cleaning up dead shim" Oct 2 19:43:34.082910 env[1566]: time="2023-10-02T19:43:34.082844487Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3978 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:34Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:34.083587 env[1566]: time="2023-10-02T19:43:34.083509375Z" level=error msg="copy shim log" error="read /proc/self/fd/33: file already closed" Oct 2 19:43:34.084895 env[1566]: time="2023-10-02T19:43:34.084810482Z" level=error msg="Failed to pipe stdout of container \"881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc\"" error="reading from a closed fifo" Oct 2 19:43:34.085206 env[1566]: time="2023-10-02T19:43:34.085134136Z" level=error msg="Failed to pipe stderr of container \"881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc\"" error="reading from a closed fifo" Oct 2 19:43:34.087579 env[1566]: time="2023-10-02T19:43:34.087512836Z" level=error msg="StartContainer for \"881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:34.089735 kubelet[2768]: E1002 19:43:34.088105 2768 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc" Oct 2 19:43:34.089735 kubelet[2768]: E1002 19:43:34.088497 2768 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:34.089735 kubelet[2768]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:34.089735 kubelet[2768]: rm /hostbin/cilium-mount Oct 2 19:43:34.089735 kubelet[2768]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-49tm6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:34.089735 kubelet[2768]: E1002 19:43:34.088696 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fgmf2" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 Oct 2 19:43:34.740989 kubelet[2768]: I1002 19:43:34.740941 2768 scope.go:115] "RemoveContainer" containerID="975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa" Oct 2 19:43:34.741640 kubelet[2768]: I1002 19:43:34.741606 2768 scope.go:115] "RemoveContainer" containerID="975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa" Oct 2 19:43:34.744725 kubelet[2768]: I1002 19:43:34.744646 2768 scope.go:115] "RemoveContainer" containerID="975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa" Oct 2 19:43:34.745990 env[1566]: time="2023-10-02T19:43:34.745927068Z" level=info msg="RemoveContainer for \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\"" Oct 2 19:43:34.746689 env[1566]: time="2023-10-02T19:43:34.746616520Z" level=info msg="RemoveContainer for \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\"" Oct 2 19:43:34.746827 env[1566]: time="2023-10-02T19:43:34.746778773Z" level=error msg="RemoveContainer for \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\" failed" error="failed to set removing state for container \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\": container is already in removing state" Oct 2 19:43:34.747293 kubelet[2768]: E1002 19:43:34.747257 2768 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\": container is already in removing state" containerID="975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa" Oct 2 19:43:34.747506 kubelet[2768]: E1002 19:43:34.747482 2768 kuberuntime_gc.go:150] "Failed to remove container" err="rpc error: code = Unknown desc = failed to set removing state for container \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\": container is already in removing state" containerID="975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa" Oct 2 19:43:34.747842 env[1566]: time="2023-10-02T19:43:34.746618680Z" level=info msg="RemoveContainer for \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\"" Oct 2 19:43:34.749975 env[1566]: time="2023-10-02T19:43:34.749834350Z" level=error msg="RemoveContainer for \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\" failed" error="failed to set removing state for container \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\": container is already in removing state" Oct 2 19:43:34.752979 kubelet[2768]: E1002 19:43:34.752918 2768 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\": container is already in removing state" containerID="975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa" Oct 2 19:43:34.753361 kubelet[2768]: E1002 19:43:34.753305 2768 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa": container is already in removing state; Skipping pod "cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6)" Oct 2 19:43:34.754273 kubelet[2768]: E1002 19:43:34.754240 2768 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fgmf2_kube-system(80f80e60-4ea0-4ba1-b9fb-2b329e3465d6)\"" pod="kube-system/cilium-fgmf2" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 Oct 2 19:43:34.754479 env[1566]: time="2023-10-02T19:43:34.754254382Z" level=info msg="StopPodSandbox for \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\"" Oct 2 19:43:34.754479 env[1566]: time="2023-10-02T19:43:34.754393078Z" level=info msg="TearDown network for sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" successfully" Oct 2 19:43:34.754479 env[1566]: time="2023-10-02T19:43:34.754449827Z" level=info msg="StopPodSandbox for \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" returns successfully" Oct 2 19:43:34.762712 env[1566]: time="2023-10-02T19:43:34.756638867Z" level=info msg="RemoveContainer for \"975d1703c1fc730dd1b69db4936975049ab6d28c8224cb01ea48da6ed5d862aa\" returns successfully" Oct 2 19:43:34.762712 env[1566]: time="2023-10-02T19:43:34.759376093Z" level=info msg="RemovePodSandbox for \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\"" Oct 2 19:43:34.762712 env[1566]: time="2023-10-02T19:43:34.759434930Z" level=info msg="Forcibly stopping sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\"" Oct 2 19:43:34.762712 env[1566]: time="2023-10-02T19:43:34.759575018Z" level=info msg="TearDown network for sandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" successfully" Oct 2 19:43:34.771068 env[1566]: time="2023-10-02T19:43:34.770992180Z" level=info msg="RemovePodSandbox \"95da3f536f3ebe90d890b73dbf5a08adb703be89fa2ed7b3bbb8c85635ce7817\" returns successfully" Oct 2 19:43:34.771884 env[1566]: time="2023-10-02T19:43:34.771826317Z" level=info msg="StopPodSandbox for \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\"" Oct 2 19:43:34.772266 env[1566]: time="2023-10-02T19:43:34.772200179Z" level=info msg="TearDown network for sandbox \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\" successfully" Oct 2 19:43:34.772496 env[1566]: time="2023-10-02T19:43:34.772445724Z" level=info msg="StopPodSandbox for \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\" returns successfully" Oct 2 19:43:34.773207 env[1566]: time="2023-10-02T19:43:34.773166064Z" level=info msg="RemovePodSandbox for \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\"" Oct 2 19:43:34.773466 env[1566]: time="2023-10-02T19:43:34.773408922Z" level=info msg="Forcibly stopping sandbox \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\"" Oct 2 19:43:34.773715 env[1566]: time="2023-10-02T19:43:34.773659639Z" level=info msg="TearDown network for sandbox \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\" successfully" Oct 2 19:43:34.785382 env[1566]: time="2023-10-02T19:43:34.785320750Z" level=info msg="RemovePodSandbox \"9141224950bad23ab8067bdd91a35476d7715a86311a351073294caf7fa4f601\" returns successfully" Oct 2 19:43:34.898774 systemd[1]: run-containerd-runc-k8s.io-881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc-runc.s1XXGP.mount: Deactivated successfully. Oct 2 19:43:34.898943 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc-rootfs.mount: Deactivated successfully. Oct 2 19:43:35.020548 kubelet[2768]: W1002 19:43:35.019239 2768 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:43:35.132000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:35.134948 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:43:35.135067 kernel: audit: type=1400 audit(1696275815.132:1292): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:35.132000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010c4c60 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:35.156933 kernel: audit: type=1300 audit(1696275815.132:1292): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010c4c60 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:35.132000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:35.167867 kernel: audit: type=1327 audit(1696275815.132:1292): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:35.168296 kubelet[2768]: E1002 19:43:35.168256 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:35.137000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:35.177861 kernel: audit: type=1400 audit(1696275815.137:1293): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:35.137000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ef0920 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:35.190535 kernel: audit: type=1300 audit(1696275815.137:1293): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ef0920 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:35.190644 kernel: audit: type=1327 audit(1696275815.137:1293): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:35.137000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:35.137000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:35.210494 kernel: audit: type=1400 audit(1696275815.137:1294): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:35.210689 kernel: audit: type=1300 audit(1696275815.137:1294): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ef0940 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:35.137000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ef0940 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:35.137000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:35.233428 kernel: audit: type=1327 audit(1696275815.137:1294): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:35.233505 kernel: audit: type=1400 audit(1696275815.138:1295): avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:35.138000 audit[2623]: AVC avc: denied { watch } for pid=2623 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:35.138000 audit[2623]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010c4c80 a2=fc6 a3=0 items=0 ppid=2465 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:43:35.138000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:37.171409 kubelet[2768]: W1002 19:43:37.171326 2768 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod80f80e60_4ea0_4ba1_b9fb_2b329e3465d6.slice/cri-containerd-881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc.scope WatchSource:0}: task 881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc not found: not found Oct 2 19:43:40.170288 kubelet[2768]: E1002 19:43:40.170239 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:45.171885 kubelet[2768]: E1002 19:43:45.171806 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:49.790605 env[1566]: time="2023-10-02T19:43:49.790246827Z" level=info msg="StopPodSandbox for \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\"" Oct 2 19:43:49.790605 env[1566]: time="2023-10-02T19:43:49.790358319Z" level=info msg="Container to stop \"881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:43:49.794034 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e-shm.mount: Deactivated successfully. Oct 2 19:43:49.837000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:43:49.837330 systemd[1]: cri-containerd-efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e.scope: Deactivated successfully. Oct 2 19:43:49.840204 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:43:49.840361 kernel: audit: type=1334 audit(1696275829.837:1296): prog-id=134 op=UNLOAD Oct 2 19:43:49.843000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:43:49.849082 kernel: audit: type=1334 audit(1696275829.843:1297): prog-id=137 op=UNLOAD Oct 2 19:43:49.912961 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e-rootfs.mount: Deactivated successfully. Oct 2 19:43:49.919595 sshd[3778]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:49.923000 audit[3778]: USER_END pid=3778 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:49.930107 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:43:49.930488 systemd[1]: session-30.scope: Consumed 2.134s CPU time. Oct 2 19:43:49.931414 systemd[1]: sshd@29-172.31.25.22:22-139.178.89.65:38066.service: Deactivated successfully. Oct 2 19:43:49.935277 systemd-logind[1562]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:43:49.923000 audit[3778]: CRED_DISP pid=3778 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:49.938855 systemd-logind[1562]: Removed session 30. Oct 2 19:43:49.947067 kernel: audit: type=1106 audit(1696275829.923:1298): pid=3778 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:49.947246 kernel: audit: type=1104 audit(1696275829.923:1299): pid=3778 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:49.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.22:22-139.178.89.65:38066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:49.956698 kernel: audit: type=1131 audit(1696275829.928:1300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.22:22-139.178.89.65:38066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:49.975025 env[1566]: time="2023-10-02T19:43:49.974946371Z" level=info msg="shim disconnected" id=efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e Oct 2 19:43:49.975367 env[1566]: time="2023-10-02T19:43:49.975032628Z" level=warning msg="cleaning up after shim disconnected" id=efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e namespace=k8s.io Oct 2 19:43:49.975367 env[1566]: time="2023-10-02T19:43:49.975057984Z" level=info msg="cleaning up dead shim" Oct 2 19:43:50.011219 env[1566]: time="2023-10-02T19:43:50.011128025Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4015 runtime=io.containerd.runc.v2\n" Oct 2 19:43:50.013001 env[1566]: time="2023-10-02T19:43:50.012933482Z" level=info msg="TearDown network for sandbox \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" successfully" Oct 2 19:43:50.013001 env[1566]: time="2023-10-02T19:43:50.012993662Z" level=info msg="StopPodSandbox for \"efba7fa9d601ff63b1329bb1b4b60a6a4220eb3794ebaf622337816b35a0eb7e\" returns successfully" Oct 2 19:43:50.059969 kubelet[2768]: I1002 19:43:50.059828 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-xtables-lock\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.060741 kubelet[2768]: I1002 19:43:50.060704 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-bpf-maps\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.060956 kubelet[2768]: I1002 19:43:50.060928 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-clustermesh-secrets\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.061142 kubelet[2768]: I1002 19:43:50.061114 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-ipsec-secrets\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.061313 kubelet[2768]: I1002 19:43:50.059947 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.061448 kubelet[2768]: I1002 19:43:50.061420 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-config-path\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.061661 kubelet[2768]: I1002 19:43:50.061631 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cni-path\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.061895 kubelet[2768]: I1002 19:43:50.061869 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-run\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.063528 kubelet[2768]: W1002 19:43:50.063413 2768 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:43:50.063868 kubelet[2768]: I1002 19:43:50.063822 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-49tm6\" (UniqueName: \"kubernetes.io/projected/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-kube-api-access-49tm6\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.064033 kubelet[2768]: I1002 19:43:50.063999 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-etc-cni-netd\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.064111 kubelet[2768]: I1002 19:43:50.064081 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-hostproc\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.064199 kubelet[2768]: I1002 19:43:50.064132 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-host-proc-sys-kernel\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.064284 kubelet[2768]: I1002 19:43:50.064203 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-lib-modules\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.064358 kubelet[2768]: I1002 19:43:50.064285 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-hubble-tls\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.064436 kubelet[2768]: I1002 19:43:50.064399 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-host-proc-sys-net\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.064502 kubelet[2768]: I1002 19:43:50.064471 2768 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-cgroup\") pod \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\" (UID: \"80f80e60-4ea0-4ba1-b9fb-2b329e3465d6\") " Oct 2 19:43:50.064584 kubelet[2768]: I1002 19:43:50.064562 2768 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-xtables-lock\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.064725 kubelet[2768]: I1002 19:43:50.064641 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.064833 kubelet[2768]: I1002 19:43:50.062020 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.064833 kubelet[2768]: I1002 19:43:50.062816 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.064833 kubelet[2768]: I1002 19:43:50.062928 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cni-path" (OuterVolumeSpecName: "cni-path") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.065504 kubelet[2768]: I1002 19:43:50.065390 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.065752 kubelet[2768]: I1002 19:43:50.065530 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-hostproc" (OuterVolumeSpecName: "hostproc") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.065752 kubelet[2768]: I1002 19:43:50.065582 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.065752 kubelet[2768]: I1002 19:43:50.065731 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.066516 kubelet[2768]: I1002 19:43:50.066406 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:50.073249 kubelet[2768]: I1002 19:43:50.073172 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:43:50.079599 systemd[1]: var-lib-kubelet-pods-80f80e60\x2d4ea0\x2d4ba1\x2db9fb\x2d2b329e3465d6-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:50.087611 systemd[1]: var-lib-kubelet-pods-80f80e60\x2d4ea0\x2d4ba1\x2db9fb\x2d2b329e3465d6-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d49tm6.mount: Deactivated successfully. Oct 2 19:43:50.093471 kubelet[2768]: I1002 19:43:50.090102 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:50.092478 systemd[1]: var-lib-kubelet-pods-80f80e60\x2d4ea0\x2d4ba1\x2db9fb\x2d2b329e3465d6-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:50.094314 kubelet[2768]: I1002 19:43:50.094259 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-kube-api-access-49tm6" (OuterVolumeSpecName: "kube-api-access-49tm6") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "kube-api-access-49tm6". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:50.097909 kubelet[2768]: I1002 19:43:50.097844 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:50.101856 kubelet[2768]: I1002 19:43:50.101785 2768 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6" (UID: "80f80e60-4ea0-4ba1-b9fb-2b329e3465d6"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:50.165329 kubelet[2768]: I1002 19:43:50.165281 2768 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-hubble-tls\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.165555 kubelet[2768]: I1002 19:43:50.165530 2768 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-host-proc-sys-kernel\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.165774 kubelet[2768]: I1002 19:43:50.165751 2768 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-lib-modules\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.165913 kubelet[2768]: I1002 19:43:50.165892 2768 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-host-proc-sys-net\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.166042 kubelet[2768]: I1002 19:43:50.166021 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-cgroup\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.166231 kubelet[2768]: I1002 19:43:50.166208 2768 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-bpf-maps\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.166360 kubelet[2768]: I1002 19:43:50.166339 2768 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-clustermesh-secrets\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.166491 kubelet[2768]: I1002 19:43:50.166470 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-config-path\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.166619 kubelet[2768]: I1002 19:43:50.166598 2768 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cni-path\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.166773 kubelet[2768]: I1002 19:43:50.166752 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-ipsec-secrets\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.166931 kubelet[2768]: I1002 19:43:50.166909 2768 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-49tm6\" (UniqueName: \"kubernetes.io/projected/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-kube-api-access-49tm6\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.167069 kubelet[2768]: I1002 19:43:50.167047 2768 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-etc-cni-netd\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.167199 kubelet[2768]: I1002 19:43:50.167179 2768 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-cilium-run\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.167327 kubelet[2768]: I1002 19:43:50.167307 2768 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6-hostproc\") on node \"ip-172-31-25-22\" DevicePath \"\"" Oct 2 19:43:50.174411 kubelet[2768]: E1002 19:43:50.174370 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:50.780970 kubelet[2768]: I1002 19:43:50.780916 2768 scope.go:115] "RemoveContainer" containerID="881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc" Oct 2 19:43:50.786492 env[1566]: time="2023-10-02T19:43:50.786418696Z" level=info msg="RemoveContainer for \"881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc\"" Oct 2 19:43:50.792971 systemd[1]: var-lib-kubelet-pods-80f80e60\x2d4ea0\x2d4ba1\x2db9fb\x2d2b329e3465d6-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:43:50.796821 env[1566]: time="2023-10-02T19:43:50.796762303Z" level=info msg="RemoveContainer for \"881ff3fb11271e2f6d1164f0dbbe7cd4562d148264c62fd866446b31cb05b2bc\" returns successfully" Oct 2 19:43:50.799249 systemd[1]: Removed slice kubepods-burstable-pod80f80e60_4ea0_4ba1_b9fb_2b329e3465d6.slice. Oct 2 19:43:50.885565 kubelet[2768]: I1002 19:43:50.885520 2768 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=80f80e60-4ea0-4ba1-b9fb-2b329e3465d6 path="/var/lib/kubelet/pods/80f80e60-4ea0-4ba1-b9fb-2b329e3465d6/volumes" Oct 2 19:43:55.176305 kubelet[2768]: E1002 19:43:55.176258 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:00.178099 kubelet[2768]: E1002 19:44:00.178063 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:03.925665 systemd[1]: cri-containerd-1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d.scope: Deactivated successfully. Oct 2 19:44:03.926210 systemd[1]: cri-containerd-1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d.scope: Consumed 6.078s CPU time. Oct 2 19:44:03.929000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:44:03.929000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:44:03.935739 kernel: audit: type=1334 audit(1696275843.929:1301): prog-id=85 op=UNLOAD Oct 2 19:44:03.935963 kernel: audit: type=1334 audit(1696275843.929:1302): prog-id=108 op=UNLOAD Oct 2 19:44:03.977137 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d-rootfs.mount: Deactivated successfully. Oct 2 19:44:03.997428 env[1566]: time="2023-10-02T19:44:03.997364665Z" level=info msg="shim disconnected" id=1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d Oct 2 19:44:03.998259 env[1566]: time="2023-10-02T19:44:03.998219644Z" level=warning msg="cleaning up after shim disconnected" id=1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d namespace=k8s.io Oct 2 19:44:03.998400 env[1566]: time="2023-10-02T19:44:03.998371745Z" level=info msg="cleaning up dead shim" Oct 2 19:44:04.027040 env[1566]: time="2023-10-02T19:44:04.026984699Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4049 runtime=io.containerd.runc.v2\n" Oct 2 19:44:04.828065 kubelet[2768]: I1002 19:44:04.828011 2768 scope.go:115] "RemoveContainer" containerID="1a26b8114dbd02aed32bbadb51b9d038e7d7c36ed9b9f59458564c1f54be762d" Oct 2 19:44:04.833411 env[1566]: time="2023-10-02T19:44:04.833353868Z" level=info msg="CreateContainer within sandbox \"763bd11ad40fcd2f5e78fad031628fbd526304f86c351aa62b190073820342b6\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:44:04.851287 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount482459517.mount: Deactivated successfully. Oct 2 19:44:04.863642 env[1566]: time="2023-10-02T19:44:04.863559433Z" level=info msg="CreateContainer within sandbox \"763bd11ad40fcd2f5e78fad031628fbd526304f86c351aa62b190073820342b6\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"7b1e82f7ac20b8ed186eae7a823baeb61317d5e4426eed345c8e761e8b5e709e\"" Oct 2 19:44:04.864883 env[1566]: time="2023-10-02T19:44:04.864838002Z" level=info msg="StartContainer for \"7b1e82f7ac20b8ed186eae7a823baeb61317d5e4426eed345c8e761e8b5e709e\"" Oct 2 19:44:04.914823 systemd[1]: Started cri-containerd-7b1e82f7ac20b8ed186eae7a823baeb61317d5e4426eed345c8e761e8b5e709e.scope. Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977826 kernel: audit: type=1400 audit(1696275844.962:1303): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977970 kernel: audit: type=1400 audit(1696275844.962:1304): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.988969 kernel: audit: type=1400 audit(1696275844.962:1305): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.989106 kernel: audit: type=1400 audit(1696275844.962:1306): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:05.004393 kernel: audit: type=1400 audit(1696275844.962:1307): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:05.012207 kernel: audit: type=1400 audit(1696275844.962:1308): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:05.020451 kernel: audit: type=1400 audit(1696275844.962:1309): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:05.028834 kernel: audit: type=1400 audit(1696275844.962:1310): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.969000 audit: BPF prog-id=138 op=LOAD Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2465 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:04.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762316538326637616332306238656431383665616537613832336261 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2465 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:04.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762316538326637616332306238656431383665616537613832336261 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit: BPF prog-id=139 op=LOAD Oct 2 19:44:04.977000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2465 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:04.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762316538326637616332306238656431383665616537613832336261 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.977000 audit: BPF prog-id=140 op=LOAD Oct 2 19:44:04.977000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2465 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:04.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762316538326637616332306238656431383665616537613832336261 Oct 2 19:44:04.978000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:44:04.978000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:04.978000 audit: BPF prog-id=141 op=LOAD Oct 2 19:44:04.978000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2465 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:04.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762316538326637616332306238656431383665616537613832336261 Oct 2 19:44:05.054885 env[1566]: time="2023-10-02T19:44:05.054810188Z" level=info msg="StartContainer for \"7b1e82f7ac20b8ed186eae7a823baeb61317d5e4426eed345c8e761e8b5e709e\" returns successfully" Oct 2 19:44:05.179887 kubelet[2768]: E1002 19:44:05.179640 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:07.746000 audit[4080]: AVC avc: denied { watch } for pid=4080 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:07.746000 audit[4080]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ad6000 a2=fc6 a3=0 items=0 ppid=2465 pid=4080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:44:07.746000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:07.747000 audit[4080]: AVC avc: denied { watch } for pid=4080 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:07.747000 audit[4080]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001555c0 a2=fc6 a3=0 items=0 ppid=2465 pid=4080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c623,c811 key=(null) Oct 2 19:44:07.747000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:09.027445 systemd[1]: cri-containerd-1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7.scope: Deactivated successfully. Oct 2 19:44:09.027983 systemd[1]: cri-containerd-1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7.scope: Consumed 4.783s CPU time. Oct 2 19:44:09.031000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:44:09.034104 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 19:44:09.034227 kernel: audit: type=1334 audit(1696275849.031:1323): prog-id=93 op=UNLOAD Oct 2 19:44:09.031000 audit: BPF prog-id=107 op=UNLOAD Oct 2 19:44:09.039580 kernel: audit: type=1334 audit(1696275849.031:1324): prog-id=107 op=UNLOAD Oct 2 19:44:09.085353 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7-rootfs.mount: Deactivated successfully. Oct 2 19:44:09.107951 env[1566]: time="2023-10-02T19:44:09.107862063Z" level=info msg="shim disconnected" id=1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7 Oct 2 19:44:09.107951 env[1566]: time="2023-10-02T19:44:09.107943711Z" level=warning msg="cleaning up after shim disconnected" id=1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7 namespace=k8s.io Oct 2 19:44:09.108779 env[1566]: time="2023-10-02T19:44:09.107966787Z" level=info msg="cleaning up dead shim" Oct 2 19:44:09.134260 env[1566]: time="2023-10-02T19:44:09.134194799Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4110 runtime=io.containerd.runc.v2\n" Oct 2 19:44:09.843438 kubelet[2768]: I1002 19:44:09.843392 2768 scope.go:115] "RemoveContainer" containerID="1df2f807c44199b28cac4fd111ccceef70739d454b9a65300cd1c1e649bf52e7" Oct 2 19:44:09.846563 env[1566]: time="2023-10-02T19:44:09.846494766Z" level=info msg="CreateContainer within sandbox \"73667ba6ba9a485368acce84c66e0e42d2fd8daec04270108e9754425ed9b3ac\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:44:09.868401 env[1566]: time="2023-10-02T19:44:09.868337250Z" level=info msg="CreateContainer within sandbox \"73667ba6ba9a485368acce84c66e0e42d2fd8daec04270108e9754425ed9b3ac\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"e8b97d088bacd4e63b2f83a367a5a7e1758abcc116971472c3802d9d24e0dde4\"" Oct 2 19:44:09.869283 env[1566]: time="2023-10-02T19:44:09.869225710Z" level=info msg="StartContainer for \"e8b97d088bacd4e63b2f83a367a5a7e1758abcc116971472c3802d9d24e0dde4\"" Oct 2 19:44:09.917435 systemd[1]: Started cri-containerd-e8b97d088bacd4e63b2f83a367a5a7e1758abcc116971472c3802d9d24e0dde4.scope. Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979610 kernel: audit: type=1400 audit(1696275849.963:1325): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979751 kernel: audit: type=1400 audit(1696275849.963:1326): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979808 kernel: audit: type=1400 audit(1696275849.963:1327): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.987065 kernel: audit: type=1400 audit(1696275849.963:1328): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:10.003731 kernel: audit: type=1400 audit(1696275849.963:1329): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:10.016344 kernel: audit: type=1400 audit(1696275849.963:1330): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:10.016484 kernel: audit: type=1400 audit(1696275849.963:1331): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:10.031452 kernel: audit: type=1400 audit(1696275849.963:1332): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.963000 audit: BPF prog-id=142 op=LOAD Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2479 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:09.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538623937643038386261636434653633623266383361333637613561 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2479 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:09.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538623937643038386261636434653633623266383361333637613561 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.964000 audit: BPF prog-id=143 op=LOAD Oct 2 19:44:09.964000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2479 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:09.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538623937643038386261636434653633623266383361333637613561 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.971000 audit: BPF prog-id=144 op=LOAD Oct 2 19:44:09.971000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2479 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:09.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538623937643038386261636434653633623266383361333637613561 Oct 2 19:44:09.979000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:44:09.979000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:44:09.979000 audit: BPF prog-id=145 op=LOAD Oct 2 19:44:09.979000 audit[4132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2479 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:09.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538623937643038386261636434653633623266383361333637613561 Oct 2 19:44:10.068836 env[1566]: time="2023-10-02T19:44:10.068773892Z" level=info msg="StartContainer for \"e8b97d088bacd4e63b2f83a367a5a7e1758abcc116971472c3802d9d24e0dde4\" returns successfully" Oct 2 19:44:10.181211 kubelet[2768]: E1002 19:44:10.181054 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:12.243310 kubelet[2768]: E1002 19:44:12.243232 2768 controller.go:193] "Failed to update lease" err="Put \"https://172.31.25.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-22?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:44:15.182619 kubelet[2768]: E1002 19:44:15.182561 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:20.184530 kubelet[2768]: E1002 19:44:20.184495 2768 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:44:21.795258 kubelet[2768]: E1002 19:44:21.795199 2768 kubelet_node_status.go:540] "Error updating node status, will retry" err="failed to patch status \"{\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"type\\\":\\\"DiskPressure\\\"},{\\\"type\\\":\\\"PIDPressure\\\"},{\\\"type\\\":\\\"Ready\\\"}],\\\"conditions\\\":[{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:44:11Z\\\",\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:44:11Z\\\",\\\"type\\\":\\\"DiskPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:44:11Z\\\",\\\"type\\\":\\\"PIDPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T19:44:11Z\\\",\\\"type\\\":\\\"Ready\\\"}]}}\" for node \"ip-172-31-25-22\": Patch \"https://172.31.25.22:6443/api/v1/nodes/ip-172-31-25-22/status?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:44:22.244324 kubelet[2768]: E1002 19:44:22.244282 2768 controller.go:193] "Failed to update lease" err="Put \"https://172.31.25.22:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-22?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"