Oct 2 20:35:53.065994 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 20:35:53.066012 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 20:35:53.066021 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 20:35:53.066028 kernel: printk: bootconsole [pl11] enabled Oct 2 20:35:53.066033 kernel: efi: EFI v2.70 by EDK II Oct 2 20:35:53.066039 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef30118 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 20:35:53.066045 kernel: random: crng init done Oct 2 20:35:53.066050 kernel: ACPI: Early table checksum verification disabled Oct 2 20:35:53.066056 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 20:35:53.066061 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066067 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066073 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 20:35:53.066079 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066084 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066091 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066097 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066103 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066109 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066115 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 20:35:53.066121 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:35:53.066126 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 20:35:53.066132 kernel: NUMA: Failed to initialise from firmware Oct 2 20:35:53.066138 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 20:35:53.066143 kernel: NUMA: NODE_DATA [mem 0x1bf7f2900-0x1bf7f7fff] Oct 2 20:35:53.066149 kernel: Zone ranges: Oct 2 20:35:53.066155 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 20:35:53.066160 kernel: DMA32 empty Oct 2 20:35:53.066167 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 20:35:53.066173 kernel: Movable zone start for each node Oct 2 20:35:53.066179 kernel: Early memory node ranges Oct 2 20:35:53.066184 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 20:35:53.066190 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 20:35:53.066196 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 20:35:53.066201 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 20:35:53.066207 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 20:35:53.066213 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 20:35:53.066218 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 20:35:53.066224 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 20:35:53.066229 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 20:35:53.066236 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 20:35:53.066245 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 20:35:53.066251 kernel: psci: probing for conduit method from ACPI. Oct 2 20:35:53.066257 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 20:35:53.066263 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 20:35:53.066270 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 20:35:53.066276 kernel: psci: SMC Calling Convention v1.4 Oct 2 20:35:53.066282 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 20:35:53.066288 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 20:35:53.066294 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 20:35:53.066300 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 20:35:53.066306 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 20:35:53.066312 kernel: Detected PIPT I-cache on CPU0 Oct 2 20:35:53.066318 kernel: CPU features: detected: GIC system register CPU interface Oct 2 20:35:53.066324 kernel: CPU features: detected: Hardware dirty bit management Oct 2 20:35:53.066330 kernel: CPU features: detected: Spectre-BHB Oct 2 20:35:53.066336 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 20:35:53.066344 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 20:35:53.066350 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 20:35:53.066356 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 20:35:53.066362 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 20:35:53.066368 kernel: Policy zone: Normal Oct 2 20:35:53.066375 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 20:35:53.066382 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:35:53.066388 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 20:35:53.066394 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:35:53.066400 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:35:53.066407 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 20:35:53.066413 kernel: Memory: 3992064K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202096K reserved, 0K cma-reserved) Oct 2 20:35:53.066419 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:35:53.066426 kernel: trace event string verifier disabled Oct 2 20:35:53.066432 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 20:35:53.066438 kernel: rcu: RCU event tracing is enabled. Oct 2 20:35:53.066444 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:35:53.066450 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 20:35:53.066457 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:35:53.066463 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:35:53.066469 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:35:53.066476 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 20:35:53.066482 kernel: GICv3: 960 SPIs implemented Oct 2 20:35:53.066488 kernel: GICv3: 0 Extended SPIs implemented Oct 2 20:35:53.066494 kernel: GICv3: Distributor has no Range Selector support Oct 2 20:35:53.066500 kernel: Root IRQ handler: gic_handle_irq Oct 2 20:35:53.066506 kernel: GICv3: 16 PPIs implemented Oct 2 20:35:53.066512 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 20:35:53.066518 kernel: ITS: No ITS available, not enabling LPIs Oct 2 20:35:53.066524 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:35:53.066530 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 20:35:53.066536 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 20:35:53.066542 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 20:35:53.066549 kernel: Console: colour dummy device 80x25 Oct 2 20:35:53.066556 kernel: printk: console [tty1] enabled Oct 2 20:35:53.066562 kernel: ACPI: Core revision 20210730 Oct 2 20:35:53.066569 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 20:35:53.066575 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:35:53.066581 kernel: LSM: Security Framework initializing Oct 2 20:35:53.066587 kernel: SELinux: Initializing. Oct 2 20:35:53.066594 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 20:35:53.066600 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 20:35:53.066607 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 20:35:53.066614 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 20:35:53.066620 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:35:53.066626 kernel: Remapping and enabling EFI services. Oct 2 20:35:53.066632 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:35:53.066638 kernel: Detected PIPT I-cache on CPU1 Oct 2 20:35:53.066644 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 20:35:53.066651 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:35:53.066657 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 20:35:53.066664 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:35:53.066670 kernel: SMP: Total of 2 processors activated. Oct 2 20:35:53.066677 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 20:35:53.066683 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 20:35:53.066689 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 20:35:53.066696 kernel: CPU features: detected: CRC32 instructions Oct 2 20:35:53.066702 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 20:35:53.066708 kernel: CPU features: detected: LSE atomic instructions Oct 2 20:35:53.066714 kernel: CPU features: detected: Privileged Access Never Oct 2 20:35:53.066721 kernel: CPU: All CPU(s) started at EL1 Oct 2 20:35:53.066728 kernel: alternatives: patching kernel code Oct 2 20:35:53.066738 kernel: devtmpfs: initialized Oct 2 20:35:53.066746 kernel: KASLR enabled Oct 2 20:35:53.066753 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:35:53.066760 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:35:53.066766 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:35:53.066773 kernel: SMBIOS 3.1.0 present. Oct 2 20:35:53.066779 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 20:35:53.066786 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:35:53.066794 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 20:35:53.066801 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 20:35:53.066807 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 20:35:53.066814 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:35:53.066820 kernel: audit: type=2000 audit(0.089:1): state=initialized audit_enabled=0 res=1 Oct 2 20:35:53.066827 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:35:53.066833 kernel: cpuidle: using governor menu Oct 2 20:35:53.066842 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 20:35:53.072124 kernel: ASID allocator initialised with 32768 entries Oct 2 20:35:53.072138 kernel: ACPI: bus type PCI registered Oct 2 20:35:53.072145 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:35:53.072152 kernel: Serial: AMBA PL011 UART driver Oct 2 20:35:53.072158 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:35:53.072165 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 20:35:53.072172 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:35:53.072178 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 20:35:53.072189 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:35:53.072195 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 20:35:53.072202 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:35:53.072208 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:35:53.072215 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:35:53.072222 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:35:53.072228 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:35:53.072235 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:35:53.072241 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:35:53.072249 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:35:53.072256 kernel: ACPI: Interpreter enabled Oct 2 20:35:53.072262 kernel: ACPI: Using GIC for interrupt routing Oct 2 20:35:53.072269 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 20:35:53.072276 kernel: printk: console [ttyAMA0] enabled Oct 2 20:35:53.072282 kernel: printk: bootconsole [pl11] disabled Oct 2 20:35:53.072289 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 20:35:53.072296 kernel: iommu: Default domain type: Translated Oct 2 20:35:53.072302 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 20:35:53.072310 kernel: vgaarb: loaded Oct 2 20:35:53.072317 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:35:53.072324 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:35:53.072331 kernel: PTP clock support registered Oct 2 20:35:53.072337 kernel: Registered efivars operations Oct 2 20:35:53.072344 kernel: No ACPI PMU IRQ for CPU0 Oct 2 20:35:53.072350 kernel: No ACPI PMU IRQ for CPU1 Oct 2 20:35:53.072357 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 20:35:53.072363 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:35:53.072371 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:35:53.072378 kernel: pnp: PnP ACPI init Oct 2 20:35:53.072384 kernel: pnp: PnP ACPI: found 0 devices Oct 2 20:35:53.072391 kernel: NET: Registered PF_INET protocol family Oct 2 20:35:53.072398 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 20:35:53.072404 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 20:35:53.072411 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:35:53.072418 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:35:53.072424 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 20:35:53.072433 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 20:35:53.072440 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 20:35:53.072446 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 20:35:53.072453 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:35:53.072459 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:35:53.072466 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 20:35:53.072473 kernel: kvm [1]: HYP mode not available Oct 2 20:35:53.072479 kernel: Initialise system trusted keyrings Oct 2 20:35:53.072487 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 20:35:53.072495 kernel: Key type asymmetric registered Oct 2 20:35:53.072501 kernel: Asymmetric key parser 'x509' registered Oct 2 20:35:53.072508 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:35:53.072515 kernel: io scheduler mq-deadline registered Oct 2 20:35:53.072522 kernel: io scheduler kyber registered Oct 2 20:35:53.072528 kernel: io scheduler bfq registered Oct 2 20:35:53.072535 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:35:53.072541 kernel: thunder_xcv, ver 1.0 Oct 2 20:35:53.072548 kernel: thunder_bgx, ver 1.0 Oct 2 20:35:53.072555 kernel: nicpf, ver 1.0 Oct 2 20:35:53.072562 kernel: nicvf, ver 1.0 Oct 2 20:35:53.072725 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 20:35:53.072788 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T20:35:52 UTC (1696278952) Oct 2 20:35:53.072798 kernel: efifb: probing for efifb Oct 2 20:35:53.072805 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 20:35:53.072811 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 20:35:53.072818 kernel: efifb: scrolling: redraw Oct 2 20:35:53.072826 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 20:35:53.072833 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:35:53.072840 kernel: fb0: EFI VGA frame buffer device Oct 2 20:35:53.072846 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 20:35:53.072866 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 20:35:53.072872 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:35:53.072879 kernel: Segment Routing with IPv6 Oct 2 20:35:53.072886 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:35:53.072892 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:35:53.072901 kernel: Key type dns_resolver registered Oct 2 20:35:53.072907 kernel: registered taskstats version 1 Oct 2 20:35:53.072914 kernel: Loading compiled-in X.509 certificates Oct 2 20:35:53.072921 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 20:35:53.072927 kernel: Key type .fscrypt registered Oct 2 20:35:53.072934 kernel: Key type fscrypt-provisioning registered Oct 2 20:35:53.072941 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:35:53.072947 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:35:53.072954 kernel: ima: No architecture policies found Oct 2 20:35:53.072962 kernel: Freeing unused kernel memory: 34560K Oct 2 20:35:53.072968 kernel: Run /init as init process Oct 2 20:35:53.072975 kernel: with arguments: Oct 2 20:35:53.072982 kernel: /init Oct 2 20:35:53.072988 kernel: with environment: Oct 2 20:35:53.072994 kernel: HOME=/ Oct 2 20:35:53.073001 kernel: TERM=linux Oct 2 20:35:53.073007 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:35:53.073016 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:35:53.073026 systemd[1]: Detected virtualization microsoft. Oct 2 20:35:53.073033 systemd[1]: Detected architecture arm64. Oct 2 20:35:53.073040 systemd[1]: Running in initrd. Oct 2 20:35:53.073047 systemd[1]: No hostname configured, using default hostname. Oct 2 20:35:53.073053 systemd[1]: Hostname set to . Oct 2 20:35:53.073061 systemd[1]: Initializing machine ID from random generator. Oct 2 20:35:53.073068 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:35:53.073076 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:35:53.073083 systemd[1]: Reached target cryptsetup.target. Oct 2 20:35:53.073090 systemd[1]: Reached target paths.target. Oct 2 20:35:53.073097 systemd[1]: Reached target slices.target. Oct 2 20:35:53.073104 systemd[1]: Reached target swap.target. Oct 2 20:35:53.073111 systemd[1]: Reached target timers.target. Oct 2 20:35:53.073118 systemd[1]: Listening on iscsid.socket. Oct 2 20:35:53.073125 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:35:53.073133 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:35:53.073141 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:35:53.073148 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:35:53.073155 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:35:53.073162 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:35:53.073169 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:35:53.073176 systemd[1]: Reached target sockets.target. Oct 2 20:35:53.073183 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:35:53.073190 systemd[1]: Finished network-cleanup.service. Oct 2 20:35:53.073199 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:35:53.073206 systemd[1]: Starting systemd-journald.service... Oct 2 20:35:53.073213 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:35:53.073219 systemd[1]: Starting systemd-resolved.service... Oct 2 20:35:53.073226 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:35:53.073237 systemd-journald[276]: Journal started Oct 2 20:35:53.073277 systemd-journald[276]: Runtime Journal (/run/log/journal/59c698cfa8984c2fa9b6611840438cee) is 8.0M, max 78.6M, 70.6M free. Oct 2 20:35:53.064161 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 20:35:53.101869 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:35:53.114832 systemd[1]: Started systemd-journald.service. Oct 2 20:35:53.114889 kernel: Bridge firewalling registered Oct 2 20:35:53.114969 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 20:35:53.134599 kernel: audit: type=1130 audit(1696278953.114:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.115471 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:35:53.174581 kernel: SCSI subsystem initialized Oct 2 20:35:53.174601 kernel: audit: type=1130 audit(1696278953.141:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.142126 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:35:53.192222 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:35:53.153710 systemd-resolved[278]: Positive Trust Anchors: Oct 2 20:35:53.224931 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:35:53.224950 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:35:53.224965 kernel: audit: type=1130 audit(1696278953.206:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.153717 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:35:53.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.153744 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:35:53.304977 kernel: audit: type=1130 audit(1696278953.227:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.304998 kernel: audit: type=1130 audit(1696278953.256:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.173411 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 20:35:53.329400 kernel: audit: type=1130 audit(1696278953.309:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.223149 systemd[1]: Started systemd-resolved.service. Oct 2 20:35:53.223240 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 20:35:53.227952 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:35:53.256481 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:35:53.330431 systemd[1]: Reached target nss-lookup.target. Oct 2 20:35:53.343466 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:35:53.349835 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:35:53.367796 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:35:53.386380 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:35:53.424781 kernel: audit: type=1130 audit(1696278953.398:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.424803 kernel: audit: type=1130 audit(1696278953.423:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.399625 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:35:53.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.424699 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:35:53.483948 kernel: audit: type=1130 audit(1696278953.447:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.450612 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:35:53.494733 dracut-cmdline[299]: dracut-dracut-053 Oct 2 20:35:53.500194 dracut-cmdline[299]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 20:35:53.633878 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:35:53.644874 kernel: iscsi: registered transport (tcp) Oct 2 20:35:53.665029 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:35:53.665047 kernel: QLogic iSCSI HBA Driver Oct 2 20:35:53.748135 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:35:53.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.753428 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:35:53.816868 kernel: raid6: neonx8 gen() 13813 MB/s Oct 2 20:35:53.837859 kernel: raid6: neonx8 xor() 10830 MB/s Oct 2 20:35:53.857859 kernel: raid6: neonx4 gen() 13571 MB/s Oct 2 20:35:53.877857 kernel: raid6: neonx4 xor() 11319 MB/s Oct 2 20:35:53.898858 kernel: raid6: neonx2 gen() 12966 MB/s Oct 2 20:35:53.918862 kernel: raid6: neonx2 xor() 10311 MB/s Oct 2 20:35:53.938862 kernel: raid6: neonx1 gen() 10476 MB/s Oct 2 20:35:53.959860 kernel: raid6: neonx1 xor() 8781 MB/s Oct 2 20:35:53.979859 kernel: raid6: int64x8 gen() 6285 MB/s Oct 2 20:35:53.999858 kernel: raid6: int64x8 xor() 3547 MB/s Oct 2 20:35:54.020859 kernel: raid6: int64x4 gen() 7207 MB/s Oct 2 20:35:54.040858 kernel: raid6: int64x4 xor() 3856 MB/s Oct 2 20:35:54.061858 kernel: raid6: int64x2 gen() 6152 MB/s Oct 2 20:35:54.082859 kernel: raid6: int64x2 xor() 3320 MB/s Oct 2 20:35:54.102858 kernel: raid6: int64x1 gen() 5044 MB/s Oct 2 20:35:54.122863 kernel: raid6: int64x1 xor() 2646 MB/s Oct 2 20:35:54.122882 kernel: raid6: using algorithm neonx8 gen() 13813 MB/s Oct 2 20:35:54.131677 kernel: raid6: .... xor() 10830 MB/s, rmw enabled Oct 2 20:35:54.131686 kernel: raid6: using neon recovery algorithm Oct 2 20:35:54.153661 kernel: xor: measuring software checksum speed Oct 2 20:35:54.153683 kernel: 8regs : 17308 MB/sec Oct 2 20:35:54.157858 kernel: 32regs : 20744 MB/sec Oct 2 20:35:54.166225 kernel: arm64_neon : 27845 MB/sec Oct 2 20:35:54.166246 kernel: xor: using function: arm64_neon (27845 MB/sec) Oct 2 20:35:54.220869 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 20:35:54.238628 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:35:54.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:54.246000 audit: BPF prog-id=7 op=LOAD Oct 2 20:35:54.246000 audit: BPF prog-id=8 op=LOAD Oct 2 20:35:54.247343 systemd[1]: Starting systemd-udevd.service... Oct 2 20:35:54.267669 systemd-udevd[475]: Using default interface naming scheme 'v252'. Oct 2 20:35:54.272955 systemd[1]: Started systemd-udevd.service. Oct 2 20:35:54.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:54.290450 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:35:54.316397 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Oct 2 20:35:54.373277 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:35:54.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:54.378693 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:35:54.422074 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:35:54.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:54.488880 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 20:35:54.511170 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 20:35:54.511222 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 20:35:54.511232 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 20:35:54.526910 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 20:35:54.526960 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 20:35:54.530468 kernel: scsi host1: storvsc_host_t Oct 2 20:35:54.548572 kernel: scsi host0: storvsc_host_t Oct 2 20:35:54.548726 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 20:35:54.548736 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 20:35:54.548755 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 20:35:54.556648 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 20:35:54.591571 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 20:35:54.591876 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 20:35:54.602346 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 20:35:54.602492 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 20:35:54.602573 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 20:35:54.606379 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 20:35:54.606863 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 20:35:54.606982 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 20:35:54.619870 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:35:54.624877 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 20:35:54.685473 kernel: hv_netvsc 000d3a6e-e3c7-000d-3a6e-e3c7000d3a6e eth0: VF slot 1 added Oct 2 20:35:54.700496 kernel: hv_vmbus: registering driver hv_pci Oct 2 20:35:54.700540 kernel: hv_pci 1cd26789-7841-4517-ac28-4f39a5db3694: PCI VMBus probing: Using version 0x10004 Oct 2 20:35:54.716804 kernel: hv_pci 1cd26789-7841-4517-ac28-4f39a5db3694: PCI host bridge to bus 7841:00 Oct 2 20:35:54.716957 kernel: pci_bus 7841:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 20:35:54.717052 kernel: pci_bus 7841:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 20:35:54.920296 kernel: pci 7841:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 20:35:54.930018 kernel: pci 7841:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 20:35:54.951269 kernel: pci 7841:00:02.0: enabling Extended Tags Oct 2 20:35:54.975018 kernel: pci 7841:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 7841:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 20:35:54.975237 kernel: pci_bus 7841:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 20:35:54.975358 kernel: pci 7841:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 20:35:55.440875 kernel: mlx5_core 7841:00:02.0: firmware version: 16.31.2424 Oct 2 20:35:55.591387 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:35:55.622871 kernel: mlx5_core 7841:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 20:35:55.632319 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (540) Oct 2 20:35:55.651122 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:35:55.778532 kernel: hv_netvsc 000d3a6e-e3c7-000d-3a6e-e3c7000d3a6e eth0: VF registering: eth1 Oct 2 20:35:55.778711 kernel: mlx5_core 7841:00:02.0 eth1: joined to eth0 Oct 2 20:35:55.797874 kernel: mlx5_core 7841:00:02.0 enP30785s1: renamed from eth1 Oct 2 20:35:55.805705 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:35:55.811806 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:35:55.836735 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:35:55.842920 systemd[1]: Starting disk-uuid.service... Oct 2 20:35:55.868878 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:35:55.875875 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:35:56.886895 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:35:56.886944 disk-uuid[603]: The operation has completed successfully. Oct 2 20:35:56.962567 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:35:56.964988 systemd[1]: Finished disk-uuid.service. Oct 2 20:35:56.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:56.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:56.972103 systemd[1]: Starting verity-setup.service... Oct 2 20:35:57.016873 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 20:35:57.265346 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:35:57.271522 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:35:57.287564 systemd[1]: Finished verity-setup.service. Oct 2 20:35:57.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.300526 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 20:35:57.300546 kernel: audit: type=1130 audit(1696278957.295:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.363597 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:35:57.370886 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:35:57.367524 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:35:57.368263 systemd[1]: Starting ignition-setup.service... Oct 2 20:35:57.375824 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:35:57.411081 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:35:57.411118 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:35:57.411128 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:35:57.492582 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:35:57.548479 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:35:57.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.574000 audit: BPF prog-id=9 op=LOAD Oct 2 20:35:57.575593 systemd[1]: Starting systemd-networkd.service... Oct 2 20:35:57.599552 kernel: audit: type=1130 audit(1696278957.553:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.599576 kernel: audit: type=1334 audit(1696278957.574:22): prog-id=9 op=LOAD Oct 2 20:35:57.621976 systemd[1]: Finished ignition-setup.service. Oct 2 20:35:57.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.624116 systemd-networkd[849]: lo: Link UP Oct 2 20:35:57.678979 kernel: audit: type=1130 audit(1696278957.626:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.679001 kernel: audit: type=1130 audit(1696278957.628:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.624119 systemd-networkd[849]: lo: Gained carrier Oct 2 20:35:57.624802 systemd-networkd[849]: Enumeration completed Oct 2 20:35:57.626599 systemd[1]: Started systemd-networkd.service. Oct 2 20:35:57.645152 systemd[1]: Reached target network.target. Oct 2 20:35:57.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.645279 systemd-networkd[849]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:35:57.725259 iscsid[856]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:35:57.725259 iscsid[856]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 20:35:57.725259 iscsid[856]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:35:57.725259 iscsid[856]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:35:57.725259 iscsid[856]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:35:57.725259 iscsid[856]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:35:57.725259 iscsid[856]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:35:57.842340 kernel: audit: type=1130 audit(1696278957.697:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.842370 kernel: audit: type=1130 audit(1696278957.738:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.842386 kernel: audit: type=1130 audit(1696278957.819:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.670553 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:35:57.678080 systemd[1]: Starting iscsiuio.service... Oct 2 20:35:57.689896 systemd[1]: Started iscsiuio.service. Oct 2 20:35:57.701696 systemd[1]: Starting iscsid.service... Oct 2 20:35:57.728531 systemd[1]: Started iscsid.service. Oct 2 20:35:57.776084 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:35:57.814985 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:35:57.844674 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:35:57.854112 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:35:57.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.863805 systemd[1]: Reached target remote-fs.target. Oct 2 20:35:57.930093 kernel: audit: type=1130 audit(1696278957.904:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:57.875226 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:35:57.896707 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:35:57.972943 kernel: mlx5_core 7841:00:02.0 enP30785s1: Link up Oct 2 20:35:58.058574 kernel: hv_netvsc 000d3a6e-e3c7-000d-3a6e-e3c7000d3a6e eth0: Data path switched to VF: enP30785s1 Oct 2 20:35:58.059732 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:35:58.058898 systemd-networkd[849]: enP30785s1: Link UP Oct 2 20:35:58.059073 systemd-networkd[849]: eth0: Link UP Oct 2 20:35:58.059442 systemd-networkd[849]: eth0: Gained carrier Oct 2 20:35:58.071332 systemd-networkd[849]: enP30785s1: Gained carrier Oct 2 20:35:58.078945 systemd-networkd[849]: eth0: DHCPv4 address 10.200.20.4/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 20:35:59.549028 systemd-networkd[849]: eth0: Gained IPv6LL Oct 2 20:36:00.516240 ignition[852]: Ignition 2.14.0 Oct 2 20:36:00.516253 ignition[852]: Stage: fetch-offline Oct 2 20:36:00.516317 ignition[852]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:36:00.516341 ignition[852]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:36:00.615395 ignition[852]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:36:00.615563 ignition[852]: parsed url from cmdline: "" Oct 2 20:36:00.615566 ignition[852]: no config URL provided Oct 2 20:36:00.615571 ignition[852]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:36:00.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:00.628862 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:36:00.665272 kernel: audit: type=1130 audit(1696278960.637:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:00.615579 ignition[852]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:36:00.663795 systemd[1]: Starting ignition-fetch.service... Oct 2 20:36:00.615584 ignition[852]: failed to fetch config: resource requires networking Oct 2 20:36:00.616026 ignition[852]: Ignition finished successfully Oct 2 20:36:00.682590 ignition[875]: Ignition 2.14.0 Oct 2 20:36:00.682596 ignition[875]: Stage: fetch Oct 2 20:36:00.682705 ignition[875]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:36:00.682730 ignition[875]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:36:00.704062 ignition[875]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:36:00.704200 ignition[875]: parsed url from cmdline: "" Oct 2 20:36:00.704203 ignition[875]: no config URL provided Oct 2 20:36:00.704208 ignition[875]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:36:00.704216 ignition[875]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:36:00.704245 ignition[875]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 20:36:00.733146 ignition[875]: GET result: OK Oct 2 20:36:00.733255 ignition[875]: config has been read from IMDS userdata Oct 2 20:36:00.733303 ignition[875]: parsing config with SHA512: 1ee4349f53c31609e3fddf32bc633f289ef5ccb6fe4a777b162487c7d131c58b7a8dbb4f38cdf2c313e6c66bb62d07db80396c3bbb266f7c7a9b3a64557d0ee2 Oct 2 20:36:00.754772 unknown[875]: fetched base config from "system" Oct 2 20:36:00.758242 unknown[875]: fetched base config from "system" Oct 2 20:36:00.758757 ignition[875]: fetch: fetch complete Oct 2 20:36:00.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:00.758250 unknown[875]: fetched user config from "azure" Oct 2 20:36:00.758762 ignition[875]: fetch: fetch passed Oct 2 20:36:00.763445 systemd[1]: Finished ignition-fetch.service. Oct 2 20:36:00.758803 ignition[875]: Ignition finished successfully Oct 2 20:36:00.768903 systemd[1]: Starting ignition-kargs.service... Oct 2 20:36:00.790207 ignition[881]: Ignition 2.14.0 Oct 2 20:36:00.790213 ignition[881]: Stage: kargs Oct 2 20:36:00.800943 systemd[1]: Finished ignition-kargs.service. Oct 2 20:36:00.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:00.790331 ignition[881]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:36:00.808867 systemd[1]: Starting ignition-disks.service... Oct 2 20:36:00.790365 ignition[881]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:36:00.793625 ignition[881]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:36:00.798886 ignition[881]: kargs: kargs passed Oct 2 20:36:00.798930 ignition[881]: Ignition finished successfully Oct 2 20:36:00.829292 ignition[887]: Ignition 2.14.0 Oct 2 20:36:00.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:00.842141 systemd[1]: Finished ignition-disks.service. Oct 2 20:36:00.829297 ignition[887]: Stage: disks Oct 2 20:36:00.846472 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:36:00.829407 ignition[887]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:36:00.853867 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:36:00.829430 ignition[887]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:36:00.862461 systemd[1]: Reached target local-fs.target. Oct 2 20:36:00.832870 ignition[887]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:36:00.869189 systemd[1]: Reached target sysinit.target. Oct 2 20:36:00.838347 ignition[887]: disks: disks passed Oct 2 20:36:00.877681 systemd[1]: Reached target basic.target. Oct 2 20:36:00.838413 ignition[887]: Ignition finished successfully Oct 2 20:36:00.888590 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:36:00.959142 systemd-fsck[895]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 20:36:00.970409 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:36:00.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:00.979106 systemd[1]: Mounting sysroot.mount... Oct 2 20:36:01.007352 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:36:01.003956 systemd[1]: Mounted sysroot.mount. Oct 2 20:36:01.008000 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:36:01.046437 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:36:01.051063 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 20:36:01.055447 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:36:01.055481 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:36:01.061166 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:36:01.104735 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:36:01.114347 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:36:01.142548 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (906) Oct 2 20:36:01.142586 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:36:01.142596 initrd-setup-root[911]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:36:01.154718 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:36:01.159241 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:36:01.163511 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:36:01.184915 initrd-setup-root[937]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:36:01.198961 initrd-setup-root[945]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:36:01.212862 initrd-setup-root[953]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:36:01.642261 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:36:01.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:01.647624 systemd[1]: Starting ignition-mount.service... Oct 2 20:36:01.655053 systemd[1]: Starting sysroot-boot.service... Oct 2 20:36:01.676510 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:36:01.676606 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:36:01.697286 systemd[1]: Finished sysroot-boot.service. Oct 2 20:36:01.705893 ignition[973]: INFO : Ignition 2.14.0 Oct 2 20:36:01.705893 ignition[973]: INFO : Stage: mount Oct 2 20:36:01.705893 ignition[973]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:36:01.705893 ignition[973]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:36:01.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:01.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:01.714488 systemd[1]: Finished ignition-mount.service. Oct 2 20:36:01.741757 ignition[973]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:36:01.741757 ignition[973]: INFO : mount: mount passed Oct 2 20:36:01.741757 ignition[973]: INFO : Ignition finished successfully Oct 2 20:36:02.319083 coreos-metadata[905]: Oct 02 20:36:02.318 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 20:36:02.329870 coreos-metadata[905]: Oct 02 20:36:02.329 INFO Fetch successful Oct 2 20:36:02.368807 coreos-metadata[905]: Oct 02 20:36:02.368 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 20:36:02.395254 coreos-metadata[905]: Oct 02 20:36:02.395 INFO Fetch successful Oct 2 20:36:02.400889 coreos-metadata[905]: Oct 02 20:36:02.400 INFO wrote hostname ci-3510.3.0-a-1cb893e9b8 to /sysroot/etc/hostname Oct 2 20:36:02.410810 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 20:36:02.442566 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 20:36:02.442588 kernel: audit: type=1130 audit(1696278962.415:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:02.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:02.416623 systemd[1]: Starting ignition-files.service... Oct 2 20:36:02.448167 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:36:02.468872 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (984) Oct 2 20:36:02.480217 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:36:02.480233 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:36:02.480242 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:36:02.490353 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:36:02.510141 ignition[1003]: INFO : Ignition 2.14.0 Oct 2 20:36:02.515876 ignition[1003]: INFO : Stage: files Oct 2 20:36:02.515876 ignition[1003]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:36:02.515876 ignition[1003]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:36:02.540972 ignition[1003]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:36:02.547922 ignition[1003]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:36:02.557352 ignition[1003]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:36:02.557352 ignition[1003]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:36:02.619142 ignition[1003]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:36:02.627034 ignition[1003]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:36:02.641983 unknown[1003]: wrote ssh authorized keys file for user: core Oct 2 20:36:02.647262 ignition[1003]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:36:02.656142 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 20:36:02.666603 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 20:36:02.802108 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:36:03.088442 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 20:36:03.105128 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 20:36:03.105128 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 20:36:03.105128 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 20:36:03.176917 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:36:03.321341 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 20:36:03.337268 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 20:36:03.337268 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:36:03.337268 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Oct 2 20:36:03.441301 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:36:04.550866 kernel: mlx5_core 7841:00:02.0: poll_health:739:(pid 0): device's health compromised - reached miss count Oct 2 20:36:04.884024 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Oct 2 20:36:04.900048 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:36:04.900048 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:36:04.900048 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Oct 2 20:36:04.942491 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:36:07.486720 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Oct 2 20:36:07.502922 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:36:07.502922 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:36:07.502922 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Oct 2 20:36:07.550563 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:36:08.887155 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Oct 2 20:36:08.903321 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:36:08.903321 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:36:08.903321 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:36:08.903321 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:36:08.903321 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 20:36:09.176391 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:36:09.472228 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:36:09.482939 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:36:09.482939 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:36:09.482939 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:36:09.482939 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:36:09.482939 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:36:09.482939 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:36:09.556381 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1008) Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem979037556" Oct 2 20:36:09.556403 ignition[1003]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem979037556": device or resource busy Oct 2 20:36:09.556403 ignition[1003]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem979037556", trying btrfs: device or resource busy Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem979037556" Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem979037556" Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem979037556" Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem979037556" Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1543998918" Oct 2 20:36:09.556403 ignition[1003]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1543998918": device or resource busy Oct 2 20:36:09.556403 ignition[1003]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1543998918", trying btrfs: device or resource busy Oct 2 20:36:09.556403 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1543998918" Oct 2 20:36:09.819353 kernel: audit: type=1130 audit(1696278969.584:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.819385 kernel: audit: type=1130 audit(1696278969.661:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.819396 kernel: audit: type=1131 audit(1696278969.679:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.819407 kernel: audit: type=1130 audit(1696278969.718:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.819528 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1543998918" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem1543998918" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem1543998918" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(18): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(18): op(19): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(18): op(19): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(18): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:36:09.819528 ignition[1003]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:36:10.114253 kernel: audit: type=1130 audit(1696278969.823:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.114288 kernel: audit: type=1131 audit(1696278969.851:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.114299 kernel: audit: type=1130 audit(1696278969.964:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.114308 kernel: audit: type=1131 audit(1696278970.061:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.568232 systemd[1]: Finished ignition-files.service. Oct 2 20:36:10.124526 ignition[1003]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:36:10.124526 ignition[1003]: INFO : files: op(1c): [started] setting preset to enabled for "waagent.service" Oct 2 20:36:10.124526 ignition[1003]: INFO : files: op(1c): [finished] setting preset to enabled for "waagent.service" Oct 2 20:36:10.124526 ignition[1003]: INFO : files: op(1d): [started] setting preset to enabled for "nvidia.service" Oct 2 20:36:10.124526 ignition[1003]: INFO : files: op(1d): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:36:10.124526 ignition[1003]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:36:10.124526 ignition[1003]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:36:10.124526 ignition[1003]: INFO : files: files passed Oct 2 20:36:10.124526 ignition[1003]: INFO : Ignition finished successfully Oct 2 20:36:10.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.587883 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:36:10.276179 initrd-setup-root-after-ignition[1028]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:36:10.310145 kernel: audit: type=1131 audit(1696278970.240:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.310169 kernel: audit: type=1131 audit(1696278970.280:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.621950 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:36:10.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.630484 systemd[1]: Starting ignition-quench.service... Oct 2 20:36:10.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.657047 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:36:10.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.657145 systemd[1]: Finished ignition-quench.service. Oct 2 20:36:09.713846 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:36:09.719342 systemd[1]: Reached target ignition-complete.target. Oct 2 20:36:10.374245 iscsid[856]: iscsid shutting down. Oct 2 20:36:09.763119 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:36:10.386878 ignition[1041]: INFO : Ignition 2.14.0 Oct 2 20:36:10.386878 ignition[1041]: INFO : Stage: umount Oct 2 20:36:10.386878 ignition[1041]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:36:10.386878 ignition[1041]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:36:10.386878 ignition[1041]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:36:10.386878 ignition[1041]: INFO : umount: umount passed Oct 2 20:36:10.386878 ignition[1041]: INFO : Ignition finished successfully Oct 2 20:36:10.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.810841 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:36:10.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.810976 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:36:10.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.851650 systemd[1]: Reached target initrd-fs.target. Oct 2 20:36:09.865089 systemd[1]: Reached target initrd.target. Oct 2 20:36:10.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.895272 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:36:10.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.905357 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:36:10.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.948626 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:36:10.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:09.965353 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:36:10.006442 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:36:10.016836 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:36:10.034621 systemd[1]: Stopped target timers.target. Oct 2 20:36:10.050121 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:36:10.050187 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:36:10.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.062310 systemd[1]: Stopped target initrd.target. Oct 2 20:36:10.093650 systemd[1]: Stopped target basic.target. Oct 2 20:36:10.106069 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:36:10.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.119351 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:36:10.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.129690 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:36:10.146470 systemd[1]: Stopped target remote-fs.target. Oct 2 20:36:10.160190 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:36:10.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.174298 systemd[1]: Stopped target sysinit.target. Oct 2 20:36:10.188072 systemd[1]: Stopped target local-fs.target. Oct 2 20:36:10.201943 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:36:10.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.217141 systemd[1]: Stopped target swap.target. Oct 2 20:36:10.231574 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:36:10.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.231641 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:36:10.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.240907 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:36:10.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.270258 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:36:10.270315 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:36:10.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.281207 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:36:10.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.281258 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:36:10.728000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:36:10.316144 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:36:10.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.316189 systemd[1]: Stopped ignition-files.service. Oct 2 20:36:10.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.331909 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 20:36:10.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.331949 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 20:36:10.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.346984 systemd[1]: Stopping ignition-mount.service... Oct 2 20:36:10.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.375226 systemd[1]: Stopping iscsid.service... Oct 2 20:36:10.381433 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:36:10.381512 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:36:10.395368 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:36:10.412931 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:36:10.413002 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:36:10.432383 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:36:10.834924 kernel: hv_netvsc 000d3a6e-e3c7-000d-3a6e-e3c7000d3a6e eth0: Data path switched from VF: enP30785s1 Oct 2 20:36:10.432439 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:36:10.438508 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:36:10.438619 systemd[1]: Stopped iscsid.service. Oct 2 20:36:10.453174 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:36:10.453575 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:36:10.453659 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:36:10.461604 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:36:10.461684 systemd[1]: Stopped ignition-mount.service. Oct 2 20:36:10.472506 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:36:10.472548 systemd[1]: Stopped ignition-disks.service. Oct 2 20:36:10.486700 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:36:10.486749 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:36:10.495121 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:36:10.495154 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:36:10.506785 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:36:10.506821 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:36:10.516414 systemd[1]: Stopped target paths.target. Oct 2 20:36:10.527915 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:36:10.531886 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:36:10.537434 systemd[1]: Stopped target slices.target. Oct 2 20:36:10.545905 systemd[1]: Stopped target sockets.target. Oct 2 20:36:10.554786 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:36:10.554836 systemd[1]: Closed iscsid.socket. Oct 2 20:36:10.561966 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:36:10.562007 systemd[1]: Stopped ignition-setup.service. Oct 2 20:36:10.570950 systemd[1]: Stopping iscsiuio.service... Oct 2 20:36:10.583093 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:36:10.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.583207 systemd[1]: Stopped iscsiuio.service. Oct 2 20:36:10.590904 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:36:10.590991 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:36:10.599365 systemd[1]: Stopped target network.target. Oct 2 20:36:10.607833 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:36:10.607875 systemd[1]: Closed iscsiuio.socket. Oct 2 20:36:10.616122 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:36:10.616165 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:36:11.021919 systemd-journald[276]: Received SIGTERM from PID 1 (systemd). Oct 2 20:36:10.625053 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:36:10.632671 systemd-networkd[849]: eth0: DHCPv6 lease lost Oct 2 20:36:11.021000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:36:10.634269 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:36:10.642512 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:36:10.642614 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:36:10.651041 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:36:10.651072 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:36:10.661106 systemd[1]: Stopping network-cleanup.service... Oct 2 20:36:10.669514 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:36:10.669571 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:36:10.674645 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:36:10.674720 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:36:10.688176 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:36:10.688214 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:36:10.693121 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:36:10.701581 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 20:36:10.703435 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:36:10.703546 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:36:10.710651 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:36:10.710773 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:36:10.719539 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:36:10.719585 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:36:10.730777 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:36:10.730815 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:36:10.735550 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:36:10.735601 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:36:10.745147 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:36:10.745186 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:36:10.754775 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:36:10.754816 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:36:10.764380 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:36:10.775548 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:36:10.775605 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:36:10.785352 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:36:10.785439 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:36:10.950457 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:36:10.950570 systemd[1]: Stopped network-cleanup.service. Oct 2 20:36:10.958294 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:36:10.967679 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:36:10.988334 systemd[1]: Switching root. Oct 2 20:36:11.022995 systemd-journald[276]: Journal stopped Oct 2 20:36:22.103754 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:36:22.103774 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:36:22.103784 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:36:22.103794 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:36:22.103801 kernel: SELinux: policy capability open_perms=1 Oct 2 20:36:22.103809 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:36:22.103818 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:36:22.103826 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:36:22.103833 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:36:22.103841 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:36:22.103860 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:36:22.103870 systemd[1]: Successfully loaded SELinux policy in 260.132ms. Oct 2 20:36:22.103880 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 25.389ms. Oct 2 20:36:22.103890 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:36:22.103900 systemd[1]: Detected virtualization microsoft. Oct 2 20:36:22.103909 systemd[1]: Detected architecture arm64. Oct 2 20:36:22.103918 systemd[1]: Detected first boot. Oct 2 20:36:22.103927 systemd[1]: Hostname set to . Oct 2 20:36:22.103935 systemd[1]: Initializing machine ID from random generator. Oct 2 20:36:22.103944 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:36:22.103953 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:36:22.103963 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:36:22.103974 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:36:22.103983 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 20:36:22.103992 kernel: audit: type=1334 audit(1696278981.392:88): prog-id=12 op=LOAD Oct 2 20:36:22.104000 kernel: audit: type=1334 audit(1696278981.392:89): prog-id=3 op=UNLOAD Oct 2 20:36:22.104008 kernel: audit: type=1334 audit(1696278981.398:90): prog-id=13 op=LOAD Oct 2 20:36:22.104016 kernel: audit: type=1334 audit(1696278981.403:91): prog-id=14 op=LOAD Oct 2 20:36:22.104025 kernel: audit: type=1334 audit(1696278981.403:92): prog-id=4 op=UNLOAD Oct 2 20:36:22.104035 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:36:22.104043 kernel: audit: type=1334 audit(1696278981.403:93): prog-id=5 op=UNLOAD Oct 2 20:36:22.104051 kernel: audit: type=1334 audit(1696278981.409:94): prog-id=15 op=LOAD Oct 2 20:36:22.104060 kernel: audit: type=1334 audit(1696278981.409:95): prog-id=12 op=UNLOAD Oct 2 20:36:22.104068 kernel: audit: type=1334 audit(1696278981.415:96): prog-id=16 op=LOAD Oct 2 20:36:22.104076 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:36:22.104085 kernel: audit: type=1334 audit(1696278981.420:97): prog-id=17 op=LOAD Oct 2 20:36:22.104095 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:36:22.104104 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:36:22.104113 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:36:22.104122 systemd[1]: Created slice system-getty.slice. Oct 2 20:36:22.104133 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:36:22.104143 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:36:22.104152 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:36:22.104163 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:36:22.104172 systemd[1]: Created slice user.slice. Oct 2 20:36:22.104183 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:36:22.104192 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:36:22.104201 systemd[1]: Set up automount boot.automount. Oct 2 20:36:22.104210 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:36:22.104219 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:36:22.104228 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:36:22.104237 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:36:22.104246 systemd[1]: Reached target integritysetup.target. Oct 2 20:36:22.104254 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:36:22.104265 systemd[1]: Reached target remote-fs.target. Oct 2 20:36:22.104274 systemd[1]: Reached target slices.target. Oct 2 20:36:22.104283 systemd[1]: Reached target swap.target. Oct 2 20:36:22.104292 systemd[1]: Reached target torcx.target. Oct 2 20:36:22.104301 systemd[1]: Reached target veritysetup.target. Oct 2 20:36:22.104310 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:36:22.104318 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:36:22.104327 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:36:22.104338 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:36:22.104348 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:36:22.104358 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:36:22.104367 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:36:22.104378 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:36:22.104387 systemd[1]: Mounting media.mount... Oct 2 20:36:22.104396 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:36:22.104405 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:36:22.104415 systemd[1]: Mounting tmp.mount... Oct 2 20:36:22.104424 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:36:22.104434 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:36:22.104443 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:36:22.104452 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:36:22.104462 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:36:22.104471 systemd[1]: Starting modprobe@drm.service... Oct 2 20:36:22.104480 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:36:22.104490 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:36:22.104499 systemd[1]: Starting modprobe@loop.service... Oct 2 20:36:22.104508 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:36:22.104518 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:36:22.104527 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:36:22.104537 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:36:22.104547 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:36:22.104557 systemd[1]: Stopped systemd-journald.service. Oct 2 20:36:22.104566 kernel: loop: module loaded Oct 2 20:36:22.104575 systemd[1]: systemd-journald.service: Consumed 3.127s CPU time. Oct 2 20:36:22.104584 systemd[1]: Starting systemd-journald.service... Oct 2 20:36:22.104593 kernel: fuse: init (API version 7.34) Oct 2 20:36:22.104601 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:36:22.104610 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:36:22.104620 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:36:22.104630 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:36:22.104639 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:36:22.104648 systemd[1]: Stopped verity-setup.service. Oct 2 20:36:22.104657 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:36:22.104666 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:36:22.104675 systemd[1]: Mounted media.mount. Oct 2 20:36:22.104684 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:36:22.104693 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:36:22.104702 systemd[1]: Mounted tmp.mount. Oct 2 20:36:22.104713 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:36:22.104725 systemd-journald[1173]: Journal started Oct 2 20:36:22.104759 systemd-journald[1173]: Runtime Journal (/run/log/journal/6f91fbaf0f8c496885307b47f14aa29f) is 8.0M, max 78.6M, 70.6M free. Oct 2 20:36:13.183000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:36:13.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:36:13.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:36:13.899000 audit: BPF prog-id=10 op=LOAD Oct 2 20:36:13.899000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:36:13.899000 audit: BPF prog-id=11 op=LOAD Oct 2 20:36:13.899000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:36:21.392000 audit: BPF prog-id=12 op=LOAD Oct 2 20:36:21.392000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:36:21.398000 audit: BPF prog-id=13 op=LOAD Oct 2 20:36:21.403000 audit: BPF prog-id=14 op=LOAD Oct 2 20:36:21.403000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:36:21.403000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:36:21.409000 audit: BPF prog-id=15 op=LOAD Oct 2 20:36:21.409000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:36:21.415000 audit: BPF prog-id=16 op=LOAD Oct 2 20:36:21.420000 audit: BPF prog-id=17 op=LOAD Oct 2 20:36:21.420000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:36:21.420000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:36:21.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:21.453000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:36:21.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:21.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:21.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:21.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:21.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:21.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:21.960000 audit: BPF prog-id=18 op=LOAD Oct 2 20:36:21.960000 audit: BPF prog-id=19 op=LOAD Oct 2 20:36:21.960000 audit: BPF prog-id=20 op=LOAD Oct 2 20:36:21.960000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:36:21.960000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:36:22.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.101000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:36:22.101000 audit[1173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffcb75f2c0 a2=4000 a3=1 items=0 ppid=1 pid=1173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:22.101000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:36:14.997350 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:36:21.392360 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:36:15.051307 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:36:21.421920 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:36:15.051341 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:36:21.422328 systemd[1]: systemd-journald.service: Consumed 3.127s CPU time. Oct 2 20:36:15.051390 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:36:15.051400 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:36:15.051432 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:36:15.051444 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:36:15.051640 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:36:15.051672 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:36:15.051683 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:36:15.052166 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:36:15.052199 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:36:15.052216 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:36:15.052230 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:36:15.052247 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:36:15.052259 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:15Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:36:20.514155 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:20Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:36:20.514415 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:20Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:36:20.514513 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:20Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:36:20.514663 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:20Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:36:20.514711 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:20Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:36:20.514764 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T20:36:20Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:36:22.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.119652 systemd[1]: Started systemd-journald.service. Oct 2 20:36:22.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.120469 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:36:22.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.125460 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:36:22.125579 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:36:22.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.130485 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:36:22.130605 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:36:22.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.135458 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:36:22.135571 systemd[1]: Finished modprobe@drm.service. Oct 2 20:36:22.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.140288 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:36:22.140400 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:36:22.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.145881 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:36:22.146001 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:36:22.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.150855 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:36:22.150966 systemd[1]: Finished modprobe@loop.service. Oct 2 20:36:22.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.158306 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:36:22.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.163386 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:36:22.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.168732 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:36:22.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.174518 systemd[1]: Reached target network-pre.target. Oct 2 20:36:22.180562 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:36:22.186066 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:36:22.191135 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:36:22.222580 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:36:22.228312 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:36:22.233067 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:36:22.234108 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:36:22.238734 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:36:22.239749 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:36:22.245099 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:36:22.251912 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:36:22.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.257937 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:36:22.263263 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:36:22.269531 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:36:22.279914 udevadm[1195]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 20:36:22.296274 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:36:22.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.301504 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:36:22.308240 systemd-journald[1173]: Time spent on flushing to /var/log/journal/6f91fbaf0f8c496885307b47f14aa29f is 14.387ms for 1104 entries. Oct 2 20:36:22.308240 systemd-journald[1173]: System Journal (/var/log/journal/6f91fbaf0f8c496885307b47f14aa29f) is 8.0M, max 2.6G, 2.6G free. Oct 2 20:36:22.365082 systemd-journald[1173]: Received client request to flush runtime journal. Oct 2 20:36:22.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.349210 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:36:22.366445 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:36:22.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.849007 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:36:22.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:23.835930 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:36:23.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:23.840000 audit: BPF prog-id=21 op=LOAD Oct 2 20:36:23.840000 audit: BPF prog-id=22 op=LOAD Oct 2 20:36:23.840000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:36:23.840000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:36:23.842689 systemd[1]: Starting systemd-udevd.service... Oct 2 20:36:23.863367 systemd-udevd[1198]: Using default interface naming scheme 'v252'. Oct 2 20:36:23.996451 systemd[1]: Started systemd-udevd.service. Oct 2 20:36:24.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:24.005000 audit: BPF prog-id=23 op=LOAD Oct 2 20:36:24.008999 systemd[1]: Starting systemd-networkd.service... Oct 2 20:36:24.041490 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 20:36:24.068000 audit: BPF prog-id=24 op=LOAD Oct 2 20:36:24.069000 audit: BPF prog-id=25 op=LOAD Oct 2 20:36:24.069000 audit: BPF prog-id=26 op=LOAD Oct 2 20:36:24.070508 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:36:24.125000 audit[1207]: AVC avc: denied { confidentiality } for pid=1207 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:36:24.138909 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 20:36:24.138996 kernel: hv_vmbus: registering driver hv_balloon Oct 2 20:36:24.139014 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:36:24.148985 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 20:36:24.149040 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 20:36:24.166984 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 20:36:24.167049 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 20:36:24.167065 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 20:36:24.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:24.154108 systemd[1]: Started systemd-userdbd.service. Oct 2 20:36:24.174835 kernel: Console: switching to colour dummy device 80x25 Oct 2 20:36:24.183154 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:36:24.183232 kernel: hv_vmbus: registering driver hv_utils Oct 2 20:36:24.125000 audit[1207]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaad882cfa0 a1=aa2c a2=ffffa15c24b0 a3=aaaad878b010 items=10 ppid=1198 pid=1207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:24.125000 audit: CWD cwd="/" Oct 2 20:36:24.125000 audit: PATH item=0 name=(null) inode=10077 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=1 name=(null) inode=10078 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=2 name=(null) inode=10077 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=3 name=(null) inode=10079 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=4 name=(null) inode=10077 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=5 name=(null) inode=10080 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=6 name=(null) inode=10077 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=7 name=(null) inode=10081 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=8 name=(null) inode=10077 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PATH item=9 name=(null) inode=10082 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:36:24.125000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:36:24.222653 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 20:36:24.231163 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 20:36:24.231216 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 20:36:24.486445 systemd-networkd[1217]: lo: Link UP Oct 2 20:36:24.486456 systemd-networkd[1217]: lo: Gained carrier Oct 2 20:36:24.486831 systemd-networkd[1217]: Enumeration completed Oct 2 20:36:24.486931 systemd[1]: Started systemd-networkd.service. Oct 2 20:36:24.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:24.493075 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:36:24.560394 systemd-networkd[1217]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:36:24.562951 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1216) Oct 2 20:36:24.598848 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:36:24.606317 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:36:24.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:24.612679 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:36:24.621955 kernel: mlx5_core 7841:00:02.0 enP30785s1: Link up Oct 2 20:36:24.665956 kernel: hv_netvsc 000d3a6e-e3c7-000d-3a6e-e3c7000d3a6e eth0: Data path switched to VF: enP30785s1 Oct 2 20:36:24.667024 systemd-networkd[1217]: enP30785s1: Link UP Oct 2 20:36:24.667335 systemd-networkd[1217]: eth0: Link UP Oct 2 20:36:24.667347 systemd-networkd[1217]: eth0: Gained carrier Oct 2 20:36:24.675465 systemd-networkd[1217]: enP30785s1: Gained carrier Oct 2 20:36:24.686040 systemd-networkd[1217]: eth0: DHCPv4 address 10.200.20.4/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 20:36:24.916161 lvm[1275]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:36:24.954997 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:36:24.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:24.960267 systemd[1]: Reached target cryptsetup.target. Oct 2 20:36:24.966290 systemd[1]: Starting lvm2-activation.service... Oct 2 20:36:24.972898 lvm[1277]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:36:24.996899 systemd[1]: Finished lvm2-activation.service. Oct 2 20:36:25.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:25.001661 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:36:25.006344 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:36:25.006375 systemd[1]: Reached target local-fs.target. Oct 2 20:36:25.010900 systemd[1]: Reached target machines.target. Oct 2 20:36:25.016515 systemd[1]: Starting ldconfig.service... Oct 2 20:36:25.020401 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:36:25.020469 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:36:25.021444 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:36:25.026609 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:36:25.034057 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:36:25.038780 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:36:25.038838 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:36:25.039796 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:36:25.062601 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1279 (bootctl) Oct 2 20:36:25.063964 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:36:25.470428 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:36:25.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:25.724248 systemd-tmpfiles[1282]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:36:25.738077 systemd-fsck[1287]: fsck.fat 4.2 (2021-01-31) Oct 2 20:36:25.738077 systemd-fsck[1287]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 20:36:25.741382 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:36:25.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:25.749290 systemd[1]: Mounting boot.mount... Oct 2 20:36:25.896862 systemd[1]: Mounted boot.mount. Oct 2 20:36:25.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:25.907204 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:36:25.997692 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:36:25.998259 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:36:26.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.022760 systemd-tmpfiles[1282]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:36:26.127263 systemd-tmpfiles[1282]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:36:26.525103 systemd-networkd[1217]: eth0: Gained IPv6LL Oct 2 20:36:26.530287 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:36:26.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.540119 kernel: kauditd_printk_skb: 75 callbacks suppressed Oct 2 20:36:26.540186 kernel: audit: type=1130 audit(1696278986.534:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.656462 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:36:26.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.683260 kernel: audit: type=1130 audit(1696278986.660:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.679613 systemd[1]: Starting audit-rules.service... Oct 2 20:36:26.684901 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:36:26.691252 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:36:26.696000 audit: BPF prog-id=27 op=LOAD Oct 2 20:36:26.698574 systemd[1]: Starting systemd-resolved.service... Oct 2 20:36:26.709615 kernel: audit: type=1334 audit(1696278986.696:160): prog-id=27 op=LOAD Oct 2 20:36:26.709700 kernel: audit: type=1334 audit(1696278986.707:161): prog-id=28 op=LOAD Oct 2 20:36:26.707000 audit: BPF prog-id=28 op=LOAD Oct 2 20:36:26.710027 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:36:26.720052 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:36:26.756000 audit[1299]: SYSTEM_BOOT pid=1299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.778430 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:36:26.778963 kernel: audit: type=1127 audit(1696278986.756:162): pid=1299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.783729 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:36:26.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.786201 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:36:26.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.825611 kernel: audit: type=1130 audit(1696278986.782:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.825719 kernel: audit: type=1130 audit(1696278986.807:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.852829 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:36:26.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.857912 systemd[1]: Reached target time-set.target. Oct 2 20:36:26.881753 kernel: audit: type=1130 audit(1696278986.856:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.880672 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:36:26.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.905979 kernel: audit: type=1130 audit(1696278986.885:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.925367 systemd-resolved[1296]: Positive Trust Anchors: Oct 2 20:36:26.925377 systemd-resolved[1296]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:36:26.925404 systemd-resolved[1296]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:36:26.990845 systemd-resolved[1296]: Using system hostname 'ci-3510.3.0-a-1cb893e9b8'. Oct 2 20:36:26.992784 systemd[1]: Started systemd-resolved.service. Oct 2 20:36:26.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.997822 systemd[1]: Reached target network.target. Oct 2 20:36:27.020671 kernel: audit: type=1130 audit(1696278986.996:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:27.020967 systemd[1]: Reached target network-online.target. Oct 2 20:36:27.025686 systemd[1]: Reached target nss-lookup.target. Oct 2 20:36:27.098000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:36:27.098000 audit[1314]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd7619a60 a2=420 a3=0 items=0 ppid=1293 pid=1314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:27.098000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:36:27.112321 augenrules[1314]: No rules Oct 2 20:36:27.113084 systemd[1]: Finished audit-rules.service. Oct 2 20:36:33.224862 ldconfig[1278]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:36:33.237458 systemd[1]: Finished ldconfig.service. Oct 2 20:36:33.243762 systemd[1]: Starting systemd-update-done.service... Oct 2 20:36:33.270759 systemd[1]: Finished systemd-update-done.service. Oct 2 20:36:33.276162 systemd[1]: Reached target sysinit.target. Oct 2 20:36:33.281049 systemd[1]: Started motdgen.path. Oct 2 20:36:33.284979 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:36:33.291504 systemd[1]: Started logrotate.timer. Oct 2 20:36:33.295668 systemd[1]: Started mdadm.timer. Oct 2 20:36:33.299667 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:36:33.304654 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:36:33.304687 systemd[1]: Reached target paths.target. Oct 2 20:36:33.309120 systemd[1]: Reached target timers.target. Oct 2 20:36:33.314531 systemd[1]: Listening on dbus.socket. Oct 2 20:36:33.319747 systemd[1]: Starting docker.socket... Oct 2 20:36:33.326623 systemd[1]: Listening on sshd.socket. Oct 2 20:36:33.331724 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:36:33.332207 systemd[1]: Listening on docker.socket. Oct 2 20:36:33.336559 systemd[1]: Reached target sockets.target. Oct 2 20:36:33.340784 systemd[1]: Reached target basic.target. Oct 2 20:36:33.345119 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:36:33.345147 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:36:33.346488 systemd[1]: Starting containerd.service... Oct 2 20:36:33.351462 systemd[1]: Starting dbus.service... Oct 2 20:36:33.355916 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:36:33.361582 systemd[1]: Starting extend-filesystems.service... Oct 2 20:36:33.369123 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:36:33.370629 systemd[1]: Starting motdgen.service... Oct 2 20:36:33.376321 systemd[1]: Started nvidia.service. Oct 2 20:36:33.381454 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:36:33.386974 systemd[1]: Starting prepare-critools.service... Oct 2 20:36:33.393412 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:36:33.400010 systemd[1]: Starting sshd-keygen.service... Oct 2 20:36:33.407192 systemd[1]: Starting systemd-logind.service... Oct 2 20:36:33.413575 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:36:33.413635 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:36:33.414070 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:36:33.414927 systemd[1]: Starting update-engine.service... Oct 2 20:36:33.420955 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:36:33.429969 jq[1324]: false Oct 2 20:36:33.430197 jq[1341]: true Oct 2 20:36:33.436799 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:36:33.437024 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:36:33.445626 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:36:33.445892 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:36:33.470228 extend-filesystems[1325]: Found sda Oct 2 20:36:33.474341 extend-filesystems[1325]: Found sda1 Oct 2 20:36:33.474341 extend-filesystems[1325]: Found sda2 Oct 2 20:36:33.474341 extend-filesystems[1325]: Found sda3 Oct 2 20:36:33.474341 extend-filesystems[1325]: Found usr Oct 2 20:36:33.474341 extend-filesystems[1325]: Found sda4 Oct 2 20:36:33.474341 extend-filesystems[1325]: Found sda6 Oct 2 20:36:33.474341 extend-filesystems[1325]: Found sda7 Oct 2 20:36:33.474341 extend-filesystems[1325]: Found sda9 Oct 2 20:36:33.474341 extend-filesystems[1325]: Checking size of /dev/sda9 Oct 2 20:36:33.512036 systemd-logind[1335]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:36:33.555376 jq[1347]: true Oct 2 20:36:33.516569 systemd-logind[1335]: New seat seat0. Oct 2 20:36:33.521837 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:36:33.522044 systemd[1]: Finished motdgen.service. Oct 2 20:36:33.576025 extend-filesystems[1325]: Old size kept for /dev/sda9 Oct 2 20:36:33.588214 extend-filesystems[1325]: Found sr0 Oct 2 20:36:33.581288 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:36:33.595587 tar[1345]: crictl Oct 2 20:36:33.595773 tar[1344]: ./ Oct 2 20:36:33.595773 tar[1344]: ./loopback Oct 2 20:36:33.581453 systemd[1]: Finished extend-filesystems.service. Oct 2 20:36:33.633774 tar[1344]: ./bandwidth Oct 2 20:36:33.659081 env[1352]: time="2023-10-02T20:36:33.658303220Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:36:33.687030 bash[1392]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:36:33.687777 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:36:33.697184 dbus-daemon[1323]: [system] SELinux support is enabled Oct 2 20:36:33.697337 systemd[1]: Started dbus.service. Oct 2 20:36:33.702957 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:36:33.702988 systemd[1]: Reached target system-config.target. Oct 2 20:36:33.711151 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:36:33.711175 systemd[1]: Reached target user-config.target. Oct 2 20:36:33.717925 dbus-daemon[1323]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 20:36:33.718115 systemd[1]: Started systemd-logind.service. Oct 2 20:36:33.744571 tar[1344]: ./ptp Oct 2 20:36:33.761514 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:36:33.762908 env[1352]: time="2023-10-02T20:36:33.762866700Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:36:33.763162 env[1352]: time="2023-10-02T20:36:33.763141620Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:36:33.774543 env[1352]: time="2023-10-02T20:36:33.774501340Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:36:33.774652 env[1352]: time="2023-10-02T20:36:33.774636940Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:36:33.774996 env[1352]: time="2023-10-02T20:36:33.774969900Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:36:33.775102 env[1352]: time="2023-10-02T20:36:33.775085180Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:36:33.775183 env[1352]: time="2023-10-02T20:36:33.775166820Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:36:33.775243 env[1352]: time="2023-10-02T20:36:33.775230300Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:36:33.775385 env[1352]: time="2023-10-02T20:36:33.775367420Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:36:33.775805 env[1352]: time="2023-10-02T20:36:33.775780420Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:36:33.776050 env[1352]: time="2023-10-02T20:36:33.776025100Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:36:33.776140 env[1352]: time="2023-10-02T20:36:33.776125940Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:36:33.776268 env[1352]: time="2023-10-02T20:36:33.776246380Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:36:33.776352 env[1352]: time="2023-10-02T20:36:33.776336780Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.788995500Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789038340Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789053220Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789085780Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789101660Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789115260Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789128660Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789473500Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789489700Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789503020Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789515060Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789528260Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789791660Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:36:33.791960 env[1352]: time="2023-10-02T20:36:33.789868260Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:36:33.791857 systemd[1]: Started containerd.service. Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790109300Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790137700Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790150460Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790224300Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790239180Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790251500Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790262340Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790274340Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790286260Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790297820Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790309220Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790324020Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790444940Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790460460Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792449 env[1352]: time="2023-10-02T20:36:33.790474060Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792795 env[1352]: time="2023-10-02T20:36:33.790491140Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:36:33.792795 env[1352]: time="2023-10-02T20:36:33.790508140Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:36:33.792795 env[1352]: time="2023-10-02T20:36:33.790520180Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:36:33.792795 env[1352]: time="2023-10-02T20:36:33.790537420Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:36:33.792795 env[1352]: time="2023-10-02T20:36:33.790570740Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:36:33.792916 env[1352]: time="2023-10-02T20:36:33.790775660Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:36:33.792916 env[1352]: time="2023-10-02T20:36:33.790827460Z" level=info msg="Connect containerd service" Oct 2 20:36:33.792916 env[1352]: time="2023-10-02T20:36:33.790864100Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:36:33.792916 env[1352]: time="2023-10-02T20:36:33.791421060Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:36:33.792916 env[1352]: time="2023-10-02T20:36:33.791696860Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:36:33.792916 env[1352]: time="2023-10-02T20:36:33.791730500Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:36:33.792916 env[1352]: time="2023-10-02T20:36:33.791772860Z" level=info msg="containerd successfully booted in 0.145685s" Oct 2 20:36:33.811552 env[1352]: time="2023-10-02T20:36:33.793197180Z" level=info msg="Start subscribing containerd event" Oct 2 20:36:33.811552 env[1352]: time="2023-10-02T20:36:33.793246860Z" level=info msg="Start recovering state" Oct 2 20:36:33.811552 env[1352]: time="2023-10-02T20:36:33.793307380Z" level=info msg="Start event monitor" Oct 2 20:36:33.811552 env[1352]: time="2023-10-02T20:36:33.793377500Z" level=info msg="Start snapshots syncer" Oct 2 20:36:33.811552 env[1352]: time="2023-10-02T20:36:33.793387940Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:36:33.811552 env[1352]: time="2023-10-02T20:36:33.793395140Z" level=info msg="Start streaming server" Oct 2 20:36:33.816890 tar[1344]: ./vlan Oct 2 20:36:33.884262 tar[1344]: ./host-device Oct 2 20:36:33.936460 tar[1344]: ./tuning Oct 2 20:36:33.966517 tar[1344]: ./vrf Oct 2 20:36:33.997226 tar[1344]: ./sbr Oct 2 20:36:34.026989 tar[1344]: ./tap Oct 2 20:36:34.061968 tar[1344]: ./dhcp Oct 2 20:36:34.147307 tar[1344]: ./static Oct 2 20:36:34.172245 tar[1344]: ./firewall Oct 2 20:36:34.209855 tar[1344]: ./macvlan Oct 2 20:36:34.214889 update_engine[1337]: I1002 20:36:34.201679 1337 main.cc:92] Flatcar Update Engine starting Oct 2 20:36:34.244771 tar[1344]: ./dummy Oct 2 20:36:34.267533 systemd[1]: Started update-engine.service. Oct 2 20:36:34.274268 update_engine[1337]: I1002 20:36:34.273869 1337 update_check_scheduler.cc:74] Next update check in 3m50s Oct 2 20:36:34.276185 systemd[1]: Started locksmithd.service. Oct 2 20:36:34.291064 tar[1344]: ./bridge Oct 2 20:36:34.327722 tar[1344]: ./ipvlan Oct 2 20:36:34.360739 tar[1344]: ./portmap Oct 2 20:36:34.392464 tar[1344]: ./host-local Oct 2 20:36:34.468803 systemd[1]: Finished prepare-critools.service. Oct 2 20:36:34.500288 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:36:35.757744 locksmithd[1428]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:36:36.123504 sshd_keygen[1346]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:36:36.149710 systemd[1]: Finished sshd-keygen.service. Oct 2 20:36:36.156092 systemd[1]: Starting issuegen.service... Oct 2 20:36:36.160771 systemd[1]: Started waagent.service. Oct 2 20:36:36.169575 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:36:36.169720 systemd[1]: Finished issuegen.service. Oct 2 20:36:36.175163 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:36:36.201672 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:36:36.208514 systemd[1]: Started getty@tty1.service. Oct 2 20:36:36.214130 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 20:36:36.219582 systemd[1]: Reached target getty.target. Oct 2 20:36:36.223992 systemd[1]: Reached target multi-user.target. Oct 2 20:36:36.230150 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:36:36.245632 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:36:36.245796 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:36:36.251594 systemd[1]: Startup finished in 742ms (kernel) + 20.106s (initrd) + 23.469s (userspace) = 44.317s. Oct 2 20:36:36.834299 login[1449]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:36:36.835381 login[1450]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:36:36.872467 systemd[1]: Created slice user-500.slice. Oct 2 20:36:36.873575 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:36:36.876777 systemd-logind[1335]: New session 2 of user core. Oct 2 20:36:36.879653 systemd-logind[1335]: New session 1 of user core. Oct 2 20:36:36.916303 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:36:36.917727 systemd[1]: Starting user@500.service... Oct 2 20:36:36.950867 (systemd)[1453]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:37.261088 systemd[1453]: Queued start job for default target default.target. Oct 2 20:36:37.261892 systemd[1453]: Reached target paths.target. Oct 2 20:36:37.262030 systemd[1453]: Reached target sockets.target. Oct 2 20:36:37.262109 systemd[1453]: Reached target timers.target. Oct 2 20:36:37.262174 systemd[1453]: Reached target basic.target. Oct 2 20:36:37.262291 systemd[1453]: Reached target default.target. Oct 2 20:36:37.262357 systemd[1]: Started user@500.service. Oct 2 20:36:37.262560 systemd[1453]: Startup finished in 303ms. Oct 2 20:36:37.263308 systemd[1]: Started session-1.scope. Oct 2 20:36:37.263875 systemd[1]: Started session-2.scope. Oct 2 20:36:41.810753 waagent[1444]: 2023-10-02T20:36:41.810646Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 20:36:41.818194 waagent[1444]: 2023-10-02T20:36:41.818112Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 20:36:41.823354 waagent[1444]: 2023-10-02T20:36:41.823291Z INFO Daemon Daemon Python: 3.9.16 Oct 2 20:36:41.828352 waagent[1444]: 2023-10-02T20:36:41.828287Z INFO Daemon Daemon Run daemon Oct 2 20:36:41.833067 waagent[1444]: 2023-10-02T20:36:41.833009Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 20:36:41.853588 waagent[1444]: 2023-10-02T20:36:41.853463Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:36:41.869084 waagent[1444]: 2023-10-02T20:36:41.868930Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:36:41.879093 waagent[1444]: 2023-10-02T20:36:41.879023Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:36:41.884479 waagent[1444]: 2023-10-02T20:36:41.884412Z INFO Daemon Daemon Using waagent for provisioning Oct 2 20:36:41.890579 waagent[1444]: 2023-10-02T20:36:41.890517Z INFO Daemon Daemon Activate resource disk Oct 2 20:36:41.895538 waagent[1444]: 2023-10-02T20:36:41.895478Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 20:36:41.910049 waagent[1444]: 2023-10-02T20:36:41.909991Z INFO Daemon Daemon Found device: None Oct 2 20:36:41.914814 waagent[1444]: 2023-10-02T20:36:41.914755Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 20:36:41.923482 waagent[1444]: 2023-10-02T20:36:41.923421Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 20:36:41.935679 waagent[1444]: 2023-10-02T20:36:41.935619Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:36:41.941747 waagent[1444]: 2023-10-02T20:36:41.941688Z INFO Daemon Daemon Running default provisioning handler Oct 2 20:36:41.958554 waagent[1444]: 2023-10-02T20:36:41.958425Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:36:41.974770 waagent[1444]: 2023-10-02T20:36:41.974638Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:36:41.984929 waagent[1444]: 2023-10-02T20:36:41.984854Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:36:41.990332 waagent[1444]: 2023-10-02T20:36:41.990266Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 20:36:42.069896 waagent[1444]: 2023-10-02T20:36:42.069707Z INFO Daemon Daemon Successfully mounted dvd Oct 2 20:36:42.185606 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 20:36:42.220643 waagent[1444]: 2023-10-02T20:36:42.220500Z INFO Daemon Daemon Detect protocol endpoint Oct 2 20:36:42.225835 waagent[1444]: 2023-10-02T20:36:42.225763Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:36:42.231790 waagent[1444]: 2023-10-02T20:36:42.231726Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 20:36:42.238409 waagent[1444]: 2023-10-02T20:36:42.238352Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 20:36:42.243994 waagent[1444]: 2023-10-02T20:36:42.243921Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 20:36:42.249150 waagent[1444]: 2023-10-02T20:36:42.249092Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 20:36:42.394027 waagent[1444]: 2023-10-02T20:36:42.393888Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 20:36:42.401733 waagent[1444]: 2023-10-02T20:36:42.401686Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 20:36:42.407516 waagent[1444]: 2023-10-02T20:36:42.407457Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 20:36:43.181142 waagent[1444]: 2023-10-02T20:36:43.180979Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 20:36:43.196904 waagent[1444]: 2023-10-02T20:36:43.196822Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 20:36:43.202979 waagent[1444]: 2023-10-02T20:36:43.202893Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 20:36:43.290609 waagent[1444]: 2023-10-02T20:36:43.290468Z INFO Daemon Daemon Found private key matching thumbprint 96E73459C46BA3662DD73E07899B2530C5F3E5EB Oct 2 20:36:43.299378 waagent[1444]: 2023-10-02T20:36:43.299296Z INFO Daemon Daemon Certificate with thumbprint DA27DBE50EBE2AB90AC9C508AD0F30A220729B97 has no matching private key. Oct 2 20:36:43.309025 waagent[1444]: 2023-10-02T20:36:43.308927Z INFO Daemon Daemon Fetch goal state completed Oct 2 20:36:43.354941 waagent[1444]: 2023-10-02T20:36:43.354876Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: e7530ea3-dd29-43a4-8d1c-b03f70db7716 New eTag: 8949890080734686929] Oct 2 20:36:43.366095 waagent[1444]: 2023-10-02T20:36:43.366022Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:36:43.382814 waagent[1444]: 2023-10-02T20:36:43.382733Z INFO Daemon Daemon Starting provisioning Oct 2 20:36:43.388419 waagent[1444]: 2023-10-02T20:36:43.388348Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 20:36:43.393497 waagent[1444]: 2023-10-02T20:36:43.393436Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-1cb893e9b8] Oct 2 20:36:43.451281 waagent[1444]: 2023-10-02T20:36:43.451141Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-1cb893e9b8] Oct 2 20:36:43.457982 waagent[1444]: 2023-10-02T20:36:43.457893Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 20:36:43.464485 waagent[1444]: 2023-10-02T20:36:43.464426Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 20:36:43.484236 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 20:36:43.484411 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 20:36:43.484471 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 20:36:43.484705 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:36:43.488984 systemd-networkd[1217]: eth0: DHCPv6 lease lost Oct 2 20:36:43.489151 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 20:36:43.491608 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:36:43.491783 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:36:43.493703 systemd[1]: Starting systemd-networkd.service... Oct 2 20:36:43.525596 systemd-networkd[1501]: enP30785s1: Link UP Oct 2 20:36:43.525609 systemd-networkd[1501]: enP30785s1: Gained carrier Oct 2 20:36:43.526500 systemd-networkd[1501]: eth0: Link UP Oct 2 20:36:43.526511 systemd-networkd[1501]: eth0: Gained carrier Oct 2 20:36:43.526822 systemd-networkd[1501]: lo: Link UP Oct 2 20:36:43.526831 systemd-networkd[1501]: lo: Gained carrier Oct 2 20:36:43.527094 systemd-networkd[1501]: eth0: Gained IPv6LL Oct 2 20:36:43.527300 systemd-networkd[1501]: Enumeration completed Oct 2 20:36:43.527336 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 20:36:43.527402 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 20:36:43.527448 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 20:36:43.527505 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 20:36:43.528127 systemd[1]: Started systemd-networkd.service. Oct 2 20:36:43.530997 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:36:43.533176 waagent[1444]: 2023-10-02T20:36:43.533037Z INFO Daemon Daemon Create user account if not exists Oct 2 20:36:43.538066 systemd-networkd[1501]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:36:43.539500 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 20:36:43.540291 waagent[1444]: 2023-10-02T20:36:43.540192Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 20:36:43.546378 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 20:36:43.546865 waagent[1444]: 2023-10-02T20:36:43.546789Z INFO Daemon Daemon Configure sudoer Oct 2 20:36:43.551977 waagent[1444]: 2023-10-02T20:36:43.551883Z INFO Daemon Daemon Configure sshd Oct 2 20:36:43.556554 waagent[1444]: 2023-10-02T20:36:43.556491Z INFO Daemon Daemon Deploy ssh public key. Oct 2 20:36:43.557001 systemd-networkd[1501]: eth0: DHCPv4 address 10.200.20.4/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 20:36:43.561264 systemd-timesyncd[1298]: Network configuration changed, trying to establish connection. Oct 2 20:36:43.562691 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:36:44.808738 waagent[1444]: 2023-10-02T20:36:44.808645Z INFO Daemon Daemon Provisioning complete Oct 2 20:36:44.832826 waagent[1444]: 2023-10-02T20:36:44.832756Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 20:36:44.839728 waagent[1444]: 2023-10-02T20:36:44.839657Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 20:36:44.850897 waagent[1444]: 2023-10-02T20:36:44.850825Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 20:36:45.155085 waagent[1510]: 2023-10-02T20:36:45.154916Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 20:36:45.156194 waagent[1510]: 2023-10-02T20:36:45.156137Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:36:45.156442 waagent[1510]: 2023-10-02T20:36:45.156392Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:36:45.169168 waagent[1510]: 2023-10-02T20:36:45.169089Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 20:36:45.169485 waagent[1510]: 2023-10-02T20:36:45.169436Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 20:36:45.250652 waagent[1510]: 2023-10-02T20:36:45.250516Z INFO ExtHandler ExtHandler Found private key matching thumbprint 96E73459C46BA3662DD73E07899B2530C5F3E5EB Oct 2 20:36:45.251057 waagent[1510]: 2023-10-02T20:36:45.251000Z INFO ExtHandler ExtHandler Certificate with thumbprint DA27DBE50EBE2AB90AC9C508AD0F30A220729B97 has no matching private key. Oct 2 20:36:45.251395 waagent[1510]: 2023-10-02T20:36:45.251346Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 20:36:45.265562 waagent[1510]: 2023-10-02T20:36:45.265506Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 17997b3b-ed21-4e09-9f6d-eadba7e536b0 New eTag: 8949890080734686929] Oct 2 20:36:45.266329 waagent[1510]: 2023-10-02T20:36:45.266271Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:36:45.340522 waagent[1510]: 2023-10-02T20:36:45.340387Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:36:45.350823 waagent[1510]: 2023-10-02T20:36:45.350751Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1510 Oct 2 20:36:45.354692 waagent[1510]: 2023-10-02T20:36:45.354629Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:36:45.356192 waagent[1510]: 2023-10-02T20:36:45.356134Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:36:45.454741 waagent[1510]: 2023-10-02T20:36:45.454617Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:36:45.455377 waagent[1510]: 2023-10-02T20:36:45.455316Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:36:45.466701 waagent[1510]: 2023-10-02T20:36:45.466651Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:36:45.467358 waagent[1510]: 2023-10-02T20:36:45.467301Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:36:45.468642 waagent[1510]: 2023-10-02T20:36:45.468581Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 20:36:45.470168 waagent[1510]: 2023-10-02T20:36:45.470099Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:36:45.470448 waagent[1510]: 2023-10-02T20:36:45.470379Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:36:45.471028 waagent[1510]: 2023-10-02T20:36:45.470921Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:36:45.471681 waagent[1510]: 2023-10-02T20:36:45.471615Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:36:45.472037 waagent[1510]: 2023-10-02T20:36:45.471973Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:36:45.472037 waagent[1510]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:36:45.472037 waagent[1510]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:36:45.472037 waagent[1510]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:36:45.472037 waagent[1510]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:36:45.472037 waagent[1510]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:36:45.472037 waagent[1510]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:36:45.474334 waagent[1510]: 2023-10-02T20:36:45.474180Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:36:45.474780 waagent[1510]: 2023-10-02T20:36:45.474705Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:36:45.475395 waagent[1510]: 2023-10-02T20:36:45.475323Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:36:45.476022 waagent[1510]: 2023-10-02T20:36:45.475920Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:36:45.476188 waagent[1510]: 2023-10-02T20:36:45.476139Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:36:45.476306 waagent[1510]: 2023-10-02T20:36:45.476263Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:36:45.477214 waagent[1510]: 2023-10-02T20:36:45.477154Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:36:45.477372 waagent[1510]: 2023-10-02T20:36:45.477305Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:36:45.478150 waagent[1510]: 2023-10-02T20:36:45.478055Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:36:45.478334 waagent[1510]: 2023-10-02T20:36:45.478266Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:36:45.478624 waagent[1510]: 2023-10-02T20:36:45.478561Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:36:45.490112 waagent[1510]: 2023-10-02T20:36:45.490037Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 20:36:45.490925 waagent[1510]: 2023-10-02T20:36:45.490873Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:36:45.492047 waagent[1510]: 2023-10-02T20:36:45.491988Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 20:36:45.525335 waagent[1510]: 2023-10-02T20:36:45.524986Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1501' Oct 2 20:36:45.539314 waagent[1510]: 2023-10-02T20:36:45.539237Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 20:36:45.595533 waagent[1510]: 2023-10-02T20:36:45.595404Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:36:45.595533 waagent[1510]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:36:45.595533 waagent[1510]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:36:45.595533 waagent[1510]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6e:e3:c7 brd ff:ff:ff:ff:ff:ff Oct 2 20:36:45.595533 waagent[1510]: 3: enP30785s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6e:e3:c7 brd ff:ff:ff:ff:ff:ff\ altname enP30785p0s2 Oct 2 20:36:45.595533 waagent[1510]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:36:45.595533 waagent[1510]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:36:45.595533 waagent[1510]: 2: eth0 inet 10.200.20.4/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:36:45.595533 waagent[1510]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:36:45.595533 waagent[1510]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:36:45.595533 waagent[1510]: 2: eth0 inet6 fe80::20d:3aff:fe6e:e3c7/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:36:45.692060 waagent[1510]: 2023-10-02T20:36:45.691997Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 20:36:45.854590 waagent[1444]: 2023-10-02T20:36:45.854467Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 20:36:45.858317 waagent[1444]: 2023-10-02T20:36:45.858258Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 20:36:47.154364 waagent[1539]: 2023-10-02T20:36:47.154265Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 20:36:47.155417 waagent[1539]: 2023-10-02T20:36:47.155361Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 20:36:47.155658 waagent[1539]: 2023-10-02T20:36:47.155609Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 20:36:47.165608 waagent[1539]: 2023-10-02T20:36:47.165499Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:36:47.166173 waagent[1539]: 2023-10-02T20:36:47.166116Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:36:47.166505 waagent[1539]: 2023-10-02T20:36:47.166443Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:36:47.179975 waagent[1539]: 2023-10-02T20:36:47.179891Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 20:36:47.192433 waagent[1539]: 2023-10-02T20:36:47.192375Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 20:36:47.193620 waagent[1539]: 2023-10-02T20:36:47.193562Z INFO ExtHandler Oct 2 20:36:47.193871 waagent[1539]: 2023-10-02T20:36:47.193821Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 4ec704f1-70f6-4479-8cfb-a322f52f7725 eTag: 8949890080734686929 source: Fabric] Oct 2 20:36:47.194726 waagent[1539]: 2023-10-02T20:36:47.194668Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 20:36:47.196109 waagent[1539]: 2023-10-02T20:36:47.196048Z INFO ExtHandler Oct 2 20:36:47.196342 waagent[1539]: 2023-10-02T20:36:47.196292Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 20:36:47.202863 waagent[1539]: 2023-10-02T20:36:47.202815Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 20:36:47.203439 waagent[1539]: 2023-10-02T20:36:47.203394Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:36:47.223062 waagent[1539]: 2023-10-02T20:36:47.223006Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 20:36:47.306303 waagent[1539]: 2023-10-02T20:36:47.306163Z INFO ExtHandler Downloaded certificate {'thumbprint': 'DA27DBE50EBE2AB90AC9C508AD0F30A220729B97', 'hasPrivateKey': False} Oct 2 20:36:47.307582 waagent[1539]: 2023-10-02T20:36:47.307519Z INFO ExtHandler Downloaded certificate {'thumbprint': '96E73459C46BA3662DD73E07899B2530C5F3E5EB', 'hasPrivateKey': True} Oct 2 20:36:47.308768 waagent[1539]: 2023-10-02T20:36:47.308707Z INFO ExtHandler Fetch goal state completed Oct 2 20:36:47.335117 waagent[1539]: 2023-10-02T20:36:47.335048Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1539 Oct 2 20:36:47.338757 waagent[1539]: 2023-10-02T20:36:47.338696Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:36:47.340372 waagent[1539]: 2023-10-02T20:36:47.340310Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:36:47.346703 waagent[1539]: 2023-10-02T20:36:47.346650Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:36:47.347249 waagent[1539]: 2023-10-02T20:36:47.347189Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:36:47.358392 waagent[1539]: 2023-10-02T20:36:47.358338Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:36:47.359047 waagent[1539]: 2023-10-02T20:36:47.358986Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:36:47.366974 waagent[1539]: 2023-10-02T20:36:47.366854Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 20:36:47.370797 waagent[1539]: 2023-10-02T20:36:47.370738Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 20:36:47.372451 waagent[1539]: 2023-10-02T20:36:47.372379Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:36:47.372740 waagent[1539]: 2023-10-02T20:36:47.372666Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:36:47.373325 waagent[1539]: 2023-10-02T20:36:47.373251Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:36:47.373954 waagent[1539]: 2023-10-02T20:36:47.373861Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:36:47.374289 waagent[1539]: 2023-10-02T20:36:47.374223Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:36:47.374289 waagent[1539]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:36:47.374289 waagent[1539]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:36:47.374289 waagent[1539]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:36:47.374289 waagent[1539]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:36:47.374289 waagent[1539]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:36:47.374289 waagent[1539]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:36:47.376768 waagent[1539]: 2023-10-02T20:36:47.376629Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:36:47.377026 waagent[1539]: 2023-10-02T20:36:47.376928Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:36:47.377751 waagent[1539]: 2023-10-02T20:36:47.377671Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:36:47.378359 waagent[1539]: 2023-10-02T20:36:47.378280Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:36:47.379081 waagent[1539]: 2023-10-02T20:36:47.379008Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:36:47.379315 waagent[1539]: 2023-10-02T20:36:47.379237Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:36:47.379734 waagent[1539]: 2023-10-02T20:36:47.379662Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:36:47.379926 waagent[1539]: 2023-10-02T20:36:47.379859Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:36:47.382468 waagent[1539]: 2023-10-02T20:36:47.382376Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:36:47.383807 waagent[1539]: 2023-10-02T20:36:47.383739Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:36:47.385266 waagent[1539]: 2023-10-02T20:36:47.385198Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:36:47.401710 waagent[1539]: 2023-10-02T20:36:47.401621Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 20:36:47.403841 waagent[1539]: 2023-10-02T20:36:47.403672Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 20:36:47.421540 waagent[1539]: 2023-10-02T20:36:47.421432Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:36:47.421540 waagent[1539]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:36:47.421540 waagent[1539]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:36:47.421540 waagent[1539]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6e:e3:c7 brd ff:ff:ff:ff:ff:ff Oct 2 20:36:47.421540 waagent[1539]: 3: enP30785s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6e:e3:c7 brd ff:ff:ff:ff:ff:ff\ altname enP30785p0s2 Oct 2 20:36:47.421540 waagent[1539]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:36:47.421540 waagent[1539]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:36:47.421540 waagent[1539]: 2: eth0 inet 10.200.20.4/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:36:47.421540 waagent[1539]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:36:47.421540 waagent[1539]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:36:47.421540 waagent[1539]: 2: eth0 inet6 fe80::20d:3aff:fe6e:e3c7/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:36:47.448959 waagent[1539]: 2023-10-02T20:36:47.448869Z INFO ExtHandler ExtHandler Oct 2 20:36:47.449270 waagent[1539]: 2023-10-02T20:36:47.449212Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 7eb3e8cc-777c-4e4c-a962-5885f142a27d correlation 0b3c8570-0974-4c83-bcb9-04aff826ab82 created: 2023-10-02T20:35:08.488052Z] Oct 2 20:36:47.450425 waagent[1539]: 2023-10-02T20:36:47.450362Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 20:36:47.452451 waagent[1539]: 2023-10-02T20:36:47.452390Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 3 ms] Oct 2 20:36:47.473255 waagent[1539]: 2023-10-02T20:36:47.473188Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 20:36:47.535494 waagent[1539]: 2023-10-02T20:36:47.535402Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: F6649602-FDA4-49F0-94A8-1691C05BB3B5;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 20:36:47.705537 waagent[1539]: 2023-10-02T20:36:47.705340Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 20:36:47.705537 waagent[1539]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:36:47.705537 waagent[1539]: pkts bytes target prot opt in out source destination Oct 2 20:36:47.705537 waagent[1539]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:36:47.705537 waagent[1539]: pkts bytes target prot opt in out source destination Oct 2 20:36:47.705537 waagent[1539]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:36:47.705537 waagent[1539]: pkts bytes target prot opt in out source destination Oct 2 20:36:47.705537 waagent[1539]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 20:36:47.705537 waagent[1539]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:36:47.705537 waagent[1539]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:36:47.714722 waagent[1539]: 2023-10-02T20:36:47.714599Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 20:36:47.714722 waagent[1539]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:36:47.714722 waagent[1539]: pkts bytes target prot opt in out source destination Oct 2 20:36:47.714722 waagent[1539]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:36:47.714722 waagent[1539]: pkts bytes target prot opt in out source destination Oct 2 20:36:47.714722 waagent[1539]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:36:47.714722 waagent[1539]: pkts bytes target prot opt in out source destination Oct 2 20:36:47.714722 waagent[1539]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 20:36:47.714722 waagent[1539]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:36:47.714722 waagent[1539]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:36:47.715287 waagent[1539]: 2023-10-02T20:36:47.715229Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 20:37:12.340896 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 20:37:13.833087 systemd-timesyncd[1298]: Contacted time server 216.229.4.69:123 (0.flatcar.pool.ntp.org). Oct 2 20:37:13.833300 systemd-timesyncd[1298]: Initial clock synchronization to Mon 2023-10-02 20:37:13.822666 UTC. Oct 2 20:37:15.113356 systemd[1]: Created slice system-sshd.slice. Oct 2 20:37:15.114438 systemd[1]: Started sshd@0-10.200.20.4:22-10.200.12.6:45434.service. Oct 2 20:37:15.739225 sshd[1589]: Accepted publickey for core from 10.200.12.6 port 45434 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:37:15.756342 sshd[1589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:15.761119 systemd[1]: Started session-3.scope. Oct 2 20:37:15.761641 systemd-logind[1335]: New session 3 of user core. Oct 2 20:37:16.111560 systemd[1]: Started sshd@1-10.200.20.4:22-10.200.12.6:45436.service. Oct 2 20:37:16.510264 sshd[1594]: Accepted publickey for core from 10.200.12.6 port 45436 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:37:16.512214 sshd[1594]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:16.515987 systemd-logind[1335]: New session 4 of user core. Oct 2 20:37:16.516416 systemd[1]: Started session-4.scope. Oct 2 20:37:16.805068 sshd[1594]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:16.807821 systemd[1]: sshd@1-10.200.20.4:22-10.200.12.6:45436.service: Deactivated successfully. Oct 2 20:37:16.808519 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:37:16.809115 systemd-logind[1335]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:37:16.809850 systemd-logind[1335]: Removed session 4. Oct 2 20:37:16.871984 systemd[1]: Started sshd@2-10.200.20.4:22-10.200.12.6:45442.service. Oct 2 20:37:17.270754 sshd[1600]: Accepted publickey for core from 10.200.12.6 port 45442 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:37:17.272353 sshd[1600]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:17.276197 systemd-logind[1335]: New session 5 of user core. Oct 2 20:37:17.276633 systemd[1]: Started session-5.scope. Oct 2 20:37:17.559231 sshd[1600]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:17.561996 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:37:17.562517 systemd[1]: sshd@2-10.200.20.4:22-10.200.12.6:45442.service: Deactivated successfully. Oct 2 20:37:17.563317 systemd-logind[1335]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:37:17.564057 systemd-logind[1335]: Removed session 5. Oct 2 20:37:17.628745 systemd[1]: Started sshd@3-10.200.20.4:22-10.200.12.6:59442.service. Oct 2 20:37:18.028533 sshd[1606]: Accepted publickey for core from 10.200.12.6 port 59442 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:37:18.030148 sshd[1606]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:18.034102 systemd-logind[1335]: New session 6 of user core. Oct 2 20:37:18.034485 systemd[1]: Started session-6.scope. Oct 2 20:37:18.324678 sshd[1606]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:18.327589 systemd-logind[1335]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:37:18.327675 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:37:18.328602 systemd[1]: sshd@3-10.200.20.4:22-10.200.12.6:59442.service: Deactivated successfully. Oct 2 20:37:18.329312 systemd-logind[1335]: Removed session 6. Oct 2 20:37:18.390868 systemd[1]: Started sshd@4-10.200.20.4:22-10.200.12.6:59448.service. Oct 2 20:37:18.790068 sshd[1612]: Accepted publickey for core from 10.200.12.6 port 59448 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:37:18.791654 sshd[1612]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:18.795755 systemd-logind[1335]: New session 7 of user core. Oct 2 20:37:18.796194 systemd[1]: Started session-7.scope. Oct 2 20:37:19.267498 sudo[1615]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:37:19.267695 sudo[1615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:37:19.307141 dbus-daemon[1323]: avc: received setenforce notice (enforcing=1) Oct 2 20:37:19.309007 sudo[1615]: pam_unix(sudo:session): session closed for user root Oct 2 20:37:19.389316 sshd[1612]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:19.392648 systemd-logind[1335]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:37:19.394154 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:37:19.395229 systemd[1]: sshd@4-10.200.20.4:22-10.200.12.6:59448.service: Deactivated successfully. Oct 2 20:37:19.396125 systemd-logind[1335]: Removed session 7. Oct 2 20:37:19.455815 systemd[1]: Started sshd@5-10.200.20.4:22-10.200.12.6:59464.service. Oct 2 20:37:19.855754 sshd[1619]: Accepted publickey for core from 10.200.12.6 port 59464 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:37:19.857411 sshd[1619]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:19.861706 systemd[1]: Started session-8.scope. Oct 2 20:37:19.862013 systemd-logind[1335]: New session 8 of user core. Oct 2 20:37:19.934484 update_engine[1337]: I1002 20:37:19.934103 1337 update_attempter.cc:505] Updating boot flags... Oct 2 20:37:20.089873 sudo[1662]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:37:20.090134 sudo[1662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:37:20.094196 sudo[1662]: pam_unix(sudo:session): session closed for user root Oct 2 20:37:20.100879 sudo[1661]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:37:20.101089 sudo[1661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:37:20.112532 systemd[1]: Stopping audit-rules.service... Oct 2 20:37:20.117000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:37:20.122026 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 20:37:20.122109 kernel: audit: type=1305 audit(1696279040.117:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:37:20.117000 audit[1670]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffde6201c0 a2=420 a3=0 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:20.158256 kernel: audit: type=1300 audit(1696279040.117:169): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffde6201c0 a2=420 a3=0 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:20.117000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:37:20.167655 kernel: audit: type=1327 audit(1696279040.117:169): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:37:20.167737 auditctl[1670]: No rules Oct 2 20:37:20.168246 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:37:20.168406 systemd[1]: Stopped audit-rules.service. Oct 2 20:37:20.169919 systemd[1]: Starting audit-rules.service... Oct 2 20:37:20.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.189352 kernel: audit: type=1131 audit(1696279040.167:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.235278 augenrules[1705]: No rules Oct 2 20:37:20.236393 systemd[1]: Finished audit-rules.service. Oct 2 20:37:20.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.253540 sudo[1661]: pam_unix(sudo:session): session closed for user root Oct 2 20:37:20.253000 audit[1661]: USER_END pid=1661 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.273586 kernel: audit: type=1130 audit(1696279040.235:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.273657 kernel: audit: type=1106 audit(1696279040.253:172): pid=1661 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.253000 audit[1661]: CRED_DISP pid=1661 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.290803 kernel: audit: type=1104 audit(1696279040.253:173): pid=1661 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.315469 sshd[1619]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:20.315000 audit[1619]: USER_END pid=1619 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:20.318867 systemd-logind[1335]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:37:20.319757 systemd[1]: sshd@5-10.200.20.4:22-10.200.12.6:59464.service: Deactivated successfully. Oct 2 20:37:20.320456 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:37:20.321801 systemd-logind[1335]: Removed session 8. Oct 2 20:37:20.315000 audit[1619]: CRED_DISP pid=1619 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:20.357600 kernel: audit: type=1106 audit(1696279040.315:174): pid=1619 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:20.357665 kernel: audit: type=1104 audit(1696279040.315:175): pid=1619 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:20.357691 kernel: audit: type=1131 audit(1696279040.316:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.4:22-10.200.12.6:59464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.4:22-10.200.12.6:59464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.388345 systemd[1]: Started sshd@6-10.200.20.4:22-10.200.12.6:59466.service. Oct 2 20:37:20.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.4:22-10.200.12.6:59466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:20.819000 audit[1715]: USER_ACCT pid=1715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:20.821071 sshd[1715]: Accepted publickey for core from 10.200.12.6 port 59466 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:37:20.821000 audit[1715]: CRED_ACQ pid=1715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:20.821000 audit[1715]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe756dde0 a2=3 a3=1 items=0 ppid=1 pid=1715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:20.821000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:20.823003 sshd[1715]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:20.826753 systemd-logind[1335]: New session 9 of user core. Oct 2 20:37:20.827214 systemd[1]: Started session-9.scope. Oct 2 20:37:20.829000 audit[1715]: USER_START pid=1715 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:20.831000 audit[1717]: CRED_ACQ pid=1717 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:21.068000 audit[1718]: USER_ACCT pid=1718 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:37:21.069750 sudo[1718]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:37:21.068000 audit[1718]: CRED_REFR pid=1718 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:37:21.069963 sudo[1718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:37:21.070000 audit[1718]: USER_START pid=1718 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:37:21.747500 systemd[1]: Starting docker.service... Oct 2 20:37:21.792189 env[1733]: time="2023-10-02T20:37:21.792136350Z" level=info msg="Starting up" Oct 2 20:37:21.793753 env[1733]: time="2023-10-02T20:37:21.793730822Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:37:21.793848 env[1733]: time="2023-10-02T20:37:21.793835499Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:37:21.793923 env[1733]: time="2023-10-02T20:37:21.793904671Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:37:21.794341 env[1733]: time="2023-10-02T20:37:21.794321702Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:37:21.796539 env[1733]: time="2023-10-02T20:37:21.796506334Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:37:21.796539 env[1733]: time="2023-10-02T20:37:21.796530004Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:37:21.796654 env[1733]: time="2023-10-02T20:37:21.796545358Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:37:21.796654 env[1733]: time="2023-10-02T20:37:21.796555514Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:37:21.801518 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2417454162-merged.mount: Deactivated successfully. Oct 2 20:37:21.927001 env[1733]: time="2023-10-02T20:37:21.926966045Z" level=info msg="Loading containers: start." Oct 2 20:37:22.023000 audit[1760]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1760 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.023000 audit[1760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff3483120 a2=0 a3=1 items=0 ppid=1733 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:37:22.026000 audit[1762]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.026000 audit[1762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffff1f0070 a2=0 a3=1 items=0 ppid=1733 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.026000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:37:22.029000 audit[1764]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.029000 audit[1764]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffc2bca00 a2=0 a3=1 items=0 ppid=1733 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.029000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:37:22.032000 audit[1766]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.032000 audit[1766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc9e2df20 a2=0 a3=1 items=0 ppid=1733 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.032000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:37:22.034000 audit[1768]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.034000 audit[1768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd15f91f0 a2=0 a3=1 items=0 ppid=1733 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.034000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:37:22.037000 audit[1770]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.037000 audit[1770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd92bf740 a2=0 a3=1 items=0 ppid=1733 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.037000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:37:22.051000 audit[1772]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.051000 audit[1772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff3787f50 a2=0 a3=1 items=0 ppid=1733 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.051000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:37:22.053000 audit[1774]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.053000 audit[1774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff475bbf0 a2=0 a3=1 items=0 ppid=1733 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.053000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:37:22.056000 audit[1776]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.056000 audit[1776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff99b0cd0 a2=0 a3=1 items=0 ppid=1733 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.056000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:37:22.071000 audit[1780]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.071000 audit[1780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe0e29460 a2=0 a3=1 items=0 ppid=1733 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.071000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:37:22.072000 audit[1781]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1781 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.072000 audit[1781]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc53bc830 a2=0 a3=1 items=0 ppid=1733 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.072000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:37:22.112961 kernel: Initializing XFRM netlink socket Oct 2 20:37:22.134313 env[1733]: time="2023-10-02T20:37:22.134284101Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:37:22.214000 audit[1788]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1788 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.214000 audit[1788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc70c9bb0 a2=0 a3=1 items=0 ppid=1733 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.214000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:37:22.238000 audit[1791]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.238000 audit[1791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffff856940 a2=0 a3=1 items=0 ppid=1733 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.238000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:37:22.242000 audit[1794]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.242000 audit[1794]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc41ed960 a2=0 a3=1 items=0 ppid=1733 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.242000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:37:22.245000 audit[1796]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1796 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.245000 audit[1796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcb7c26b0 a2=0 a3=1 items=0 ppid=1733 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.245000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:37:22.248000 audit[1798]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1798 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.248000 audit[1798]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffcbdbd430 a2=0 a3=1 items=0 ppid=1733 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:37:22.251000 audit[1800]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1800 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.251000 audit[1800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc0951870 a2=0 a3=1 items=0 ppid=1733 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.251000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:37:22.254000 audit[1802]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.254000 audit[1802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffefc32d00 a2=0 a3=1 items=0 ppid=1733 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.254000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:37:22.257000 audit[1804]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1804 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.257000 audit[1804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc8de14e0 a2=0 a3=1 items=0 ppid=1733 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:37:22.261000 audit[1806]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1806 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.261000 audit[1806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffc730c6b0 a2=0 a3=1 items=0 ppid=1733 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.261000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:37:22.263000 audit[1808]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.263000 audit[1808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe471adf0 a2=0 a3=1 items=0 ppid=1733 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.263000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:37:22.266000 audit[1810]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1810 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.266000 audit[1810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff7e24a10 a2=0 a3=1 items=0 ppid=1733 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.266000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:37:22.268474 systemd-networkd[1501]: docker0: Link UP Oct 2 20:37:22.282000 audit[1814]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.282000 audit[1814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc8422d80 a2=0 a3=1 items=0 ppid=1733 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.282000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:37:22.285000 audit[1815]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1815 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:22.285000 audit[1815]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffea284c0 a2=0 a3=1 items=0 ppid=1733 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.285000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:37:22.286843 env[1733]: time="2023-10-02T20:37:22.286805843Z" level=info msg="Loading containers: done." Oct 2 20:37:22.297923 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1124030360-merged.mount: Deactivated successfully. Oct 2 20:37:22.360602 env[1733]: time="2023-10-02T20:37:22.360560988Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:37:22.361022 env[1733]: time="2023-10-02T20:37:22.361003259Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:37:22.361196 env[1733]: time="2023-10-02T20:37:22.361181631Z" level=info msg="Daemon has completed initialization" Oct 2 20:37:22.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:22.390663 systemd[1]: Started docker.service. Oct 2 20:37:22.397024 env[1733]: time="2023-10-02T20:37:22.396920018Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:37:22.419045 systemd[1]: Reloading. Oct 2 20:37:22.503497 /usr/lib/systemd/system-generators/torcx-generator[1860]: time="2023-10-02T20:37:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:37:22.503525 /usr/lib/systemd/system-generators/torcx-generator[1860]: time="2023-10-02T20:37:22Z" level=info msg="torcx already run" Oct 2 20:37:22.615881 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:37:22.615901 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:37:22.631332 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:37:22.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit: BPF prog-id=35 op=LOAD Oct 2 20:37:22.696000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit: BPF prog-id=36 op=LOAD Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit: BPF prog-id=37 op=LOAD Oct 2 20:37:22.696000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:37:22.696000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.696000 audit: BPF prog-id=38 op=LOAD Oct 2 20:37:22.696000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit: BPF prog-id=39 op=LOAD Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.697000 audit: BPF prog-id=40 op=LOAD Oct 2 20:37:22.697000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:37:22.697000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit: BPF prog-id=41 op=LOAD Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.699000 audit: BPF prog-id=42 op=LOAD Oct 2 20:37:22.699000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:37:22.699000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.700000 audit: BPF prog-id=43 op=LOAD Oct 2 20:37:22.700000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.701000 audit: BPF prog-id=44 op=LOAD Oct 2 20:37:22.701000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit: BPF prog-id=45 op=LOAD Oct 2 20:37:22.702000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit: BPF prog-id=46 op=LOAD Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.702000 audit: BPF prog-id=47 op=LOAD Oct 2 20:37:22.702000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:37:22.702000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.703000 audit: BPF prog-id=48 op=LOAD Oct 2 20:37:22.703000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:22.704000 audit: BPF prog-id=49 op=LOAD Oct 2 20:37:22.704000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:37:22.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:22.711196 systemd[1]: Started kubelet.service. Oct 2 20:37:22.781248 kubelet[1919]: E1002 20:37:22.781196 1919 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:37:22.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:37:22.783296 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:37:22.783410 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:37:26.087774 env[1352]: time="2023-10-02T20:37:26.087466857Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 20:37:27.216452 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3639192.mount: Deactivated successfully. Oct 2 20:37:29.371079 env[1352]: time="2023-10-02T20:37:29.371028443Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:29.375925 env[1352]: time="2023-10-02T20:37:29.375891464Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:29.379213 env[1352]: time="2023-10-02T20:37:29.379185626Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:29.383015 env[1352]: time="2023-10-02T20:37:29.382975747Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:29.383908 env[1352]: time="2023-10-02T20:37:29.383880927Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c\"" Oct 2 20:37:29.398415 env[1352]: time="2023-10-02T20:37:29.398380892Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 20:37:31.832884 env[1352]: time="2023-10-02T20:37:31.832811246Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:31.837315 env[1352]: time="2023-10-02T20:37:31.837281454Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:31.840812 env[1352]: time="2023-10-02T20:37:31.840785147Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:31.844127 env[1352]: time="2023-10-02T20:37:31.844101840Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:31.844724 env[1352]: time="2023-10-02T20:37:31.844698113Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c\"" Oct 2 20:37:31.861185 env[1352]: time="2023-10-02T20:37:31.861148808Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 20:37:32.990171 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:37:32.990348 systemd[1]: Stopped kubelet.service. Oct 2 20:37:32.991736 systemd[1]: Started kubelet.service. Oct 2 20:37:32.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:32.996029 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 20:37:32.996116 kernel: audit: type=1130 audit(1696279052.989:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:32.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:33.031264 kernel: audit: type=1131 audit(1696279052.989:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:33.031359 kernel: audit: type=1130 audit(1696279052.990:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:32.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:33.099217 kubelet[1949]: E1002 20:37:33.099161 1949 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:37:33.101955 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:37:33.102085 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:37:33.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:37:33.119959 kernel: audit: type=1131 audit(1696279053.101:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:37:33.385219 env[1352]: time="2023-10-02T20:37:33.385089019Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:33.393074 env[1352]: time="2023-10-02T20:37:33.393041050Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:33.396281 env[1352]: time="2023-10-02T20:37:33.396248249Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:33.399599 env[1352]: time="2023-10-02T20:37:33.399558310Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:33.400463 env[1352]: time="2023-10-02T20:37:33.400426787Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7\"" Oct 2 20:37:33.415562 env[1352]: time="2023-10-02T20:37:33.415531319Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 20:37:34.890888 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2654339840.mount: Deactivated successfully. Oct 2 20:37:35.724226 env[1352]: time="2023-10-02T20:37:35.724183810Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:35.731623 env[1352]: time="2023-10-02T20:37:35.731596190Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:35.734596 env[1352]: time="2023-10-02T20:37:35.734573580Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:35.736694 env[1352]: time="2023-10-02T20:37:35.736657877Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:35.737077 env[1352]: time="2023-10-02T20:37:35.737046973Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa\"" Oct 2 20:37:35.751705 env[1352]: time="2023-10-02T20:37:35.751666127Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:37:36.316954 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1598699609.mount: Deactivated successfully. Oct 2 20:37:36.335337 env[1352]: time="2023-10-02T20:37:36.335294386Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:36.342752 env[1352]: time="2023-10-02T20:37:36.342722120Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:36.345912 env[1352]: time="2023-10-02T20:37:36.345871874Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:36.350449 env[1352]: time="2023-10-02T20:37:36.350416933Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:36.350806 env[1352]: time="2023-10-02T20:37:36.350780237Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 20:37:36.365391 env[1352]: time="2023-10-02T20:37:36.365357668Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 20:37:43.240184 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:37:43.240352 systemd[1]: Stopped kubelet.service. Oct 2 20:37:43.241753 systemd[1]: Started kubelet.service. Oct 2 20:37:43.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:43.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:43.286969 kernel: audit: type=1130 audit(1696279063.238:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:43.287077 kernel: audit: type=1131 audit(1696279063.238:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:43.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:43.305109 kernel: audit: type=1130 audit(1696279063.239:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:43.361612 kubelet[1970]: E1002 20:37:43.361553 1970 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:37:43.363622 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:37:43.363748 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:37:43.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:37:43.382971 kernel: audit: type=1131 audit(1696279063.362:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:37:44.192110 env[1352]: time="2023-10-02T20:37:44.192065881Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:44.239346 env[1352]: time="2023-10-02T20:37:44.239306252Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:44.300607 env[1352]: time="2023-10-02T20:37:44.300558213Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:44.303320 env[1352]: time="2023-10-02T20:37:44.303296001Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:44.304138 env[1352]: time="2023-10-02T20:37:44.304104406Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 20:37:44.317723 env[1352]: time="2023-10-02T20:37:44.317684396Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:37:46.457691 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3074234640.mount: Deactivated successfully. Oct 2 20:37:47.192166 env[1352]: time="2023-10-02T20:37:47.192098724Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:47.240303 env[1352]: time="2023-10-02T20:37:47.240262590Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:47.285747 env[1352]: time="2023-10-02T20:37:47.285695584Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:47.288311 env[1352]: time="2023-10-02T20:37:47.288282028Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:47.289044 env[1352]: time="2023-10-02T20:37:47.289006773Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 20:37:51.433095 systemd[1]: Stopped kubelet.service. Oct 2 20:37:51.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:51.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:51.470002 kernel: audit: type=1130 audit(1696279071.432:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:51.470094 kernel: audit: type=1131 audit(1696279071.432:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:51.490583 systemd[1]: Reloading. Oct 2 20:37:51.567426 /usr/lib/systemd/system-generators/torcx-generator[2065]: time="2023-10-02T20:37:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:37:51.567454 /usr/lib/systemd/system-generators/torcx-generator[2065]: time="2023-10-02T20:37:51Z" level=info msg="torcx already run" Oct 2 20:37:51.694339 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:37:51.694356 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:37:51.709240 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811739 kernel: audit: type=1400 audit(1696279071.776:395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811817 kernel: audit: type=1400 audit(1696279071.776:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811852 kernel: audit: type=1400 audit(1696279071.776:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845959 kernel: audit: type=1400 audit(1696279071.776:398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.846049 kernel: audit: type=1400 audit(1696279071.776:399): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.880501 kernel: audit: type=1400 audit(1696279071.776:400): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.880571 kernel: audit: type=1400 audit(1696279071.776:401): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.902998 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit: BPF prog-id=50 op=LOAD Oct 2 20:37:51.794000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit: BPF prog-id=51 op=LOAD Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit: BPF prog-id=52 op=LOAD Oct 2 20:37:51.828000 audit: BPF prog-id=36 op=UNLOAD Oct 2 20:37:51.828000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit: BPF prog-id=53 op=LOAD Oct 2 20:37:51.845000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit: BPF prog-id=54 op=LOAD Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.880000 audit: BPF prog-id=55 op=LOAD Oct 2 20:37:51.880000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:37:51.880000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:37:51.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.903000 audit: BPF prog-id=56 op=LOAD Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.904000 audit: BPF prog-id=57 op=LOAD Oct 2 20:37:51.904000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:37:51.904000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:37:51.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.906000 audit: BPF prog-id=58 op=LOAD Oct 2 20:37:51.906000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit: BPF prog-id=59 op=LOAD Oct 2 20:37:51.908000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit: BPF prog-id=60 op=LOAD Oct 2 20:37:51.909000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit: BPF prog-id=61 op=LOAD Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.910000 audit: BPF prog-id=62 op=LOAD Oct 2 20:37:51.910000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:37:51.910000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit: BPF prog-id=63 op=LOAD Oct 2 20:37:51.912000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:51.913000 audit: BPF prog-id=64 op=LOAD Oct 2 20:37:51.913000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:37:51.938672 systemd[1]: Started kubelet.service. Oct 2 20:37:51.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:52.006604 kubelet[2125]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:37:52.006604 kubelet[2125]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:37:52.006604 kubelet[2125]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:37:52.007028 kubelet[2125]: I1002 20:37:52.006692 2125 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:37:53.034191 kubelet[2125]: I1002 20:37:53.034162 2125 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:37:53.034533 kubelet[2125]: I1002 20:37:53.034520 2125 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:37:53.034797 kubelet[2125]: I1002 20:37:53.034783 2125 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:37:53.039567 kubelet[2125]: I1002 20:37:53.039546 2125 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:37:53.040415 kubelet[2125]: E1002 20:37:53.040395 2125 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.4:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.046094 kubelet[2125]: W1002 20:37:53.046075 2125 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:37:53.046580 kubelet[2125]: I1002 20:37:53.046563 2125 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:37:53.046811 kubelet[2125]: I1002 20:37:53.046797 2125 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:37:53.046974 kubelet[2125]: I1002 20:37:53.046957 2125 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:37:53.047062 kubelet[2125]: I1002 20:37:53.047005 2125 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:37:53.047062 kubelet[2125]: I1002 20:37:53.047014 2125 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:37:53.047113 kubelet[2125]: I1002 20:37:53.047095 2125 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:37:53.047306 kubelet[2125]: I1002 20:37:53.047286 2125 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:37:53.047306 kubelet[2125]: I1002 20:37:53.047305 2125 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:37:53.047358 kubelet[2125]: I1002 20:37:53.047320 2125 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:37:53.047358 kubelet[2125]: I1002 20:37:53.047330 2125 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:37:53.048434 kubelet[2125]: W1002 20:37:53.048398 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-1cb893e9b8&limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.048542 kubelet[2125]: E1002 20:37:53.048531 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-1cb893e9b8&limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.048764 kubelet[2125]: I1002 20:37:53.048744 2125 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:37:53.049224 kubelet[2125]: W1002 20:37:53.049208 2125 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:37:53.049823 kubelet[2125]: I1002 20:37:53.049805 2125 server.go:1232] "Started kubelet" Oct 2 20:37:53.050029 kubelet[2125]: W1002 20:37:53.049997 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.050123 kubelet[2125]: E1002 20:37:53.050113 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.050000 audit[2125]: AVC avc: denied { mac_admin } for pid=2125 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:53.050000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:37:53.050000 audit[2125]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000844450 a1=4000e7cc30 a2=4000844420 a3=25 items=0 ppid=1 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.050000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:37:53.052094 kubelet[2125]: I1002 20:37:53.052077 2125 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:37:53.051000 audit[2125]: AVC avc: denied { mac_admin } for pid=2125 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:53.051000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:37:53.051000 audit[2125]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d81780 a1=4000e7cc48 a2=40008444e0 a3=25 items=0 ppid=1 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.051000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:37:53.052336 kubelet[2125]: I1002 20:37:53.052324 2125 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:37:53.052849 kubelet[2125]: E1002 20:37:53.052463 2125 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-1cb893e9b8.178a64d4650fb643", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-1cb893e9b8", UID:"ci-3510.3.0-a-1cb893e9b8", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-1cb893e9b8"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 37, 53, 49785923, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 37, 53, 49785923, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-1cb893e9b8"}': 'Post "https://10.200.20.4:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.4:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:37:53.052849 kubelet[2125]: I1002 20:37:53.052639 2125 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:37:53.053015 kubelet[2125]: I1002 20:37:53.052905 2125 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:37:53.053015 kubelet[2125]: I1002 20:37:53.052975 2125 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:37:53.053135 kubelet[2125]: I1002 20:37:53.053122 2125 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:37:53.053572 kubelet[2125]: I1002 20:37:53.053539 2125 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:37:53.054462 kubelet[2125]: E1002 20:37:53.054424 2125 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:37:53.054462 kubelet[2125]: E1002 20:37:53.054449 2125 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:37:53.057134 kubelet[2125]: I1002 20:37:53.056155 2125 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:37:53.057134 kubelet[2125]: I1002 20:37:53.056227 2125 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:37:53.057134 kubelet[2125]: I1002 20:37:53.056276 2125 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:37:53.057134 kubelet[2125]: W1002 20:37:53.056526 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.057134 kubelet[2125]: E1002 20:37:53.056556 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.057134 kubelet[2125]: E1002 20:37:53.057054 2125 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-1cb893e9b8?timeout=10s\": dial tcp 10.200.20.4:6443: connect: connection refused" interval="200ms" Oct 2 20:37:53.059000 audit[2136]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:53.059000 audit[2136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe4568ae0 a2=0 a3=1 items=0 ppid=2125 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:37:53.060000 audit[2137]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:53.060000 audit[2137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5ad64b0 a2=0 a3=1 items=0 ppid=2125 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.060000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:37:53.063000 audit[2139]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:53.063000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc2ca9060 a2=0 a3=1 items=0 ppid=2125 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:37:53.066000 audit[2141]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:53.066000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff7207120 a2=0 a3=1 items=0 ppid=2125 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:37:53.107000 audit[2146]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:53.107000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff1b31e30 a2=0 a3=1 items=0 ppid=2125 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:37:53.108433 kubelet[2125]: I1002 20:37:53.108402 2125 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:37:53.109000 audit[2148]: NETFILTER_CFG table=mangle:34 family=10 entries=2 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:37:53.109000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc82d8030 a2=0 a3=1 items=0 ppid=2125 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.109000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:37:53.110945 kubelet[2125]: I1002 20:37:53.110910 2125 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:37:53.110945 kubelet[2125]: I1002 20:37:53.110951 2125 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:37:53.111047 kubelet[2125]: I1002 20:37:53.110972 2125 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:37:53.111047 kubelet[2125]: E1002 20:37:53.111018 2125 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:37:53.110000 audit[2149]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:53.110000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc53a16a0 a2=0 a3=1 items=0 ppid=2125 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:37:53.111928 kubelet[2125]: W1002 20:37:53.111516 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.111928 kubelet[2125]: E1002 20:37:53.111559 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.112000 audit[2152]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:37:53.112000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd4585f60 a2=0 a3=1 items=0 ppid=2125 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.112000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:37:53.112000 audit[2153]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:53.112000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff59f05d0 a2=0 a3=1 items=0 ppid=2125 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.112000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:37:53.114000 audit[2155]: NETFILTER_CFG table=nat:38 family=10 entries=2 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:37:53.114000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe4e829d0 a2=0 a3=1 items=0 ppid=2125 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.114000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:37:53.114000 audit[2154]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:37:53.114000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcad00aa0 a2=0 a3=1 items=0 ppid=2125 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.114000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:37:53.116000 audit[2156]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:37:53.116000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffd0dd720 a2=0 a3=1 items=0 ppid=2125 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.116000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:37:53.126784 kubelet[2125]: I1002 20:37:53.126762 2125 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:37:53.126784 kubelet[2125]: I1002 20:37:53.126783 2125 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:37:53.126899 kubelet[2125]: I1002 20:37:53.126808 2125 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:37:53.131278 kubelet[2125]: I1002 20:37:53.131257 2125 policy_none.go:49] "None policy: Start" Oct 2 20:37:53.131910 kubelet[2125]: I1002 20:37:53.131893 2125 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:37:53.132137 kubelet[2125]: I1002 20:37:53.132112 2125 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:37:53.138503 systemd[1]: Created slice kubepods.slice. Oct 2 20:37:53.142616 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:37:53.152883 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:37:53.154040 kubelet[2125]: I1002 20:37:53.154023 2125 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:37:53.153000 audit[2125]: AVC avc: denied { mac_admin } for pid=2125 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:53.153000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:37:53.153000 audit[2125]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ff8ba0 a1=4000ffb278 a2=4000ff8b70 a3=25 items=0 ppid=1 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:53.153000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:37:53.154361 kubelet[2125]: I1002 20:37:53.154347 2125 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:37:53.154808 kubelet[2125]: I1002 20:37:53.154792 2125 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:37:53.155718 kubelet[2125]: E1002 20:37:53.155659 2125 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:37:53.157259 kubelet[2125]: I1002 20:37:53.157242 2125 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.157734 kubelet[2125]: E1002 20:37:53.157722 2125 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.4:6443/api/v1/nodes\": dial tcp 10.200.20.4:6443: connect: connection refused" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.211380 kubelet[2125]: I1002 20:37:53.211362 2125 topology_manager.go:215] "Topology Admit Handler" podUID="d6fc2c1f46ed19a1f718a632d574e088" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.212652 kubelet[2125]: I1002 20:37:53.212629 2125 topology_manager.go:215] "Topology Admit Handler" podUID="9d4620781125b114331cb9e726f71ba5" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.213873 kubelet[2125]: I1002 20:37:53.213849 2125 topology_manager.go:215] "Topology Admit Handler" podUID="855d020c71951f52be0aecac3b3ee124" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.218676 systemd[1]: Created slice kubepods-burstable-podd6fc2c1f46ed19a1f718a632d574e088.slice. Oct 2 20:37:53.228683 systemd[1]: Created slice kubepods-burstable-pod9d4620781125b114331cb9e726f71ba5.slice. Oct 2 20:37:53.232506 systemd[1]: Created slice kubepods-burstable-pod855d020c71951f52be0aecac3b3ee124.slice. Oct 2 20:37:53.256868 kubelet[2125]: I1002 20:37:53.256850 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.257042 kubelet[2125]: I1002 20:37:53.257031 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.257486 kubelet[2125]: I1002 20:37:53.257473 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9d4620781125b114331cb9e726f71ba5-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-1cb893e9b8\" (UID: \"9d4620781125b114331cb9e726f71ba5\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.257618 kubelet[2125]: I1002 20:37:53.257609 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/855d020c71951f52be0aecac3b3ee124-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-1cb893e9b8\" (UID: \"855d020c71951f52be0aecac3b3ee124\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.257742 kubelet[2125]: I1002 20:37:53.257732 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/855d020c71951f52be0aecac3b3ee124-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-1cb893e9b8\" (UID: \"855d020c71951f52be0aecac3b3ee124\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.257858 kubelet[2125]: I1002 20:37:53.257848 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/855d020c71951f52be0aecac3b3ee124-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-1cb893e9b8\" (UID: \"855d020c71951f52be0aecac3b3ee124\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.257988 kubelet[2125]: I1002 20:37:53.257978 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.258096 kubelet[2125]: I1002 20:37:53.258086 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.258210 kubelet[2125]: I1002 20:37:53.258201 2125 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.258304 kubelet[2125]: E1002 20:37:53.257424 2125 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-1cb893e9b8?timeout=10s\": dial tcp 10.200.20.4:6443: connect: connection refused" interval="400ms" Oct 2 20:37:53.360809 kubelet[2125]: I1002 20:37:53.360170 2125 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.360809 kubelet[2125]: E1002 20:37:53.360687 2125 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.4:6443/api/v1/nodes\": dial tcp 10.200.20.4:6443: connect: connection refused" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.529133 env[1352]: time="2023-10-02T20:37:53.529041362Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-1cb893e9b8,Uid:d6fc2c1f46ed19a1f718a632d574e088,Namespace:kube-system,Attempt:0,}" Oct 2 20:37:53.532169 env[1352]: time="2023-10-02T20:37:53.532134243Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-1cb893e9b8,Uid:9d4620781125b114331cb9e726f71ba5,Namespace:kube-system,Attempt:0,}" Oct 2 20:37:53.534726 env[1352]: time="2023-10-02T20:37:53.534663232Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-1cb893e9b8,Uid:855d020c71951f52be0aecac3b3ee124,Namespace:kube-system,Attempt:0,}" Oct 2 20:37:53.659174 kubelet[2125]: E1002 20:37:53.658932 2125 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-1cb893e9b8?timeout=10s\": dial tcp 10.200.20.4:6443: connect: connection refused" interval="800ms" Oct 2 20:37:53.762790 kubelet[2125]: I1002 20:37:53.762757 2125 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.763124 kubelet[2125]: E1002 20:37:53.763096 2125 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.4:6443/api/v1/nodes\": dial tcp 10.200.20.4:6443: connect: connection refused" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:53.871011 kubelet[2125]: W1002 20:37:53.870920 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:53.871011 kubelet[2125]: E1002 20:37:53.871013 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:54.066851 kubelet[2125]: W1002 20:37:54.066788 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:54.066851 kubelet[2125]: E1002 20:37:54.066855 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:54.151691 kubelet[2125]: E1002 20:37:54.151565 2125 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-1cb893e9b8.178a64d4650fb643", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-1cb893e9b8", UID:"ci-3510.3.0-a-1cb893e9b8", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-1cb893e9b8"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 37, 53, 49785923, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 37, 53, 49785923, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-1cb893e9b8"}': 'Post "https://10.200.20.4:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.4:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:37:54.244647 kubelet[2125]: W1002 20:37:54.244591 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-1cb893e9b8&limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:54.244762 kubelet[2125]: E1002 20:37:54.244656 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-1cb893e9b8&limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:54.309466 kubelet[2125]: W1002 20:37:54.309418 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:54.309528 kubelet[2125]: E1002 20:37:54.309474 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:54.459743 kubelet[2125]: E1002 20:37:54.459413 2125 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-1cb893e9b8?timeout=10s\": dial tcp 10.200.20.4:6443: connect: connection refused" interval="1.6s" Oct 2 20:37:54.565510 kubelet[2125]: I1002 20:37:54.565480 2125 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:54.565807 kubelet[2125]: E1002 20:37:54.565792 2125 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.4:6443/api/v1/nodes\": dial tcp 10.200.20.4:6443: connect: connection refused" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:55.056021 kubelet[2125]: E1002 20:37:55.055982 2125 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.4:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:55.756396 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2875636692.mount: Deactivated successfully. Oct 2 20:37:56.060832 kubelet[2125]: E1002 20:37:56.060617 2125 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-1cb893e9b8?timeout=10s\": dial tcp 10.200.20.4:6443: connect: connection refused" interval="3.2s" Oct 2 20:37:56.097898 env[1352]: time="2023-10-02T20:37:56.097860631Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.143445 env[1352]: time="2023-10-02T20:37:56.143389819Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.167959 kubelet[2125]: I1002 20:37:56.167624 2125 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:56.167959 kubelet[2125]: E1002 20:37:56.167925 2125 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.4:6443/api/v1/nodes\": dial tcp 10.200.20.4:6443: connect: connection refused" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:37:56.240240 env[1352]: time="2023-10-02T20:37:56.240179152Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.300094 env[1352]: time="2023-10-02T20:37:56.300047852Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.342519 env[1352]: time="2023-10-02T20:37:56.342214223Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.395439 env[1352]: time="2023-10-02T20:37:56.395381566Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.444578 env[1352]: time="2023-10-02T20:37:56.444527761Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.492710 env[1352]: time="2023-10-02T20:37:56.492649319Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.601413 env[1352]: time="2023-10-02T20:37:56.601147755Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.602648 kubelet[2125]: W1002 20:37:56.602608 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:56.602648 kubelet[2125]: E1002 20:37:56.602651 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:56.694725 env[1352]: time="2023-10-02T20:37:56.694686866Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.718537 kubelet[2125]: W1002 20:37:56.718499 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:56.718537 kubelet[2125]: E1002 20:37:56.718541 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:56.743009 env[1352]: time="2023-10-02T20:37:56.742965657Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.892103 kubelet[2125]: W1002 20:37:56.891783 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-1cb893e9b8&limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:56.892103 kubelet[2125]: E1002 20:37:56.891832 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-1cb893e9b8&limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:56.953299 env[1352]: time="2023-10-02T20:37:56.953232055Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:37:56.953442 env[1352]: time="2023-10-02T20:37:56.953271493Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:37:56.953442 env[1352]: time="2023-10-02T20:37:56.953282213Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:37:56.953725 env[1352]: time="2023-10-02T20:37:56.953685276Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/18cd166b28d871a772b07c7a365e4dc70a9d75d9b6a0c6a23166c2c8df2b88e3 pid=2165 runtime=io.containerd.runc.v2 Oct 2 20:37:56.971713 systemd[1]: run-containerd-runc-k8s.io-18cd166b28d871a772b07c7a365e4dc70a9d75d9b6a0c6a23166c2c8df2b88e3-runc.nsm4p8.mount: Deactivated successfully. Oct 2 20:37:56.983492 systemd[1]: Started cri-containerd-18cd166b28d871a772b07c7a365e4dc70a9d75d9b6a0c6a23166c2c8df2b88e3.scope. Oct 2 20:37:56.999298 kernel: kauditd_printk_skb: 215 callbacks suppressed Oct 2 20:37:56.999468 kernel: audit: type=1400 audit(1696279076.993:582): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.017847 env[1352]: time="2023-10-02T20:37:57.017805269Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.036439 kernel: audit: type=1400 audit(1696279076.993:583): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.047373 kubelet[2125]: W1002 20:37:57.047303 2125 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:57.047373 kubelet[2125]: E1002 20:37:57.047353 2125 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.4:6443: connect: connection refused Oct 2 20:37:57.059726 kernel: audit: type=1400 audit(1696279076.993:584): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.078379 kernel: audit: type=1400 audit(1696279076.993:585): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.096432 kernel: audit: type=1400 audit(1696279076.993:586): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.115262 kernel: audit: type=1400 audit(1696279076.993:587): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.135291 kernel: audit: type=1400 audit(1696279076.993:588): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.135339 kernel: audit: type=1400 audit(1696279076.993:589): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.170294 kernel: audit: type=1400 audit(1696279076.993:590): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.171524 env[1352]: time="2023-10-02T20:37:57.171485995Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-1cb893e9b8,Uid:855d020c71951f52be0aecac3b3ee124,Namespace:kube-system,Attempt:0,} returns sandbox id \"18cd166b28d871a772b07c7a365e4dc70a9d75d9b6a0c6a23166c2c8df2b88e3\"" Oct 2 20:37:57.188233 kernel: audit: type=1400 audit(1696279076.999:591): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:56.999000 audit: BPF prog-id=65 op=LOAD Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2165 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138636431363662323864383731613737326230376337613336356534 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2165 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138636431363662323864383731613737326230376337613336356534 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit: BPF prog-id=66 op=LOAD Oct 2 20:37:57.016000 audit[2176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2165 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138636431363662323864383731613737326230376337613336356534 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit: BPF prog-id=67 op=LOAD Oct 2 20:37:57.016000 audit[2176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2165 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138636431363662323864383731613737326230376337613336356534 Oct 2 20:37:57.016000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:37:57.016000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { perfmon } for pid=2176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit[2176]: AVC avc: denied { bpf } for pid=2176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.016000 audit: BPF prog-id=68 op=LOAD Oct 2 20:37:57.016000 audit[2176]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2165 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138636431363662323864383731613737326230376337613336356534 Oct 2 20:37:57.191827 env[1352]: time="2023-10-02T20:37:57.191784308Z" level=info msg="CreateContainer within sandbox \"18cd166b28d871a772b07c7a365e4dc70a9d75d9b6a0c6a23166c2c8df2b88e3\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:37:57.404219 env[1352]: time="2023-10-02T20:37:57.404153380Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:37:57.404346 env[1352]: time="2023-10-02T20:37:57.404194258Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:37:57.404346 env[1352]: time="2023-10-02T20:37:57.404204337Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:37:57.404460 env[1352]: time="2023-10-02T20:37:57.404439888Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/95eb1a1021011f7a516cf3662dd9c199801874a730c43815549b6abcd0f61809 pid=2207 runtime=io.containerd.runc.v2 Oct 2 20:37:57.418427 systemd[1]: Started cri-containerd-95eb1a1021011f7a516cf3662dd9c199801874a730c43815549b6abcd0f61809.scope. Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.433000 audit: BPF prog-id=69 op=LOAD Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2207 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935656231613130323130313166376135313663663336363264643963 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2207 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935656231613130323130313166376135313663663336363264643963 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.434000 audit: BPF prog-id=70 op=LOAD Oct 2 20:37:57.434000 audit[2217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2207 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935656231613130323130313166376135313663663336363264643963 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit: BPF prog-id=71 op=LOAD Oct 2 20:37:57.435000 audit[2217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2207 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935656231613130323130313166376135313663663336363264643963 Oct 2 20:37:57.435000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:37:57.435000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { perfmon } for pid=2217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit[2217]: AVC avc: denied { bpf } for pid=2217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.435000 audit: BPF prog-id=72 op=LOAD Oct 2 20:37:57.435000 audit[2217]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2207 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935656231613130323130313166376135313663663336363264643963 Oct 2 20:37:57.459395 env[1352]: time="2023-10-02T20:37:57.459360143Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-1cb893e9b8,Uid:d6fc2c1f46ed19a1f718a632d574e088,Namespace:kube-system,Attempt:0,} returns sandbox id \"95eb1a1021011f7a516cf3662dd9c199801874a730c43815549b6abcd0f61809\"" Oct 2 20:37:57.462330 env[1352]: time="2023-10-02T20:37:57.462301906Z" level=info msg="CreateContainer within sandbox \"95eb1a1021011f7a516cf3662dd9c199801874a730c43815549b6abcd0f61809\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:37:57.956895 env[1352]: time="2023-10-02T20:37:57.956823074Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:37:57.957109 env[1352]: time="2023-10-02T20:37:57.957084383Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:37:57.957190 env[1352]: time="2023-10-02T20:37:57.957170380Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:37:57.957504 env[1352]: time="2023-10-02T20:37:57.957468368Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3fe88c0b650ff31afcd3a4cfc0efaa6dad8647505648d096f3a9de616eb0dac3 pid=2250 runtime=io.containerd.runc.v2 Oct 2 20:37:57.974126 systemd[1]: Started cri-containerd-3fe88c0b650ff31afcd3a4cfc0efaa6dad8647505648d096f3a9de616eb0dac3.scope. Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit: BPF prog-id=73 op=LOAD Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2250 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653838633062363530666633316166636433613463666330656661 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2250 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653838633062363530666633316166636433613463666330656661 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.995000 audit: BPF prog-id=74 op=LOAD Oct 2 20:37:57.995000 audit[2260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2250 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653838633062363530666633316166636433613463666330656661 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit: BPF prog-id=75 op=LOAD Oct 2 20:37:57.996000 audit[2260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2250 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653838633062363530666633316166636433613463666330656661 Oct 2 20:37:57.996000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:37:57.996000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:57.996000 audit: BPF prog-id=76 op=LOAD Oct 2 20:37:57.996000 audit[2260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2250 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:57.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653838633062363530666633316166636433613463666330656661 Oct 2 20:37:58.017687 env[1352]: time="2023-10-02T20:37:58.017638816Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-1cb893e9b8,Uid:9d4620781125b114331cb9e726f71ba5,Namespace:kube-system,Attempt:0,} returns sandbox id \"3fe88c0b650ff31afcd3a4cfc0efaa6dad8647505648d096f3a9de616eb0dac3\"" Oct 2 20:37:58.020107 env[1352]: time="2023-10-02T20:37:58.020072645Z" level=info msg="CreateContainer within sandbox \"3fe88c0b650ff31afcd3a4cfc0efaa6dad8647505648d096f3a9de616eb0dac3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:37:58.100218 env[1352]: time="2023-10-02T20:37:58.100173258Z" level=info msg="CreateContainer within sandbox \"18cd166b28d871a772b07c7a365e4dc70a9d75d9b6a0c6a23166c2c8df2b88e3\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"85284383234da77bf572ec47772d30bfdf33b6bb65ca36fbc251cacad0499206\"" Oct 2 20:37:58.101099 env[1352]: time="2023-10-02T20:37:58.101074824Z" level=info msg="StartContainer for \"85284383234da77bf572ec47772d30bfdf33b6bb65ca36fbc251cacad0499206\"" Oct 2 20:37:58.123386 systemd[1]: Started cri-containerd-85284383234da77bf572ec47772d30bfdf33b6bb65ca36fbc251cacad0499206.scope. Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.143000 audit: BPF prog-id=77 op=LOAD Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2165 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835323834333833323334646137376266353732656334373737326433 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2165 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835323834333833323334646137376266353732656334373737326433 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit: BPF prog-id=78 op=LOAD Oct 2 20:37:58.144000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2165 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835323834333833323334646137376266353732656334373737326433 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit: BPF prog-id=79 op=LOAD Oct 2 20:37:58.144000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2165 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835323834333833323334646137376266353732656334373737326433 Oct 2 20:37:58.144000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:37:58.144000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { perfmon } for pid=2292 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit[2292]: AVC avc: denied { bpf } for pid=2292 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.144000 audit: BPF prog-id=80 op=LOAD Oct 2 20:37:58.144000 audit[2292]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2165 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835323834333833323334646137376266353732656334373737326433 Oct 2 20:37:58.195260 env[1352]: time="2023-10-02T20:37:58.195208393Z" level=info msg="StartContainer for \"85284383234da77bf572ec47772d30bfdf33b6bb65ca36fbc251cacad0499206\" returns successfully" Oct 2 20:37:58.289251 env[1352]: time="2023-10-02T20:37:58.289197808Z" level=info msg="CreateContainer within sandbox \"95eb1a1021011f7a516cf3662dd9c199801874a730c43815549b6abcd0f61809\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd\"" Oct 2 20:37:58.289903 env[1352]: time="2023-10-02T20:37:58.289854463Z" level=info msg="StartContainer for \"08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd\"" Oct 2 20:37:58.311636 systemd[1]: Started cri-containerd-08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd.scope. Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.339000 audit: BPF prog-id=81 op=LOAD Oct 2 20:37:58.340000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.340000 audit[2329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2207 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038626530636134346163346164613462323066323734663832396262 Oct 2 20:37:58.340000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.340000 audit[2329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2207 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038626530636134346163346164613462323066323734663832396262 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit: BPF prog-id=82 op=LOAD Oct 2 20:37:58.341000 audit[2329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2207 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038626530636134346163346164613462323066323734663832396262 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.341000 audit: BPF prog-id=83 op=LOAD Oct 2 20:37:58.341000 audit[2329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2207 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038626530636134346163346164613462323066323734663832396262 Oct 2 20:37:58.342000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:37:58.342000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { perfmon } for pid=2329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit[2329]: AVC avc: denied { bpf } for pid=2329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.342000 audit: BPF prog-id=84 op=LOAD Oct 2 20:37:58.342000 audit[2329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2207 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038626530636134346163346164613462323066323734663832396262 Oct 2 20:37:58.447518 env[1352]: time="2023-10-02T20:37:58.447457226Z" level=info msg="StartContainer for \"08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd\" returns successfully" Oct 2 20:37:58.592148 env[1352]: time="2023-10-02T20:37:58.592025554Z" level=info msg="CreateContainer within sandbox \"3fe88c0b650ff31afcd3a4cfc0efaa6dad8647505648d096f3a9de616eb0dac3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7\"" Oct 2 20:37:58.592727 env[1352]: time="2023-10-02T20:37:58.592702929Z" level=info msg="StartContainer for \"63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7\"" Oct 2 20:37:58.631602 systemd[1]: Started cri-containerd-63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7.scope. Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.686000 audit: BPF prog-id=85 op=LOAD Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2250 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633613135393035383038343663386335393939666435396333636530 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2250 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633613135393035383038343663386335393939666435396333636530 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit: BPF prog-id=86 op=LOAD Oct 2 20:37:58.687000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2250 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633613135393035383038343663386335393939666435396333636530 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit: BPF prog-id=87 op=LOAD Oct 2 20:37:58.687000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2250 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633613135393035383038343663386335393939666435396333636530 Oct 2 20:37:58.687000 audit: BPF prog-id=87 op=UNLOAD Oct 2 20:37:58.687000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:37:58.687000 audit: BPF prog-id=88 op=LOAD Oct 2 20:37:58.687000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2250 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:58.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633613135393035383038343663386335393939666435396333636530 Oct 2 20:37:58.742672 env[1352]: time="2023-10-02T20:37:58.742626217Z" level=info msg="StartContainer for \"63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7\" returns successfully" Oct 2 20:37:59.370033 kubelet[2125]: I1002 20:37:59.370007 2125 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:00.213000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:00.213000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4005c1fb00 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:38:00.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:00.213000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:00.213000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003234720 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:38:00.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:00.214000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:00.214000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003f31470 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:38:00.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:00.225000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:00.225000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4005c1fd10 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:38:00.225000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:00.297295 kubelet[2125]: E1002 20:38:00.297268 2125 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-1cb893e9b8\" not found" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:00.315000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:00.315000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4004a4fad0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:38:00.315000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:00.317000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:00.317000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4005788900 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:38:00.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:00.353315 kubelet[2125]: I1002 20:38:00.353281 2125 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:00.368876 kubelet[2125]: E1002 20:38:00.368842 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:00.469721 kubelet[2125]: E1002 20:38:00.469612 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:00.570087 kubelet[2125]: E1002 20:38:00.570048 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:00.670800 kubelet[2125]: E1002 20:38:00.670761 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:00.771398 kubelet[2125]: E1002 20:38:00.771367 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:00.866000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:00.866000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000073b60 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:00.866000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:00.866000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:00.866000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001288c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:00.866000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:00.872071 kubelet[2125]: E1002 20:38:00.872048 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:00.972707 kubelet[2125]: E1002 20:38:00.972676 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.073698 kubelet[2125]: E1002 20:38:01.073605 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.174347 kubelet[2125]: E1002 20:38:01.174317 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.274976 kubelet[2125]: E1002 20:38:01.274927 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.375621 kubelet[2125]: E1002 20:38:01.375517 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.476114 kubelet[2125]: E1002 20:38:01.476069 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.576736 kubelet[2125]: E1002 20:38:01.576697 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.677193 kubelet[2125]: E1002 20:38:01.677099 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.777262 kubelet[2125]: E1002 20:38:01.777225 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.877868 kubelet[2125]: E1002 20:38:01.877823 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:01.978488 kubelet[2125]: E1002 20:38:01.978386 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:02.079503 kubelet[2125]: E1002 20:38:02.079458 2125 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-1cb893e9b8\" not found" Oct 2 20:38:03.035083 systemd[1]: Reloading. Oct 2 20:38:03.053032 kubelet[2125]: I1002 20:38:03.052996 2125 apiserver.go:52] "Watching apiserver" Oct 2 20:38:03.058780 kubelet[2125]: I1002 20:38:03.058760 2125 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:38:03.134518 /usr/lib/systemd/system-generators/torcx-generator[2417]: time="2023-10-02T20:38:03Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:38:03.137023 /usr/lib/systemd/system-generators/torcx-generator[2417]: time="2023-10-02T20:38:03Z" level=info msg="torcx already run" Oct 2 20:38:03.261693 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:38:03.261715 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:38:03.277035 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.363037 kernel: kauditd_printk_skb: 356 callbacks suppressed Oct 2 20:38:03.363156 kernel: audit: type=1400 audit(1696279083.356:698): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398814 kernel: audit: type=1400 audit(1696279083.356:699): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.415902 kernel: audit: type=1400 audit(1696279083.356:700): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.416006 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.438932 kernel: audit: type=1400 audit(1696279083.356:701): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.439071 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.463627 kernel: audit: type=1400 audit(1696279083.356:702): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.463724 kernel: audit: backlog limit exceeded Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.486265 kernel: audit: type=1400 audit(1696279083.356:703): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.486340 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit: BPF prog-id=89 op=LOAD Oct 2 20:38:03.362000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit: BPF prog-id=90 op=LOAD Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit: BPF prog-id=91 op=LOAD Oct 2 20:38:03.380000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:38:03.380000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.397000 audit: BPF prog-id=92 op=LOAD Oct 2 20:38:03.397000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit: BPF prog-id=93 op=LOAD Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.398000 audit: BPF prog-id=94 op=LOAD Oct 2 20:38:03.398000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:38:03.398000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:38:03.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.491000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.491000 audit: BPF prog-id=95 op=LOAD Oct 2 20:38:03.491000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.492000 audit: BPF prog-id=96 op=LOAD Oct 2 20:38:03.493000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit: BPF prog-id=97 op=LOAD Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.494000 audit: BPF prog-id=98 op=LOAD Oct 2 20:38:03.494000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:38:03.494000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.495000 audit: BPF prog-id=99 op=LOAD Oct 2 20:38:03.495000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.496000 audit: BPF prog-id=100 op=LOAD Oct 2 20:38:03.496000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit: BPF prog-id=101 op=LOAD Oct 2 20:38:03.497000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.497000 audit: BPF prog-id=102 op=LOAD Oct 2 20:38:03.498000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.498000 audit: BPF prog-id=103 op=LOAD Oct 2 20:38:03.498000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit: BPF prog-id=104 op=LOAD Oct 2 20:38:03.499000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit: BPF prog-id=105 op=LOAD Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.499000 audit: BPF prog-id=106 op=LOAD Oct 2 20:38:03.499000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:38:03.499000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit: BPF prog-id=107 op=LOAD Oct 2 20:38:03.500000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.500000 audit: BPF prog-id=108 op=LOAD Oct 2 20:38:03.500000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.501000 audit: BPF prog-id=109 op=LOAD Oct 2 20:38:03.501000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:38:03.521877 kubelet[2125]: I1002 20:38:03.521840 2125 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:38:03.524680 systemd[1]: Stopping kubelet.service... Oct 2 20:38:03.541287 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:38:03.541497 systemd[1]: Stopped kubelet.service. Oct 2 20:38:03.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:03.541554 systemd[1]: kubelet.service: Consumed 1.359s CPU time. Oct 2 20:38:03.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:03.543273 systemd[1]: Started kubelet.service. Oct 2 20:38:03.632366 kubelet[2477]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:38:03.632990 kubelet[2477]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:38:03.633107 kubelet[2477]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:38:03.633464 kubelet[2477]: I1002 20:38:03.633401 2477 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:38:03.640998 kubelet[2477]: I1002 20:38:03.640972 2477 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:38:03.640998 kubelet[2477]: I1002 20:38:03.640994 2477 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:38:03.641210 kubelet[2477]: I1002 20:38:03.641191 2477 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:38:03.642681 kubelet[2477]: I1002 20:38:03.642661 2477 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:38:03.644341 kubelet[2477]: I1002 20:38:03.644319 2477 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:38:03.658585 kubelet[2477]: W1002 20:38:03.658563 2477 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:38:03.659261 kubelet[2477]: I1002 20:38:03.659226 2477 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:38:03.659563 kubelet[2477]: I1002 20:38:03.659546 2477 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:38:03.659724 kubelet[2477]: I1002 20:38:03.659706 2477 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:38:03.659797 kubelet[2477]: I1002 20:38:03.659755 2477 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:38:03.659797 kubelet[2477]: I1002 20:38:03.659764 2477 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:38:03.659856 kubelet[2477]: I1002 20:38:03.659815 2477 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:38:03.666184 kubelet[2477]: I1002 20:38:03.661048 2477 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:38:03.666184 kubelet[2477]: I1002 20:38:03.661103 2477 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:38:03.666184 kubelet[2477]: I1002 20:38:03.661128 2477 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:38:03.666184 kubelet[2477]: I1002 20:38:03.661168 2477 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:38:03.672853 kubelet[2477]: I1002 20:38:03.672835 2477 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:38:03.674761 kubelet[2477]: I1002 20:38:03.674744 2477 server.go:1232] "Started kubelet" Oct 2 20:38:03.678000 audit[2477]: AVC avc: denied { mac_admin } for pid=2477 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.678000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:38:03.678000 audit[2477]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b17b30 a1=4000a42690 a2=4000b17b00 a3=25 items=0 ppid=1 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:03.678000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:38:03.679598 kubelet[2477]: I1002 20:38:03.679584 2477 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:38:03.678000 audit[2477]: AVC avc: denied { mac_admin } for pid=2477 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.678000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:38:03.678000 audit[2477]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b31420 a1=4000a426a8 a2=4000b17bc0 a3=25 items=0 ppid=1 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:03.678000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:38:03.679866 kubelet[2477]: I1002 20:38:03.679854 2477 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:38:03.683495 kubelet[2477]: I1002 20:38:03.683420 2477 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:38:03.683898 kubelet[2477]: I1002 20:38:03.680062 2477 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:38:03.686584 kubelet[2477]: I1002 20:38:03.686565 2477 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:38:03.688754 kubelet[2477]: I1002 20:38:03.680095 2477 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:38:03.689070 kubelet[2477]: I1002 20:38:03.689054 2477 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:38:03.689178 kubelet[2477]: E1002 20:38:03.682745 2477 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:38:03.689258 kubelet[2477]: E1002 20:38:03.689247 2477 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:38:03.689847 kubelet[2477]: I1002 20:38:03.689816 2477 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:38:03.690101 kubelet[2477]: I1002 20:38:03.690074 2477 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:38:03.690316 kubelet[2477]: I1002 20:38:03.690306 2477 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:38:03.698000 audit[2492]: USER_ACCT pid=2492 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:38:03.699801 sudo[2492]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:38:03.698000 audit[2492]: CRED_REFR pid=2492 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:38:03.700019 sudo[2492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:38:03.703000 audit[2492]: USER_START pid=2492 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:38:03.705998 kubelet[2477]: I1002 20:38:03.705979 2477 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:38:03.707716 kubelet[2477]: I1002 20:38:03.707700 2477 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:38:03.707932 kubelet[2477]: I1002 20:38:03.707920 2477 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:38:03.708045 kubelet[2477]: I1002 20:38:03.708034 2477 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:38:03.708146 kubelet[2477]: E1002 20:38:03.708136 2477 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:38:03.771968 kubelet[2477]: I1002 20:38:03.771920 2477 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:38:03.772122 kubelet[2477]: I1002 20:38:03.772111 2477 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:38:03.772195 kubelet[2477]: I1002 20:38:03.772186 2477 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:38:03.772405 kubelet[2477]: I1002 20:38:03.772393 2477 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:38:03.772495 kubelet[2477]: I1002 20:38:03.772485 2477 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 20:38:03.772575 kubelet[2477]: I1002 20:38:03.772566 2477 policy_none.go:49] "None policy: Start" Oct 2 20:38:03.773324 kubelet[2477]: I1002 20:38:03.773308 2477 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:38:03.773430 kubelet[2477]: I1002 20:38:03.773421 2477 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:38:03.773638 kubelet[2477]: I1002 20:38:03.773626 2477 state_mem.go:75] "Updated machine memory state" Oct 2 20:38:03.777565 kubelet[2477]: I1002 20:38:03.777551 2477 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:38:03.776000 audit[2477]: AVC avc: denied { mac_admin } for pid=2477 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:03.776000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:38:03.776000 audit[2477]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e01530 a1=4000e5bb60 a2=4000e01500 a3=25 items=0 ppid=1 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:03.776000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:38:03.777982 kubelet[2477]: I1002 20:38:03.777967 2477 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:38:03.780764 kubelet[2477]: I1002 20:38:03.780747 2477 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:38:03.809005 kubelet[2477]: I1002 20:38:03.808979 2477 topology_manager.go:215] "Topology Admit Handler" podUID="855d020c71951f52be0aecac3b3ee124" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.809275 kubelet[2477]: I1002 20:38:03.809256 2477 topology_manager.go:215] "Topology Admit Handler" podUID="d6fc2c1f46ed19a1f718a632d574e088" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.809388 kubelet[2477]: I1002 20:38:03.809376 2477 topology_manager.go:215] "Topology Admit Handler" podUID="9d4620781125b114331cb9e726f71ba5" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.817175 kubelet[2477]: W1002 20:38:03.817153 2477 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:38:03.818522 kubelet[2477]: W1002 20:38:03.818497 2477 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:38:03.822734 kubelet[2477]: W1002 20:38:03.822704 2477 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:38:03.890887 kubelet[2477]: I1002 20:38:03.887711 2477 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.896258 kubelet[2477]: I1002 20:38:03.896237 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/855d020c71951f52be0aecac3b3ee124-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-1cb893e9b8\" (UID: \"855d020c71951f52be0aecac3b3ee124\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.896401 kubelet[2477]: I1002 20:38:03.896390 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.896507 kubelet[2477]: I1002 20:38:03.896498 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.896659 kubelet[2477]: I1002 20:38:03.896593 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9d4620781125b114331cb9e726f71ba5-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-1cb893e9b8\" (UID: \"9d4620781125b114331cb9e726f71ba5\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.896758 kubelet[2477]: I1002 20:38:03.896746 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/855d020c71951f52be0aecac3b3ee124-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-1cb893e9b8\" (UID: \"855d020c71951f52be0aecac3b3ee124\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.896862 kubelet[2477]: I1002 20:38:03.896852 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/855d020c71951f52be0aecac3b3ee124-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-1cb893e9b8\" (UID: \"855d020c71951f52be0aecac3b3ee124\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.896970 kubelet[2477]: I1002 20:38:03.896960 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.897065 kubelet[2477]: I1002 20:38:03.897055 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.897152 kubelet[2477]: I1002 20:38:03.897143 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d6fc2c1f46ed19a1f718a632d574e088-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-1cb893e9b8\" (UID: \"d6fc2c1f46ed19a1f718a632d574e088\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.901383 kubelet[2477]: I1002 20:38:03.901364 2477 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:03.901534 kubelet[2477]: I1002 20:38:03.901523 2477 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:04.231000 audit[2492]: USER_END pid=2492 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:38:04.232000 audit[2492]: CRED_DISP pid=2492 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:38:04.232830 sudo[2492]: pam_unix(sudo:session): session closed for user root Oct 2 20:38:04.666277 kubelet[2477]: I1002 20:38:04.666254 2477 apiserver.go:52] "Watching apiserver" Oct 2 20:38:04.691272 kubelet[2477]: I1002 20:38:04.691245 2477 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:38:04.751246 kubelet[2477]: W1002 20:38:04.751230 2477 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:38:04.751445 kubelet[2477]: E1002 20:38:04.751422 2477 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-1cb893e9b8\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" Oct 2 20:38:04.767352 kubelet[2477]: I1002 20:38:04.767324 2477 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-1cb893e9b8" podStartSLOduration=1.767247286 podCreationTimestamp="2023-10-02 20:38:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:38:04.765547929 +0000 UTC m=+1.209930013" watchObservedRunningTime="2023-10-02 20:38:04.767247286 +0000 UTC m=+1.211629370" Oct 2 20:38:04.781504 kubelet[2477]: I1002 20:38:04.781484 2477 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-1cb893e9b8" podStartSLOduration=1.781448286 podCreationTimestamp="2023-10-02 20:38:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:38:04.774493062 +0000 UTC m=+1.218875106" watchObservedRunningTime="2023-10-02 20:38:04.781448286 +0000 UTC m=+1.225830370" Oct 2 20:38:05.496925 sudo[1718]: pam_unix(sudo:session): session closed for user root Oct 2 20:38:05.496000 audit[1718]: USER_END pid=1718 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:38:05.496000 audit[1718]: CRED_DISP pid=1718 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:38:05.567355 sshd[1715]: pam_unix(sshd:session): session closed for user core Oct 2 20:38:05.567000 audit[1715]: USER_END pid=1715 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:05.567000 audit[1715]: CRED_DISP pid=1715 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:05.570535 systemd-logind[1335]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:38:05.570692 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:38:05.570910 systemd[1]: session-9.scope: Consumed 5.678s CPU time. Oct 2 20:38:05.571613 systemd[1]: sshd@6-10.200.20.4:22-10.200.12.6:59466.service: Deactivated successfully. Oct 2 20:38:05.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.4:22-10.200.12.6:59466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:05.572874 systemd-logind[1335]: Removed session 9. Oct 2 20:38:08.709452 kubelet[2477]: I1002 20:38:08.709396 2477 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" podStartSLOduration=5.709338096 podCreationTimestamp="2023-10-02 20:38:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:38:04.782639096 +0000 UTC m=+1.227021180" watchObservedRunningTime="2023-10-02 20:38:08.709338096 +0000 UTC m=+5.153720180" Oct 2 20:38:15.438000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:15.444276 kernel: kauditd_printk_skb: 262 callbacks suppressed Oct 2 20:38:15.444383 kernel: audit: type=1400 audit(1696279095.438:955): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:15.438000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e33760 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:15.496233 kernel: audit: type=1300 audit(1696279095.438:955): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e33760 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:15.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:15.521253 kernel: audit: type=1327 audit(1696279095.438:955): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:15.521373 kernel: audit: type=1400 audit(1696279095.438:956): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:15.438000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:15.438000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e337a0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:15.572903 kernel: audit: type=1300 audit(1696279095.438:956): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e337a0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:15.573054 kernel: audit: type=1327 audit(1696279095.438:956): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:15.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:15.438000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:15.619044 kernel: audit: type=1400 audit(1696279095.438:957): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:15.438000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e337e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:15.649375 kernel: audit: type=1300 audit(1696279095.438:957): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e337e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:15.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:15.674855 kernel: audit: type=1327 audit(1696279095.438:957): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:15.675008 kernel: audit: type=1400 audit(1696279095.438:958): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:15.438000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:15.438000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e33820 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:15.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:16.685000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521030 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:38:16.685000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400113e3c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:38:16.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:18.486545 kubelet[2477]: I1002 20:38:18.486516 2477 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:38:18.487486 env[1352]: time="2023-10-02T20:38:18.487388214Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:38:18.487741 kubelet[2477]: I1002 20:38:18.487603 2477 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:38:19.052469 kubelet[2477]: I1002 20:38:19.052425 2477 topology_manager.go:215] "Topology Admit Handler" podUID="cb069571-89f8-4c29-af7b-a31d1d36d48b" podNamespace="kube-system" podName="kube-proxy-p7nqz" Oct 2 20:38:19.057553 systemd[1]: Created slice kubepods-besteffort-podcb069571_89f8_4c29_af7b_a31d1d36d48b.slice. Oct 2 20:38:19.085091 kubelet[2477]: I1002 20:38:19.085051 2477 topology_manager.go:215] "Topology Admit Handler" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" podNamespace="kube-system" podName="cilium-txsm4" Oct 2 20:38:19.090069 systemd[1]: Created slice kubepods-burstable-pod7ede1854_6a5b_4d56_b227_415f66324dfa.slice. Oct 2 20:38:19.092431 kubelet[2477]: I1002 20:38:19.092400 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/cb069571-89f8-4c29-af7b-a31d1d36d48b-kube-proxy\") pod \"kube-proxy-p7nqz\" (UID: \"cb069571-89f8-4c29-af7b-a31d1d36d48b\") " pod="kube-system/kube-proxy-p7nqz" Oct 2 20:38:19.092517 kubelet[2477]: I1002 20:38:19.092438 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cb069571-89f8-4c29-af7b-a31d1d36d48b-lib-modules\") pod \"kube-proxy-p7nqz\" (UID: \"cb069571-89f8-4c29-af7b-a31d1d36d48b\") " pod="kube-system/kube-proxy-p7nqz" Oct 2 20:38:19.092517 kubelet[2477]: I1002 20:38:19.092472 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j47hh\" (UniqueName: \"kubernetes.io/projected/cb069571-89f8-4c29-af7b-a31d1d36d48b-kube-api-access-j47hh\") pod \"kube-proxy-p7nqz\" (UID: \"cb069571-89f8-4c29-af7b-a31d1d36d48b\") " pod="kube-system/kube-proxy-p7nqz" Oct 2 20:38:19.092517 kubelet[2477]: I1002 20:38:19.092493 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cb069571-89f8-4c29-af7b-a31d1d36d48b-xtables-lock\") pod \"kube-proxy-p7nqz\" (UID: \"cb069571-89f8-4c29-af7b-a31d1d36d48b\") " pod="kube-system/kube-proxy-p7nqz" Oct 2 20:38:19.192929 kubelet[2477]: I1002 20:38:19.192894 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-xtables-lock\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193088 kubelet[2477]: I1002 20:38:19.192961 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6xbnk\" (UniqueName: \"kubernetes.io/projected/7ede1854-6a5b-4d56-b227-415f66324dfa-kube-api-access-6xbnk\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193088 kubelet[2477]: I1002 20:38:19.192986 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-hostproc\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193088 kubelet[2477]: I1002 20:38:19.193006 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-etc-cni-netd\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193088 kubelet[2477]: I1002 20:38:19.193039 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/7ede1854-6a5b-4d56-b227-415f66324dfa-clustermesh-secrets\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193088 kubelet[2477]: I1002 20:38:19.193059 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-host-proc-sys-kernel\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193088 kubelet[2477]: I1002 20:38:19.193078 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/7ede1854-6a5b-4d56-b227-415f66324dfa-hubble-tls\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193235 kubelet[2477]: I1002 20:38:19.193123 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-lib-modules\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193235 kubelet[2477]: I1002 20:38:19.193148 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cni-path\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193235 kubelet[2477]: I1002 20:38:19.193169 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-host-proc-sys-net\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193235 kubelet[2477]: I1002 20:38:19.193211 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-run\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193235 kubelet[2477]: I1002 20:38:19.193234 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-bpf-maps\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193346 kubelet[2477]: I1002 20:38:19.193265 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-cgroup\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.193346 kubelet[2477]: I1002 20:38:19.193293 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-config-path\") pod \"cilium-txsm4\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " pod="kube-system/cilium-txsm4" Oct 2 20:38:19.365285 env[1352]: time="2023-10-02T20:38:19.364572220Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-p7nqz,Uid:cb069571-89f8-4c29-af7b-a31d1d36d48b,Namespace:kube-system,Attempt:0,}" Oct 2 20:38:19.394976 env[1352]: time="2023-10-02T20:38:19.393468825Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-txsm4,Uid:7ede1854-6a5b-4d56-b227-415f66324dfa,Namespace:kube-system,Attempt:0,}" Oct 2 20:38:19.405732 env[1352]: time="2023-10-02T20:38:19.405667342Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:38:19.405918 env[1352]: time="2023-10-02T20:38:19.405704502Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:38:19.405918 env[1352]: time="2023-10-02T20:38:19.405714822Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:38:19.405918 env[1352]: time="2023-10-02T20:38:19.405846541Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9f72bcf46d2b835db118521b144b008d79dfe9d4798079390ae6eb3ff019c207 pid=2556 runtime=io.containerd.runc.v2 Oct 2 20:38:19.422705 systemd[1]: Started cri-containerd-9f72bcf46d2b835db118521b144b008d79dfe9d4798079390ae6eb3ff019c207.scope. Oct 2 20:38:19.440741 env[1352]: time="2023-10-02T20:38:19.440665866Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:38:19.440895 env[1352]: time="2023-10-02T20:38:19.440711505Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:38:19.440895 env[1352]: time="2023-10-02T20:38:19.440743745Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:38:19.441005 env[1352]: time="2023-10-02T20:38:19.440914144Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97 pid=2584 runtime=io.containerd.runc.v2 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.451000 audit: BPF prog-id=110 op=LOAD Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2556 pid=2567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373262636634366432623833356462313138353231623134346230 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2556 pid=2567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373262636634366432623833356462313138353231623134346230 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.452000 audit: BPF prog-id=111 op=LOAD Oct 2 20:38:19.452000 audit[2567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2556 pid=2567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373262636634366432623833356462313138353231623134346230 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit: BPF prog-id=112 op=LOAD Oct 2 20:38:19.453000 audit[2567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2556 pid=2567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373262636634366432623833356462313138353231623134346230 Oct 2 20:38:19.453000 audit: BPF prog-id=112 op=UNLOAD Oct 2 20:38:19.453000 audit: BPF prog-id=111 op=UNLOAD Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { perfmon } for pid=2567 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit[2567]: AVC avc: denied { bpf } for pid=2567 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.453000 audit: BPF prog-id=113 op=LOAD Oct 2 20:38:19.453000 audit[2567]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2556 pid=2567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373262636634366432623833356462313138353231623134346230 Oct 2 20:38:19.476475 kubelet[2477]: I1002 20:38:19.476441 2477 topology_manager.go:215] "Topology Admit Handler" podUID="bac34266-b83e-49d0-9759-040d6b918697" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-r24jl" Oct 2 20:38:19.481150 systemd[1]: Created slice kubepods-besteffort-podbac34266_b83e_49d0_9759_040d6b918697.slice. Oct 2 20:38:19.497204 systemd[1]: Started cri-containerd-264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97.scope. Oct 2 20:38:19.515694 env[1352]: time="2023-10-02T20:38:19.515648358Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-p7nqz,Uid:cb069571-89f8-4c29-af7b-a31d1d36d48b,Namespace:kube-system,Attempt:0,} returns sandbox id \"9f72bcf46d2b835db118521b144b008d79dfe9d4798079390ae6eb3ff019c207\"" Oct 2 20:38:19.519242 env[1352]: time="2023-10-02T20:38:19.519197374Z" level=info msg="CreateContainer within sandbox \"9f72bcf46d2b835db118521b144b008d79dfe9d4798079390ae6eb3ff019c207\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.523000 audit: BPF prog-id=114 op=LOAD Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2584 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236346237343063356564356531373135323538626661336639313263 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2584 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236346237343063356564356531373135323538626661336639313263 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit: BPF prog-id=115 op=LOAD Oct 2 20:38:19.524000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2584 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236346237343063356564356531373135323538626661336639313263 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit: BPF prog-id=116 op=LOAD Oct 2 20:38:19.524000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2584 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236346237343063356564356531373135323538626661336639313263 Oct 2 20:38:19.524000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:38:19.524000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.524000 audit: BPF prog-id=117 op=LOAD Oct 2 20:38:19.524000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2584 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236346237343063356564356531373135323538626661336639313263 Oct 2 20:38:19.545712 env[1352]: time="2023-10-02T20:38:19.545676635Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-txsm4,Uid:7ede1854-6a5b-4d56-b227-415f66324dfa,Namespace:kube-system,Attempt:0,} returns sandbox id \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\"" Oct 2 20:38:19.547496 env[1352]: time="2023-10-02T20:38:19.547469063Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:38:19.553912 env[1352]: time="2023-10-02T20:38:19.553878860Z" level=info msg="CreateContainer within sandbox \"9f72bcf46d2b835db118521b144b008d79dfe9d4798079390ae6eb3ff019c207\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"9bb0413b5e09e714307b1f561d3952096d1909fb57febe640f50b155d6d360e0\"" Oct 2 20:38:19.554565 env[1352]: time="2023-10-02T20:38:19.554536695Z" level=info msg="StartContainer for \"9bb0413b5e09e714307b1f561d3952096d1909fb57febe640f50b155d6d360e0\"" Oct 2 20:38:19.576833 systemd[1]: Started cri-containerd-9bb0413b5e09e714307b1f561d3952096d1909fb57febe640f50b155d6d360e0.scope. Oct 2 20:38:19.595977 kubelet[2477]: I1002 20:38:19.595849 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bac34266-b83e-49d0-9759-040d6b918697-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-r24jl\" (UID: \"bac34266-b83e-49d0-9759-040d6b918697\") " pod="kube-system/cilium-operator-6bc8ccdb58-r24jl" Oct 2 20:38:19.595977 kubelet[2477]: I1002 20:38:19.595900 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-msl2x\" (UniqueName: \"kubernetes.io/projected/bac34266-b83e-49d0-9759-040d6b918697-kube-api-access-msl2x\") pod \"cilium-operator-6bc8ccdb58-r24jl\" (UID: \"bac34266-b83e-49d0-9759-040d6b918697\") " pod="kube-system/cilium-operator-6bc8ccdb58-r24jl" Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2556 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962623034313362356530396537313433303762316635363164333935 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit: BPF prog-id=118 op=LOAD Oct 2 20:38:19.596000 audit[2634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2556 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962623034313362356530396537313433303762316635363164333935 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit: BPF prog-id=119 op=LOAD Oct 2 20:38:19.596000 audit[2634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2556 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962623034313362356530396537313433303762316635363164333935 Oct 2 20:38:19.596000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:38:19.596000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { perfmon } for pid=2634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit[2634]: AVC avc: denied { bpf } for pid=2634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.596000 audit: BPF prog-id=120 op=LOAD Oct 2 20:38:19.596000 audit[2634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2556 pid=2634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962623034313362356530396537313433303762316635363164333935 Oct 2 20:38:19.621682 env[1352]: time="2023-10-02T20:38:19.621591122Z" level=info msg="StartContainer for \"9bb0413b5e09e714307b1f561d3952096d1909fb57febe640f50b155d6d360e0\" returns successfully" Oct 2 20:38:19.723000 audit[2685]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.723000 audit[2685]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd08027d0 a2=0 a3=ffff952e16c0 items=0 ppid=2643 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.723000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:38:19.723000 audit[2686]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2686 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:19.723000 audit[2686]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf3f6870 a2=0 a3=ffff82b656c0 items=0 ppid=2643 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.723000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:38:19.725000 audit[2688]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2688 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:19.725000 audit[2688]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcfb67310 a2=0 a3=ffff8452c6c0 items=0 ppid=2643 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.725000 audit[2687]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.725000 audit[2687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc597ee0 a2=0 a3=ffffae6a56c0 items=0 ppid=2643 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.725000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:38:19.725000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:38:19.727000 audit[2690]: NETFILTER_CFG table=filter:45 family=10 entries=1 op=nft_register_chain pid=2690 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:19.727000 audit[2690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc2cc4620 a2=0 a3=ffff9c5b46c0 items=0 ppid=2643 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.727000 audit[2689]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.727000 audit[2689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe46bec80 a2=0 a3=ffffa15746c0 items=0 ppid=2643 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.727000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:38:19.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:38:19.776598 kubelet[2477]: I1002 20:38:19.776571 2477 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-p7nqz" podStartSLOduration=0.776525794 podCreationTimestamp="2023-10-02 20:38:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:38:19.776400475 +0000 UTC m=+16.220782599" watchObservedRunningTime="2023-10-02 20:38:19.776525794 +0000 UTC m=+16.220907878" Oct 2 20:38:19.788948 env[1352]: time="2023-10-02T20:38:19.788892590Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-r24jl,Uid:bac34266-b83e-49d0-9759-040d6b918697,Namespace:kube-system,Attempt:0,}" Oct 2 20:38:19.824619 env[1352]: time="2023-10-02T20:38:19.824557069Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:38:19.824801 env[1352]: time="2023-10-02T20:38:19.824770587Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:38:19.824896 env[1352]: time="2023-10-02T20:38:19.824869587Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:38:19.825139 env[1352]: time="2023-10-02T20:38:19.825105265Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94 pid=2699 runtime=io.containerd.runc.v2 Oct 2 20:38:19.830000 audit[2709]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.830000 audit[2709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffed224b00 a2=0 a3=ffffad9f66c0 items=0 ppid=2643 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:38:19.833000 audit[2715]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.833000 audit[2715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff028a520 a2=0 a3=ffff815506c0 items=0 ppid=2643 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.833000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:38:19.844000 audit[2723]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.844000 audit[2723]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffee460c80 a2=0 a3=ffff994ad6c0 items=0 ppid=2643 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.844000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:38:19.844405 systemd[1]: Started cri-containerd-1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94.scope. Oct 2 20:38:19.845000 audit[2724]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.845000 audit[2724]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4b40720 a2=0 a3=ffffa137d6c0 items=0 ppid=2643 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.845000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:38:19.851000 audit[2726]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.851000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe7a86ce0 a2=0 a3=ffff9bf476c0 items=0 ppid=2643 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.851000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:38:19.853000 audit[2727]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.853000 audit[2727]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff6f07880 a2=0 a3=ffffb60a76c0 items=0 ppid=2643 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.853000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:38:19.859000 audit[2731]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.859000 audit[2731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdd784580 a2=0 a3=ffffb7a326c0 items=0 ppid=2643 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.859000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:38:19.865000 audit[2739]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.865000 audit[2739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe44a6170 a2=0 a3=ffffb72f16c0 items=0 ppid=2643 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:38:19.868000 audit[2740]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.868000 audit[2740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd885ba40 a2=0 a3=ffff834b26c0 items=0 ppid=2643 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.869000 audit: BPF prog-id=121 op=LOAD Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2699 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135363064383433376563656138323264393034613966623337643762 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2699 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135363064383433376563656138323264393034613966623337643762 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit: BPF prog-id=122 op=LOAD Oct 2 20:38:19.870000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2699 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135363064383433376563656138323264393034613966623337643762 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit: BPF prog-id=123 op=LOAD Oct 2 20:38:19.870000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2699 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135363064383433376563656138323264393034613966623337643762 Oct 2 20:38:19.870000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:38:19.870000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { perfmon } for pid=2708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit[2708]: AVC avc: denied { bpf } for pid=2708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.870000 audit: BPF prog-id=124 op=LOAD Oct 2 20:38:19.870000 audit[2708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2699 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135363064383433376563656138323264393034613966623337643762 Oct 2 20:38:19.868000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:38:19.877000 audit[2742]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.877000 audit[2742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc00e1da0 a2=0 a3=ffffa93746c0 items=0 ppid=2643 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.877000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:38:19.879000 audit[2743]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.879000 audit[2743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd03434a0 a2=0 a3=ffffb7c196c0 items=0 ppid=2643 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.879000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:38:19.886000 audit[2745]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.886000 audit[2745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff919c720 a2=0 a3=ffffa7a526c0 items=0 ppid=2643 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.886000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:38:19.892000 audit[2755]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2755 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.892000 audit[2755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff12a0b70 a2=0 a3=ffffb0cef6c0 items=0 ppid=2643 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.892000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:38:19.900239 env[1352]: time="2023-10-02T20:38:19.900198077Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-r24jl,Uid:bac34266-b83e-49d0-9759-040d6b918697,Namespace:kube-system,Attempt:0,} returns sandbox id \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\"" Oct 2 20:38:19.902000 audit[2758]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.902000 audit[2758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffee1fac10 a2=0 a3=ffffb17e56c0 items=0 ppid=2643 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.902000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:38:19.904000 audit[2759]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.904000 audit[2759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdb2b69f0 a2=0 a3=ffff9e2746c0 items=0 ppid=2643 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.904000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:38:19.907000 audit[2761]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.907000 audit[2761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffceef8d50 a2=0 a3=ffffa51a16c0 items=0 ppid=2643 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:38:19.912000 audit[2764]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.912000 audit[2764]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffcc80d60 a2=0 a3=ffffb86566c0 items=0 ppid=2643 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.912000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:38:19.914000 audit[2765]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.914000 audit[2765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffddb06200 a2=0 a3=ffff869cf6c0 items=0 ppid=2643 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.914000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:38:19.917000 audit[2767]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2767 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:38:19.917000 audit[2767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff5168bc0 a2=0 a3=ffff83ace6c0 items=0 ppid=2643 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.917000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:38:19.970000 audit[2773]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2773 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:38:19.970000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffd4574800 a2=0 a3=ffffa66c16c0 items=0 ppid=2643 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.970000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:38:19.998000 audit[2773]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2773 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:38:19.998000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffd4574800 a2=0 a3=ffffa66c16c0 items=0 ppid=2643 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.998000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:38:20.000000 audit[2778]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.000000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe976fff0 a2=0 a3=ffff9344c6c0 items=0 ppid=2643 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.000000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:38:20.005000 audit[2780]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.005000 audit[2780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe212a020 a2=0 a3=ffff81c776c0 items=0 ppid=2643 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.005000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:38:20.010000 audit[2783]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.010000 audit[2783]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffce991790 a2=0 a3=ffffaa0736c0 items=0 ppid=2643 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.010000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:38:20.012000 audit[2784]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2784 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.012000 audit[2784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc5714090 a2=0 a3=ffff9423f6c0 items=0 ppid=2643 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.012000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:38:20.015000 audit[2786]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.015000 audit[2786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc4b81fb0 a2=0 a3=ffffb9aae6c0 items=0 ppid=2643 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.015000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:38:20.017000 audit[2787]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.017000 audit[2787]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd2b4df70 a2=0 a3=ffff8bc7e6c0 items=0 ppid=2643 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.017000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:38:20.021000 audit[2789]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2789 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.021000 audit[2789]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeb0c7fe0 a2=0 a3=ffff8f8d96c0 items=0 ppid=2643 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.021000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:38:20.027000 audit[2792]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.027000 audit[2792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc169df70 a2=0 a3=ffff9d8076c0 items=0 ppid=2643 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.027000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:38:20.029000 audit[2793]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2793 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.029000 audit[2793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6b6f840 a2=0 a3=ffffb8e2f6c0 items=0 ppid=2643 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.029000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:38:20.032000 audit[2795]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2795 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.032000 audit[2795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe7b4b280 a2=0 a3=ffff85b6f6c0 items=0 ppid=2643 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.032000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:38:20.034000 audit[2796]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2796 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.034000 audit[2796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe0bf3370 a2=0 a3=ffffae7fd6c0 items=0 ppid=2643 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.034000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:38:20.038000 audit[2798]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2798 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.038000 audit[2798]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdd72e030 a2=0 a3=ffffa60a46c0 items=0 ppid=2643 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.038000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:38:20.044000 audit[2801]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2801 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.044000 audit[2801]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffec8041b0 a2=0 a3=ffff9547d6c0 items=0 ppid=2643 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.044000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:38:20.049000 audit[2804]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2804 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.049000 audit[2804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffebc263a0 a2=0 a3=ffffb5d1b6c0 items=0 ppid=2643 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.049000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:38:20.051000 audit[2805]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2805 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.051000 audit[2805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe74b3bb0 a2=0 a3=ffff920496c0 items=0 ppid=2643 pid=2805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.051000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:38:20.055000 audit[2807]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2807 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.055000 audit[2807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffffd203710 a2=0 a3=ffffb300c6c0 items=0 ppid=2643 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.055000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:38:20.060000 audit[2810]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2810 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.060000 audit[2810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffcfd564d0 a2=0 a3=ffffad7e96c0 items=0 ppid=2643 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.060000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:38:20.062000 audit[2811]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2811 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.062000 audit[2811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc2a20d90 a2=0 a3=ffffbd21d6c0 items=0 ppid=2643 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.062000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:38:20.065000 audit[2813]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2813 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.065000 audit[2813]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd1e73af0 a2=0 a3=ffffa8ceb6c0 items=0 ppid=2643 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.065000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:38:20.067000 audit[2814]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2814 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.067000 audit[2814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe465fe10 a2=0 a3=ffff91c426c0 items=0 ppid=2643 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.067000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:38:20.070000 audit[2816]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2816 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.070000 audit[2816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff54a9f50 a2=0 a3=ffff980d46c0 items=0 ppid=2643 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.070000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:38:20.076000 audit[2819]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2819 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:38:20.076000 audit[2819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe2404fa0 a2=0 a3=ffffba60a6c0 items=0 ppid=2643 pid=2819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.076000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:38:20.080000 audit[2821]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2821 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:38:20.080000 audit[2821]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffff92af010 a2=0 a3=ffff8af906c0 items=0 ppid=2643 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.080000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:38:20.080000 audit[2821]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2821 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:38:20.080000 audit[2821]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffff92af010 a2=0 a3=ffff8af906c0 items=0 ppid=2643 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:20.080000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:38:24.803999 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4006173622.mount: Deactivated successfully. Oct 2 20:38:27.293032 env[1352]: time="2023-10-02T20:38:27.292977489Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:38:27.300414 env[1352]: time="2023-10-02T20:38:27.300377129Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:38:27.304493 env[1352]: time="2023-10-02T20:38:27.304466187Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:38:27.305041 env[1352]: time="2023-10-02T20:38:27.305013464Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 20:38:27.306983 env[1352]: time="2023-10-02T20:38:27.305853940Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:38:27.309352 env[1352]: time="2023-10-02T20:38:27.309324241Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:38:27.329217 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount400387954.mount: Deactivated successfully. Oct 2 20:38:27.334687 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1058118481.mount: Deactivated successfully. Oct 2 20:38:27.344320 env[1352]: time="2023-10-02T20:38:27.344276892Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\"" Oct 2 20:38:27.346404 env[1352]: time="2023-10-02T20:38:27.346375920Z" level=info msg="StartContainer for \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\"" Oct 2 20:38:27.370457 systemd[1]: Started cri-containerd-c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1.scope. Oct 2 20:38:27.385739 systemd[1]: cri-containerd-c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1.scope: Deactivated successfully. Oct 2 20:38:28.327434 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1-rootfs.mount: Deactivated successfully. Oct 2 20:38:28.742164 env[1352]: time="2023-10-02T20:38:28.742118069Z" level=info msg="shim disconnected" id=c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1 Oct 2 20:38:28.742498 env[1352]: time="2023-10-02T20:38:28.742202909Z" level=warning msg="cleaning up after shim disconnected" id=c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1 namespace=k8s.io Oct 2 20:38:28.742498 env[1352]: time="2023-10-02T20:38:28.742214069Z" level=info msg="cleaning up dead shim" Oct 2 20:38:28.754844 env[1352]: time="2023-10-02T20:38:28.754801843Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2846 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:28.755189 env[1352]: time="2023-10-02T20:38:28.755089881Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 20:38:28.755399 env[1352]: time="2023-10-02T20:38:28.755368680Z" level=error msg="Failed to pipe stdout of container \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\"" error="reading from a closed fifo" Oct 2 20:38:28.755534 env[1352]: time="2023-10-02T20:38:28.755512719Z" level=error msg="Failed to pipe stderr of container \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\"" error="reading from a closed fifo" Oct 2 20:38:28.758962 env[1352]: time="2023-10-02T20:38:28.758893941Z" level=error msg="StartContainer for \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:28.759750 kubelet[2477]: E1002 20:38:28.759262 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1" Oct 2 20:38:28.759750 kubelet[2477]: E1002 20:38:28.759455 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:28.759750 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:28.759750 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:38:28.760141 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6xbnk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:28.760217 kubelet[2477]: E1002 20:38:28.759508 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:38:28.789964 env[1352]: time="2023-10-02T20:38:28.787604510Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:38:28.810300 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1298774667.mount: Deactivated successfully. Oct 2 20:38:28.814510 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3663247404.mount: Deactivated successfully. Oct 2 20:38:28.825547 env[1352]: time="2023-10-02T20:38:28.825516470Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\"" Oct 2 20:38:28.826540 env[1352]: time="2023-10-02T20:38:28.826517665Z" level=info msg="StartContainer for \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\"" Oct 2 20:38:28.848682 systemd[1]: Started cri-containerd-c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6.scope. Oct 2 20:38:28.864220 systemd[1]: cri-containerd-c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6.scope: Deactivated successfully. Oct 2 20:38:28.880453 env[1352]: time="2023-10-02T20:38:28.880398581Z" level=info msg="shim disconnected" id=c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6 Oct 2 20:38:28.880453 env[1352]: time="2023-10-02T20:38:28.880449620Z" level=warning msg="cleaning up after shim disconnected" id=c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6 namespace=k8s.io Oct 2 20:38:28.880670 env[1352]: time="2023-10-02T20:38:28.880459820Z" level=info msg="cleaning up dead shim" Oct 2 20:38:28.894666 env[1352]: time="2023-10-02T20:38:28.894612866Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2884 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:28.894917 env[1352]: time="2023-10-02T20:38:28.894863704Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 20:38:28.896041 env[1352]: time="2023-10-02T20:38:28.895990978Z" level=error msg="Failed to pipe stderr of container \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\"" error="reading from a closed fifo" Oct 2 20:38:28.896172 env[1352]: time="2023-10-02T20:38:28.896065818Z" level=error msg="Failed to pipe stdout of container \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\"" error="reading from a closed fifo" Oct 2 20:38:28.901221 env[1352]: time="2023-10-02T20:38:28.901184911Z" level=error msg="StartContainer for \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:28.901514 kubelet[2477]: E1002 20:38:28.901480 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6" Oct 2 20:38:28.901603 kubelet[2477]: E1002 20:38:28.901589 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:28.901603 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:28.901603 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:38:28.901672 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6xbnk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:28.901672 kubelet[2477]: E1002 20:38:28.901626 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:38:29.612000 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3327703603.mount: Deactivated successfully. Oct 2 20:38:29.786655 kubelet[2477]: I1002 20:38:29.786465 2477 scope.go:117] "RemoveContainer" containerID="c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1" Oct 2 20:38:29.787560 kubelet[2477]: I1002 20:38:29.787337 2477 scope.go:117] "RemoveContainer" containerID="c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1" Oct 2 20:38:29.790808 env[1352]: time="2023-10-02T20:38:29.790295817Z" level=info msg="RemoveContainer for \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\"" Oct 2 20:38:29.790808 env[1352]: time="2023-10-02T20:38:29.790501816Z" level=info msg="RemoveContainer for \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\"" Oct 2 20:38:29.790808 env[1352]: time="2023-10-02T20:38:29.790552936Z" level=error msg="RemoveContainer for \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\" failed" error="failed to set removing state for container \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\": container is already in removing state" Oct 2 20:38:29.791148 kubelet[2477]: E1002 20:38:29.790709 2477 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\": container is already in removing state" containerID="c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1" Oct 2 20:38:29.791148 kubelet[2477]: I1002 20:38:29.790766 2477 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1"} err="rpc error: code = Unknown desc = failed to set removing state for container \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\": container is already in removing state" Oct 2 20:38:29.803976 env[1352]: time="2023-10-02T20:38:29.803923187Z" level=info msg="RemoveContainer for \"c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1\" returns successfully" Oct 2 20:38:29.804517 kubelet[2477]: E1002 20:38:29.804490 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:38:30.607658 env[1352]: time="2023-10-02T20:38:30.607614308Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:38:30.614292 env[1352]: time="2023-10-02T20:38:30.614268675Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:38:30.618918 env[1352]: time="2023-10-02T20:38:30.618883212Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:38:30.619167 env[1352]: time="2023-10-02T20:38:30.619133651Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 20:38:30.623284 env[1352]: time="2023-10-02T20:38:30.623249230Z" level=info msg="CreateContainer within sandbox \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:38:30.641623 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3642379884.mount: Deactivated successfully. Oct 2 20:38:30.645914 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3838432915.mount: Deactivated successfully. Oct 2 20:38:30.656197 env[1352]: time="2023-10-02T20:38:30.656162826Z" level=info msg="CreateContainer within sandbox \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\"" Oct 2 20:38:30.658118 env[1352]: time="2023-10-02T20:38:30.656859062Z" level=info msg="StartContainer for \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\"" Oct 2 20:38:30.680079 systemd[1]: Started cri-containerd-0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024.scope. Oct 2 20:38:30.705021 kernel: kauditd_printk_skb: 372 callbacks suppressed Oct 2 20:38:30.705144 kernel: audit: type=1400 audit(1696279110.695:1071): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.737055 kernel: audit: type=1400 audit(1696279110.695:1072): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.755723 kernel: audit: type=1400 audit(1696279110.695:1073): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.791979 kernel: audit: type=1400 audit(1696279110.695:1074): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.792084 kernel: audit: type=1400 audit(1696279110.695:1075): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.811671 kernel: audit: type=1400 audit(1696279110.695:1076): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.834802 kernel: audit: type=1400 audit(1696279110.695:1077): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.839423 env[1352]: time="2023-10-02T20:38:30.839381311Z" level=info msg="StartContainer for \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\" returns successfully" Oct 2 20:38:30.853035 kernel: audit: type=1400 audit(1696279110.695:1078): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.872608 kernel: audit: type=1400 audit(1696279110.695:1079): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.890660 kernel: audit: type=1400 audit(1696279110.701:1080): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.701000 audit: BPF prog-id=125 op=LOAD Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2699 pid=2906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:30.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623065343634313437333463643036313661306532353532393365 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2699 pid=2906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:30.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623065343634313437333463643036313661306532353532393365 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.720000 audit: BPF prog-id=126 op=LOAD Oct 2 20:38:30.720000 audit[2906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2699 pid=2906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:30.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623065343634313437333463643036313661306532353532393365 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit: BPF prog-id=127 op=LOAD Oct 2 20:38:30.736000 audit[2906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2699 pid=2906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:30.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623065343634313437333463643036313661306532353532393365 Oct 2 20:38:30.736000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:38:30.736000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { perfmon } for pid=2906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit[2906]: AVC avc: denied { bpf } for pid=2906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:30.736000 audit: BPF prog-id=128 op=LOAD Oct 2 20:38:30.736000 audit[2906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2699 pid=2906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:30.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061623065343634313437333463643036313661306532353532393365 Oct 2 20:38:30.894632 kubelet[2477]: E1002 20:38:30.892971 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:38:30.893000 audit[2916]: AVC avc: denied { map_create } for pid=2916 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c193 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c193 tclass=bpf permissive=0 Oct 2 20:38:30.893000 audit[2916]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=40005c3768 a2=48 a3=0 items=0 ppid=2699 pid=2916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c193 key=(null) Oct 2 20:38:30.893000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:38:31.846969 kubelet[2477]: W1002 20:38:31.846912 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7ede1854_6a5b_4d56_b227_415f66324dfa.slice/cri-containerd-c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1.scope WatchSource:0}: container "c2c427530c59145af9fa13bf31a6f8a8157d2c02d65a8bd18813bb4b86af1db1" in namespace "k8s.io": not found Oct 2 20:38:31.908503 kubelet[2477]: I1002 20:38:31.908457 2477 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-r24jl" podStartSLOduration=2.190307274 podCreationTimestamp="2023-10-02 20:38:19 +0000 UTC" firstStartedPulling="2023-10-02 20:38:19.901663707 +0000 UTC m=+16.346045791" lastFinishedPulling="2023-10-02 20:38:30.619777808 +0000 UTC m=+27.064159892" observedRunningTime="2023-10-02 20:38:31.90335404 +0000 UTC m=+28.347736124" watchObservedRunningTime="2023-10-02 20:38:31.908421375 +0000 UTC m=+28.352803459" Oct 2 20:38:34.952130 kubelet[2477]: W1002 20:38:34.952095 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7ede1854_6a5b_4d56_b227_415f66324dfa.slice/cri-containerd-c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6.scope WatchSource:0}: task c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6 not found: not found Oct 2 20:38:43.712208 env[1352]: time="2023-10-02T20:38:43.712154591Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:38:43.736801 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2091086378.mount: Deactivated successfully. Oct 2 20:38:43.742279 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount728852232.mount: Deactivated successfully. Oct 2 20:38:43.752174 env[1352]: time="2023-10-02T20:38:43.752134088Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\"" Oct 2 20:38:43.755363 env[1352]: time="2023-10-02T20:38:43.754436280Z" level=info msg="StartContainer for \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\"" Oct 2 20:38:43.781593 systemd[1]: Started cri-containerd-dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c.scope. Oct 2 20:38:43.796724 systemd[1]: cri-containerd-dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c.scope: Deactivated successfully. Oct 2 20:38:44.156403 env[1352]: time="2023-10-02T20:38:44.156350424Z" level=info msg="shim disconnected" id=dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c Oct 2 20:38:44.156639 env[1352]: time="2023-10-02T20:38:44.156621463Z" level=warning msg="cleaning up after shim disconnected" id=dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c namespace=k8s.io Oct 2 20:38:44.156701 env[1352]: time="2023-10-02T20:38:44.156687303Z" level=info msg="cleaning up dead shim" Oct 2 20:38:44.169776 env[1352]: time="2023-10-02T20:38:44.169736257Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2958 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:44.170199 env[1352]: time="2023-10-02T20:38:44.170148816Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 20:38:44.172008 env[1352]: time="2023-10-02T20:38:44.170406175Z" level=error msg="Failed to pipe stdout of container \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\"" error="reading from a closed fifo" Oct 2 20:38:44.173131 env[1352]: time="2023-10-02T20:38:44.173100086Z" level=error msg="Failed to pipe stderr of container \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\"" error="reading from a closed fifo" Oct 2 20:38:44.176553 env[1352]: time="2023-10-02T20:38:44.176508074Z" level=error msg="StartContainer for \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:44.176913 kubelet[2477]: E1002 20:38:44.176878 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c" Oct 2 20:38:44.177269 kubelet[2477]: E1002 20:38:44.177013 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:44.177269 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:44.177269 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:38:44.177269 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6xbnk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:44.177269 kubelet[2477]: E1002 20:38:44.177065 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:38:44.734929 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c-rootfs.mount: Deactivated successfully. Oct 2 20:38:44.918316 kubelet[2477]: I1002 20:38:44.918285 2477 scope.go:117] "RemoveContainer" containerID="c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6" Oct 2 20:38:44.918639 kubelet[2477]: I1002 20:38:44.918622 2477 scope.go:117] "RemoveContainer" containerID="c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6" Oct 2 20:38:44.921908 env[1352]: time="2023-10-02T20:38:44.921866167Z" level=info msg="RemoveContainer for \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\"" Oct 2 20:38:44.922606 env[1352]: time="2023-10-02T20:38:44.922584485Z" level=info msg="RemoveContainer for \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\"" Oct 2 20:38:44.922791 env[1352]: time="2023-10-02T20:38:44.922762364Z" level=error msg="RemoveContainer for \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\" failed" error="failed to set removing state for container \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\": container is already in removing state" Oct 2 20:38:44.925074 kubelet[2477]: E1002 20:38:44.925056 2477 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\": container is already in removing state" containerID="c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6" Oct 2 20:38:44.925202 kubelet[2477]: E1002 20:38:44.925192 2477 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6": container is already in removing state; Skipping pod "cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)" Oct 2 20:38:44.925551 kubelet[2477]: E1002 20:38:44.925539 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:38:44.938348 env[1352]: time="2023-10-02T20:38:44.938298990Z" level=info msg="RemoveContainer for \"c3b2fd3836482f9ad59d8f65cf0a51299ff7a0659f7ac47a6c2cc28a5b30ebb6\" returns successfully" Oct 2 20:38:47.261655 kubelet[2477]: W1002 20:38:47.261622 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7ede1854_6a5b_4d56_b227_415f66324dfa.slice/cri-containerd-dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c.scope WatchSource:0}: task dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c not found: not found Oct 2 20:38:57.711473 kubelet[2477]: E1002 20:38:57.711446 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:39:00.213000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.219636 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:39:00.219763 kernel: audit: type=1400 audit(1696279140.213:1090): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.213000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400556a990 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.270398 kernel: audit: type=1300 audit(1696279140.213:1090): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400556a990 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.294795 kernel: audit: type=1327 audit(1696279140.213:1090): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.294889 kernel: audit: type=1400 audit(1696279140.213:1091): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.213000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.213000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4005fea020 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.344737 kernel: audit: type=1300 audit(1696279140.213:1091): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4005fea020 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.213000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.369044 kernel: audit: type=1327 audit(1696279140.213:1091): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.369171 kernel: audit: type=1400 audit(1696279140.219:1092): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.219000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.219000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400556aa20 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.419249 kernel: audit: type=1300 audit(1696279140.219:1092): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400556aa20 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.443832 kernel: audit: type=1327 audit(1696279140.219:1092): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.443920 kernel: audit: type=1400 audit(1696279140.226:1093): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.226000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.226000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40050506f0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.318000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.318000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40050508a0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.318000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.319000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.319000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400632aa20 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:39:00.319000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:00.867000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.867000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b24a0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:00.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:00.867000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:00.867000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400263e240 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:00.867000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:10.710975 env[1352]: time="2023-10-02T20:39:10.710690312Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:39:10.729213 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3993338497.mount: Deactivated successfully. Oct 2 20:39:10.736922 env[1352]: time="2023-10-02T20:39:10.736814382Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\"" Oct 2 20:39:10.737587 env[1352]: time="2023-10-02T20:39:10.737308061Z" level=info msg="StartContainer for \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\"" Oct 2 20:39:10.760256 systemd[1]: Started cri-containerd-0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813.scope. Oct 2 20:39:10.777589 systemd[1]: cri-containerd-0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813.scope: Deactivated successfully. Oct 2 20:39:10.810273 env[1352]: time="2023-10-02T20:39:10.810216359Z" level=info msg="shim disconnected" id=0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813 Oct 2 20:39:10.810273 env[1352]: time="2023-10-02T20:39:10.810267559Z" level=warning msg="cleaning up after shim disconnected" id=0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813 namespace=k8s.io Oct 2 20:39:10.810273 env[1352]: time="2023-10-02T20:39:10.810277239Z" level=info msg="cleaning up dead shim" Oct 2 20:39:10.822695 env[1352]: time="2023-10-02T20:39:10.822646455Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:39:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3003 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:39:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:39:10.822975 env[1352]: time="2023-10-02T20:39:10.822904855Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 20:39:10.823189 env[1352]: time="2023-10-02T20:39:10.823154654Z" level=error msg="Failed to pipe stdout of container \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\"" error="reading from a closed fifo" Oct 2 20:39:10.823891 env[1352]: time="2023-10-02T20:39:10.823863573Z" level=error msg="Failed to pipe stderr of container \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\"" error="reading from a closed fifo" Oct 2 20:39:10.827712 env[1352]: time="2023-10-02T20:39:10.827671805Z" level=error msg="StartContainer for \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:39:10.827958 kubelet[2477]: E1002 20:39:10.827917 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813" Oct 2 20:39:10.828237 kubelet[2477]: E1002 20:39:10.828036 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:39:10.828237 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:39:10.828237 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:39:10.828237 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6xbnk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:39:10.828237 kubelet[2477]: E1002 20:39:10.828072 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:39:10.962555 kubelet[2477]: I1002 20:39:10.962464 2477 scope.go:117] "RemoveContainer" containerID="dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c" Oct 2 20:39:10.963424 kubelet[2477]: I1002 20:39:10.963410 2477 scope.go:117] "RemoveContainer" containerID="dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c" Oct 2 20:39:10.966249 env[1352]: time="2023-10-02T20:39:10.966175256Z" level=info msg="RemoveContainer for \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\"" Oct 2 20:39:10.967995 env[1352]: time="2023-10-02T20:39:10.967622893Z" level=info msg="RemoveContainer for \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\"" Oct 2 20:39:10.967995 env[1352]: time="2023-10-02T20:39:10.967707733Z" level=error msg="RemoveContainer for \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\" failed" error="failed to set removing state for container \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\": container is already in removing state" Oct 2 20:39:10.968109 kubelet[2477]: E1002 20:39:10.967829 2477 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\": container is already in removing state" containerID="dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c" Oct 2 20:39:10.968109 kubelet[2477]: E1002 20:39:10.967858 2477 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c": container is already in removing state; Skipping pod "cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)" Oct 2 20:39:10.968200 kubelet[2477]: E1002 20:39:10.968175 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:39:10.973962 env[1352]: time="2023-10-02T20:39:10.973782361Z" level=info msg="RemoveContainer for \"dc143aff57d52c7b45e34cb9512b0fad0059f314c0b1a4ae1fdd7b7001ba763c\" returns successfully" Oct 2 20:39:11.726157 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813-rootfs.mount: Deactivated successfully. Oct 2 20:39:13.915000 kubelet[2477]: W1002 20:39:13.914956 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7ede1854_6a5b_4d56_b227_415f66324dfa.slice/cri-containerd-0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813.scope WatchSource:0}: task 0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813 not found: not found Oct 2 20:39:15.438000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:15.444667 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:39:15.444732 kernel: audit: type=1400 audit(1696279155.438:1098): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:15.438000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:15.488348 kernel: audit: type=1400 audit(1696279155.438:1099): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:15.488450 kernel: audit: type=1300 audit(1696279155.438:1098): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b3b00 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:15.438000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b3b00 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:15.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:15.541504 kernel: audit: type=1327 audit(1696279155.438:1098): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:15.439000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:15.563593 kernel: audit: type=1400 audit(1696279155.439:1100): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:15.563684 kernel: audit: type=1300 audit(1696279155.439:1100): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b3d20 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:15.439000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b3d20 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:15.439000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:15.616261 kernel: audit: type=1327 audit(1696279155.439:1100): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:15.439000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:15.638705 kernel: audit: type=1400 audit(1696279155.439:1101): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:15.439000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b3d40 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:15.669317 kernel: audit: type=1300 audit(1696279155.439:1101): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b3d40 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:15.669439 kernel: audit: type=1327 audit(1696279155.439:1101): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:15.439000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:15.438000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400265e7a0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:39:15.438000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:22.709148 kubelet[2477]: E1002 20:39:22.709072 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:39:35.709870 kubelet[2477]: E1002 20:39:35.709841 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:39:48.709577 kubelet[2477]: E1002 20:39:48.709543 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:40:00.214000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.219927 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:40:00.220031 kernel: audit: type=1400 audit(1696279200.214:1102): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.214000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.264787 kernel: audit: type=1400 audit(1696279200.214:1103): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.214000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b3950c0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.293850 kernel: audit: type=1300 audit(1696279200.214:1103): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b3950c0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.318436 kernel: audit: type=1327 audit(1696279200.214:1103): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.214000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006f1b0e0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.346085 kernel: audit: type=1300 audit(1696279200.214:1102): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006f1b0e0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.370703 kernel: audit: type=1327 audit(1696279200.214:1102): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.219000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.394138 kernel: audit: type=1400 audit(1696279200.219:1104): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.219000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006adf6e0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.421985 kernel: audit: type=1300 audit(1696279200.219:1104): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006adf6e0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.422118 kernel: audit: type=1327 audit(1696279200.219:1104): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.227000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.469815 kernel: audit: type=1400 audit(1696279200.227:1105): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.227000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006adf830 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.227000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.320000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.320000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400b395340 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.321000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.321000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006adfbc0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:40:00.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:40:00.868000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.868000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:00.868000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011cc860 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:00.868000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:00.868000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400129f560 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:00.868000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:03.711624 env[1352]: time="2023-10-02T20:40:03.711561302Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:40:03.731438 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1922891525.mount: Deactivated successfully. Oct 2 20:40:03.736288 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2238980523.mount: Deactivated successfully. Oct 2 20:40:03.750202 env[1352]: time="2023-10-02T20:40:03.750130384Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\"" Oct 2 20:40:03.752201 env[1352]: time="2023-10-02T20:40:03.751288943Z" level=info msg="StartContainer for \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\"" Oct 2 20:40:03.759563 kubelet[2477]: E1002 20:40:03.759541 2477 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:40:03.775086 systemd[1]: Started cri-containerd-aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed.scope. Oct 2 20:40:03.791122 systemd[1]: cri-containerd-aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed.scope: Deactivated successfully. Oct 2 20:40:03.808476 kubelet[2477]: E1002 20:40:03.808455 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:03.825067 env[1352]: time="2023-10-02T20:40:03.825022991Z" level=info msg="shim disconnected" id=aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed Oct 2 20:40:03.825266 env[1352]: time="2023-10-02T20:40:03.825248551Z" level=warning msg="cleaning up after shim disconnected" id=aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed namespace=k8s.io Oct 2 20:40:03.825361 env[1352]: time="2023-10-02T20:40:03.825347511Z" level=info msg="cleaning up dead shim" Oct 2 20:40:03.839880 env[1352]: time="2023-10-02T20:40:03.839842137Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:40:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3049 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:40:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:40:03.840259 env[1352]: time="2023-10-02T20:40:03.840210816Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 20:40:03.840972 env[1352]: time="2023-10-02T20:40:03.840753176Z" level=error msg="Failed to pipe stderr of container \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\"" error="reading from a closed fifo" Oct 2 20:40:03.841111 env[1352]: time="2023-10-02T20:40:03.840767056Z" level=error msg="Failed to pipe stdout of container \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\"" error="reading from a closed fifo" Oct 2 20:40:03.844017 env[1352]: time="2023-10-02T20:40:03.843886333Z" level=error msg="StartContainer for \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:40:03.844765 kubelet[2477]: E1002 20:40:03.844272 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed" Oct 2 20:40:03.844765 kubelet[2477]: E1002 20:40:03.844400 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:40:03.844765 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:40:03.844765 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:40:03.844765 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6xbnk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:40:03.844765 kubelet[2477]: E1002 20:40:03.844439 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:40:04.046217 kubelet[2477]: I1002 20:40:04.046187 2477 scope.go:117] "RemoveContainer" containerID="0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813" Oct 2 20:40:04.046573 kubelet[2477]: I1002 20:40:04.046554 2477 scope.go:117] "RemoveContainer" containerID="0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813" Oct 2 20:40:04.049219 env[1352]: time="2023-10-02T20:40:04.049169413Z" level=info msg="RemoveContainer for \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\"" Oct 2 20:40:04.049666 env[1352]: time="2023-10-02T20:40:04.049634573Z" level=info msg="RemoveContainer for \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\"" Oct 2 20:40:04.053672 env[1352]: time="2023-10-02T20:40:04.053632649Z" level=error msg="RemoveContainer for \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\" failed" error="failed to set removing state for container \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\": container is already in removing state" Oct 2 20:40:04.055221 kubelet[2477]: E1002 20:40:04.053921 2477 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\": container is already in removing state" containerID="0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813" Oct 2 20:40:04.055221 kubelet[2477]: E1002 20:40:04.053973 2477 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813": container is already in removing state; Skipping pod "cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)" Oct 2 20:40:04.055221 kubelet[2477]: E1002 20:40:04.054232 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:40:04.058329 env[1352]: time="2023-10-02T20:40:04.058300405Z" level=info msg="RemoveContainer for \"0fab793d16100d7087dfc9fe27be7a0b0ec48536b148f234d08a212c7e682813\" returns successfully" Oct 2 20:40:04.728605 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed-rootfs.mount: Deactivated successfully. Oct 2 20:40:06.930291 kubelet[2477]: W1002 20:40:06.930254 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7ede1854_6a5b_4d56_b227_415f66324dfa.slice/cri-containerd-aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed.scope WatchSource:0}: task aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed not found: not found Oct 2 20:40:08.809791 kubelet[2477]: E1002 20:40:08.809767 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:13.811225 kubelet[2477]: E1002 20:40:13.811189 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:15.439000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:15.445297 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:40:15.445417 kernel: audit: type=1400 audit(1696279215.439:1110): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:15.439000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011cd580 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:15.496297 kernel: audit: type=1300 audit(1696279215.439:1110): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011cd580 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:15.439000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:15.520420 kernel: audit: type=1327 audit(1696279215.439:1110): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:15.520535 kernel: audit: type=1400 audit(1696279215.439:1111): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:15.439000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:15.439000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012520c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:15.572347 kernel: audit: type=1300 audit(1696279215.439:1111): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012520c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:15.439000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:15.596930 kernel: audit: type=1327 audit(1696279215.439:1111): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:15.597072 kernel: audit: type=1400 audit(1696279215.440:1112): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:15.440000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:15.440000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001252100 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:15.650251 kernel: audit: type=1300 audit(1696279215.440:1112): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001252100 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:15.440000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:15.675254 kernel: audit: type=1327 audit(1696279215.440:1112): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:15.675328 kernel: audit: type=1400 audit(1696279215.440:1113): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:15.440000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:40:15.440000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001252560 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:40:15.440000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:40:15.709450 kubelet[2477]: E1002 20:40:15.709417 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:40:18.812333 kubelet[2477]: E1002 20:40:18.812307 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:23.813736 kubelet[2477]: E1002 20:40:23.813601 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:24.950532 update_engine[1337]: I1002 20:40:24.950488 1337 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:40:24.950532 update_engine[1337]: I1002 20:40:24.950528 1337 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:40:24.950999 update_engine[1337]: I1002 20:40:24.950683 1337 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:40:24.951082 update_engine[1337]: I1002 20:40:24.951025 1337 omaha_request_params.cc:62] Current group set to lts Oct 2 20:40:24.951169 update_engine[1337]: I1002 20:40:24.951141 1337 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:40:24.951169 update_engine[1337]: I1002 20:40:24.951149 1337 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:40:24.951169 update_engine[1337]: I1002 20:40:24.951165 1337 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:40:24.951253 update_engine[1337]: I1002 20:40:24.951189 1337 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:40:24.951571 locksmithd[1428]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:40:24.951834 update_engine[1337]: I1002 20:40:24.951695 1337 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:40:24.951834 update_engine[1337]: I1002 20:40:24.951706 1337 omaha_request_action.cc:269] Request: Oct 2 20:40:24.951834 update_engine[1337]: Oct 2 20:40:24.951834 update_engine[1337]: Oct 2 20:40:24.951834 update_engine[1337]: Oct 2 20:40:24.951834 update_engine[1337]: Oct 2 20:40:24.951834 update_engine[1337]: Oct 2 20:40:24.951834 update_engine[1337]: Oct 2 20:40:24.951834 update_engine[1337]: Oct 2 20:40:24.951834 update_engine[1337]: Oct 2 20:40:24.951834 update_engine[1337]: I1002 20:40:24.951712 1337 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:40:24.953307 update_engine[1337]: I1002 20:40:24.953285 1337 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:40:24.953497 update_engine[1337]: I1002 20:40:24.953475 1337 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:40:26.129709 update_engine[1337]: I1002 20:40:26.129667 1337 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:40:26.130044 update_engine[1337]: I1002 20:40:26.129921 1337 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:40:26.130143 update_engine[1337]: I1002 20:40:26.130120 1337 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:40:26.491367 update_engine[1337]: I1002 20:40:26.491336 1337 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:40:26.492844 update_engine[1337]: I1002 20:40:26.492817 1337 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:40:26.492844 update_engine[1337]: I1002 20:40:26.492841 1337 omaha_request_action.cc:619] Omaha request response: Oct 2 20:40:26.492844 update_engine[1337]: Oct 2 20:40:26.641058 update_engine[1337]: I1002 20:40:26.641017 1337 omaha_request_action.cc:409] No update. Oct 2 20:40:26.641058 update_engine[1337]: I1002 20:40:26.641053 1337 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:40:26.641058 update_engine[1337]: I1002 20:40:26.641058 1337 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:40:26.641058 update_engine[1337]: I1002 20:40:26.641062 1337 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:40:26.641058 update_engine[1337]: I1002 20:40:26.641064 1337 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:40:26.641058 update_engine[1337]: I1002 20:40:26.641067 1337 update_attempter.cc:302] Processing Done. Oct 2 20:40:26.641387 update_engine[1337]: I1002 20:40:26.641081 1337 update_attempter.cc:338] No update. Oct 2 20:40:26.641387 update_engine[1337]: I1002 20:40:26.641091 1337 update_check_scheduler.cc:74] Next update check in 47m0s Oct 2 20:40:26.641465 locksmithd[1428]: LastCheckedTime=1696279226 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:40:27.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.4:22-10.200.12.6:32960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:27.780514 systemd[1]: Started sshd@7-10.200.20.4:22-10.200.12.6:32960.service. Oct 2 20:40:27.785814 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:40:27.785904 kernel: audit: type=1130 audit(1696279227.779:1114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.4:22-10.200.12.6:32960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:28.189000 audit[3066]: USER_ACCT pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.190194 sshd[3066]: Accepted publickey for core from 10.200.12.6 port 32960 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:40:28.192173 sshd[3066]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:40:28.190000 audit[3066]: CRED_ACQ pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.238440 kernel: audit: type=1101 audit(1696279228.189:1115): pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.238511 kernel: audit: type=1103 audit(1696279228.190:1116): pid=3066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.252774 kernel: audit: type=1006 audit(1696279228.190:1117): pid=3066 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:40:28.190000 audit[3066]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4ef8150 a2=3 a3=1 items=0 ppid=1 pid=3066 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:40:28.278096 kernel: audit: type=1300 audit(1696279228.190:1117): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4ef8150 a2=3 a3=1 items=0 ppid=1 pid=3066 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:40:28.256198 systemd[1]: Started session-10.scope. Oct 2 20:40:28.277711 systemd-logind[1335]: New session 10 of user core. Oct 2 20:40:28.190000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:40:28.286612 kernel: audit: type=1327 audit(1696279228.190:1117): proctitle=737368643A20636F7265205B707269765D Oct 2 20:40:28.289000 audit[3066]: USER_START pid=3066 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.315000 audit[3068]: CRED_ACQ pid=3068 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.337982 kernel: audit: type=1105 audit(1696279228.289:1118): pid=3066 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.338084 kernel: audit: type=1103 audit(1696279228.315:1119): pid=3068 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.632265 sshd[3066]: pam_unix(sshd:session): session closed for user core Oct 2 20:40:28.632000 audit[3066]: USER_END pid=3066 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.633000 audit[3066]: CRED_DISP pid=3066 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.659287 systemd[1]: sshd@7-10.200.20.4:22-10.200.12.6:32960.service: Deactivated successfully. Oct 2 20:40:28.660083 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:40:28.661412 systemd-logind[1335]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:40:28.662336 systemd-logind[1335]: Removed session 10. Oct 2 20:40:28.681736 kernel: audit: type=1106 audit(1696279228.632:1120): pid=3066 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.681835 kernel: audit: type=1104 audit(1696279228.633:1121): pid=3066 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:28.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.4:22-10.200.12.6:32960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:28.709013 kubelet[2477]: E1002 20:40:28.708980 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:40:28.814723 kubelet[2477]: E1002 20:40:28.814686 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:33.815984 kubelet[2477]: E1002 20:40:33.815957 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:38.701207 systemd[1]: Started sshd@8-10.200.20.4:22-10.200.12.6:57266.service. Oct 2 20:40:38.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.4:22-10.200.12.6:57266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:38.709188 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:40:38.709279 kernel: audit: type=1130 audit(1696279238.703:1123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.4:22-10.200.12.6:57266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:38.817128 kubelet[2477]: E1002 20:40:38.817101 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:39.104000 audit[3080]: USER_ACCT pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.105303 sshd[3080]: Accepted publickey for core from 10.200.12.6 port 57266 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:40:39.107416 sshd[3080]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:40:39.106000 audit[3080]: CRED_ACQ pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.152144 kernel: audit: type=1101 audit(1696279239.104:1124): pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.152194 kernel: audit: type=1103 audit(1696279239.106:1125): pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.166424 kernel: audit: type=1006 audit(1696279239.106:1126): pid=3080 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:40:39.106000 audit[3080]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde15db70 a2=3 a3=1 items=0 ppid=1 pid=3080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:40:39.191101 kernel: audit: type=1300 audit(1696279239.106:1126): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde15db70 a2=3 a3=1 items=0 ppid=1 pid=3080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:40:39.106000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:40:39.199701 kernel: audit: type=1327 audit(1696279239.106:1126): proctitle=737368643A20636F7265205B707269765D Oct 2 20:40:39.200034 systemd-logind[1335]: New session 11 of user core. Oct 2 20:40:39.200896 systemd[1]: Started session-11.scope. Oct 2 20:40:39.204000 audit[3080]: USER_START pid=3080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.207000 audit[3082]: CRED_ACQ pid=3082 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.252831 kernel: audit: type=1105 audit(1696279239.204:1127): pid=3080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.252923 kernel: audit: type=1103 audit(1696279239.207:1128): pid=3082 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.517171 sshd[3080]: pam_unix(sshd:session): session closed for user core Oct 2 20:40:39.517000 audit[3080]: USER_END pid=3080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.521762 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:40:39.522572 systemd[1]: sshd@8-10.200.20.4:22-10.200.12.6:57266.service: Deactivated successfully. Oct 2 20:40:39.519000 audit[3080]: CRED_DISP pid=3080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.565809 kernel: audit: type=1106 audit(1696279239.517:1129): pid=3080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.565889 kernel: audit: type=1104 audit(1696279239.519:1130): pid=3080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:39.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.4:22-10.200.12.6:57266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:39.566147 systemd-logind[1335]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:40:39.567311 systemd-logind[1335]: Removed session 11. Oct 2 20:40:41.709049 kubelet[2477]: E1002 20:40:41.709020 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:40:43.818248 kubelet[2477]: E1002 20:40:43.818213 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:48.819644 kubelet[2477]: E1002 20:40:48.819617 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:49.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.4:22-10.200.12.6:36860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:49.591212 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:40:49.591250 kernel: audit: type=1130 audit(1696279249.584:1132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.4:22-10.200.12.6:36860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:49.585407 systemd[1]: Started sshd@9-10.200.20.4:22-10.200.12.6:36860.service. Oct 2 20:40:49.993000 audit[3092]: USER_ACCT pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:49.994977 sshd[3092]: Accepted publickey for core from 10.200.12.6 port 36860 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:40:50.019997 kernel: audit: type=1101 audit(1696279249.993:1133): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.019000 audit[3092]: CRED_ACQ pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.021094 sshd[3092]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:40:50.057658 kernel: audit: type=1103 audit(1696279250.019:1134): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.057790 kernel: audit: type=1006 audit(1696279250.019:1135): pid=3092 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:40:50.057888 kernel: audit: type=1300 audit(1696279250.019:1135): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff81a9030 a2=3 a3=1 items=0 ppid=1 pid=3092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:40:50.019000 audit[3092]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff81a9030 a2=3 a3=1 items=0 ppid=1 pid=3092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:40:50.019000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:40:50.085250 systemd-logind[1335]: New session 12 of user core. Oct 2 20:40:50.086955 systemd[1]: Started session-12.scope. Oct 2 20:40:50.090448 kernel: audit: type=1327 audit(1696279250.019:1135): proctitle=737368643A20636F7265205B707269765D Oct 2 20:40:50.091000 audit[3092]: USER_START pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.094000 audit[3096]: CRED_ACQ pid=3096 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.139436 kernel: audit: type=1105 audit(1696279250.091:1136): pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.139606 kernel: audit: type=1103 audit(1696279250.094:1137): pid=3096 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.404148 sshd[3092]: pam_unix(sshd:session): session closed for user core Oct 2 20:40:50.404000 audit[3092]: USER_END pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.407662 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:40:50.408364 systemd[1]: sshd@9-10.200.20.4:22-10.200.12.6:36860.service: Deactivated successfully. Oct 2 20:40:50.409910 systemd-logind[1335]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:40:50.410795 systemd-logind[1335]: Removed session 12. Oct 2 20:40:50.431960 kernel: audit: type=1106 audit(1696279250.404:1138): pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.432036 kernel: audit: type=1104 audit(1696279250.405:1139): pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.405000 audit[3092]: CRED_DISP pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:40:50.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.4:22-10.200.12.6:36860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:40:53.821241 kubelet[2477]: E1002 20:40:53.821167 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:40:55.709279 kubelet[2477]: E1002 20:40:55.709249 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:40:58.822874 kubelet[2477]: E1002 20:40:58.822847 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:00.214000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.220657 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:41:00.220742 kernel: audit: type=1400 audit(1696279260.214:1142): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.214000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.266056 kernel: audit: type=1400 audit(1696279260.214:1141): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.266129 kernel: audit: type=1300 audit(1696279260.214:1142): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4005ff6cf0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.214000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4005ff6cf0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.317726 kernel: audit: type=1327 audit(1696279260.214:1142): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.214000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4009524980 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.345418 kernel: audit: type=1300 audit(1696279260.214:1141): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4009524980 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.369579 kernel: audit: type=1327 audit(1696279260.214:1141): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.220000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.392135 kernel: audit: type=1400 audit(1696279260.220:1143): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.220000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4005ff6e40 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.420198 kernel: audit: type=1300 audit(1696279260.220:1143): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4005ff6e40 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.420308 kernel: audit: type=1327 audit(1696279260.220:1143): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.228000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.467646 kernel: audit: type=1400 audit(1696279260.228:1144): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.228000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4005ff6f60 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.321000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.321000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4005fa2000 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.321000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.321000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40098072c0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:41:00.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:41:00.481662 systemd[1]: Started sshd@10-10.200.20.4:22-10.200.12.6:60170.service. Oct 2 20:41:00.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.4:22-10.200.12.6:60170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:00.869000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.869000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001bf80c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:41:00.869000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:41:00.869000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:00.869000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001b8e680 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:41:00.869000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:41:00.917000 audit[3106]: USER_ACCT pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:00.918351 sshd[3106]: Accepted publickey for core from 10.200.12.6 port 60170 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:41:00.918000 audit[3106]: CRED_ACQ pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:00.918000 audit[3106]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc06b7600 a2=3 a3=1 items=0 ppid=1 pid=3106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:00.918000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:00.920272 sshd[3106]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:41:00.924984 systemd[1]: Started session-13.scope. Oct 2 20:41:00.926020 systemd-logind[1335]: New session 13 of user core. Oct 2 20:41:00.928000 audit[3106]: USER_START pid=3106 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:00.931000 audit[3108]: CRED_ACQ pid=3108 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:01.312758 sshd[3106]: pam_unix(sshd:session): session closed for user core Oct 2 20:41:01.313000 audit[3106]: USER_END pid=3106 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:01.313000 audit[3106]: CRED_DISP pid=3106 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:01.316230 systemd[1]: sshd@10-10.200.20.4:22-10.200.12.6:60170.service: Deactivated successfully. Oct 2 20:41:01.316913 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:41:01.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.4:22-10.200.12.6:60170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:01.317393 systemd-logind[1335]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:41:01.318128 systemd-logind[1335]: Removed session 13. Oct 2 20:41:03.824872 kubelet[2477]: E1002 20:41:03.824850 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:08.709702 kubelet[2477]: E1002 20:41:08.709662 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:41:08.826324 kubelet[2477]: E1002 20:41:08.826301 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:11.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.4:22-10.200.12.6:57016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:11.381768 systemd[1]: Started sshd@11-10.200.20.4:22-10.200.12.6:57016.service. Oct 2 20:41:11.386921 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:41:11.387031 kernel: audit: type=1130 audit(1696279271.380:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.4:22-10.200.12.6:57016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:11.784000 audit[3121]: USER_ACCT pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:11.785581 sshd[3121]: Accepted publickey for core from 10.200.12.6 port 57016 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:41:11.787866 sshd[3121]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:41:11.786000 audit[3121]: CRED_ACQ pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:11.813664 systemd[1]: Started session-14.scope. Oct 2 20:41:11.815436 systemd-logind[1335]: New session 14 of user core. Oct 2 20:41:11.831491 kernel: audit: type=1101 audit(1696279271.784:1159): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:11.831608 kernel: audit: type=1103 audit(1696279271.786:1160): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:11.831670 kernel: audit: type=1006 audit(1696279271.786:1161): pid=3121 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:41:11.786000 audit[3121]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe46f3960 a2=3 a3=1 items=0 ppid=1 pid=3121 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:11.869567 kernel: audit: type=1300 audit(1696279271.786:1161): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe46f3960 a2=3 a3=1 items=0 ppid=1 pid=3121 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:11.786000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:11.878034 kernel: audit: type=1327 audit(1696279271.786:1161): proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:11.878098 kernel: audit: type=1105 audit(1696279271.819:1162): pid=3121 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:11.819000 audit[3121]: USER_START pid=3121 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:11.822000 audit[3123]: CRED_ACQ pid=3123 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:11.926026 kernel: audit: type=1103 audit(1696279271.822:1163): pid=3123 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:12.149874 sshd[3121]: pam_unix(sshd:session): session closed for user core Oct 2 20:41:12.150000 audit[3121]: USER_END pid=3121 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:12.153373 systemd-logind[1335]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:41:12.154639 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:41:12.156033 systemd-logind[1335]: Removed session 14. Oct 2 20:41:12.156700 systemd[1]: sshd@11-10.200.20.4:22-10.200.12.6:57016.service: Deactivated successfully. Oct 2 20:41:12.150000 audit[3121]: CRED_DISP pid=3121 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:12.200963 kernel: audit: type=1106 audit(1696279272.150:1164): pid=3121 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:12.201117 kernel: audit: type=1104 audit(1696279272.150:1165): pid=3121 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:12.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.4:22-10.200.12.6:57016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:13.827795 kubelet[2477]: E1002 20:41:13.827765 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:15.440000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:15.440000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:15.440000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b3540 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:41:15.440000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:41:15.440000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b8f8e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:41:15.440000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:41:15.441000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:15.441000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b3560 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:41:15.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:41:15.441000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:41:15.441000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b8fb00 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:41:15.441000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:41:18.828946 kubelet[2477]: E1002 20:41:18.828903 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:20.709510 kubelet[2477]: E1002 20:41:20.709479 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:41:22.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.4:22-10.200.12.6:37008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.225288 systemd[1]: Started sshd@12-10.200.20.4:22-10.200.12.6:37008.service. Oct 2 20:41:22.231025 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:41:22.231108 kernel: audit: type=1130 audit(1696279282.224:1171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.4:22-10.200.12.6:37008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:22.666000 audit[3136]: USER_ACCT pid=3136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:22.721840 kernel: audit: type=1101 audit(1696279282.666:1172): pid=3136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:22.721932 kernel: audit: type=1103 audit(1696279282.694:1173): pid=3136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:22.722039 kernel: audit: type=1006 audit(1696279282.694:1174): pid=3136 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:41:22.694000 audit[3136]: CRED_ACQ pid=3136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:22.722147 sshd[3136]: Accepted publickey for core from 10.200.12.6 port 37008 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:41:22.695804 sshd[3136]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:41:22.700566 systemd[1]: Started session-15.scope. Oct 2 20:41:22.701978 systemd-logind[1335]: New session 15 of user core. Oct 2 20:41:22.694000 audit[3136]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa9b78a0 a2=3 a3=1 items=0 ppid=1 pid=3136 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:22.759986 kernel: audit: type=1300 audit(1696279282.694:1174): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa9b78a0 a2=3 a3=1 items=0 ppid=1 pid=3136 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:22.694000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:22.768463 kernel: audit: type=1327 audit(1696279282.694:1174): proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:22.708000 audit[3136]: USER_START pid=3136 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:22.794173 kernel: audit: type=1105 audit(1696279282.708:1175): pid=3136 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:22.720000 audit[3139]: CRED_ACQ pid=3139 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:22.816355 kernel: audit: type=1103 audit(1696279282.720:1176): pid=3139 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:23.089280 sshd[3136]: pam_unix(sshd:session): session closed for user core Oct 2 20:41:23.089000 audit[3136]: USER_END pid=3136 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:23.093028 systemd-logind[1335]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:41:23.094288 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:41:23.095465 systemd-logind[1335]: Removed session 15. Oct 2 20:41:23.096144 systemd[1]: sshd@12-10.200.20.4:22-10.200.12.6:37008.service: Deactivated successfully. Oct 2 20:41:23.089000 audit[3136]: CRED_DISP pid=3136 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:23.138359 kernel: audit: type=1106 audit(1696279283.089:1177): pid=3136 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:23.138464 kernel: audit: type=1104 audit(1696279283.089:1178): pid=3136 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:23.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.4:22-10.200.12.6:37008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:23.829701 kubelet[2477]: E1002 20:41:23.829674 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:28.831549 kubelet[2477]: E1002 20:41:28.831521 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:33.158446 systemd[1]: Started sshd@13-10.200.20.4:22-10.200.12.6:39032.service. Oct 2 20:41:33.188416 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:41:33.188508 kernel: audit: type=1130 audit(1696279293.157:1180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.4:22-10.200.12.6:39032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:33.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.4:22-10.200.12.6:39032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:33.560000 audit[3150]: USER_ACCT pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:33.561635 sshd[3150]: Accepted publickey for core from 10.200.12.6 port 39032 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:41:33.563765 sshd[3150]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:41:33.562000 audit[3150]: CRED_ACQ pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:33.607840 kernel: audit: type=1101 audit(1696279293.560:1181): pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:33.607964 kernel: audit: type=1103 audit(1696279293.562:1182): pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:33.622078 kernel: audit: type=1006 audit(1696279293.562:1183): pid=3150 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:41:33.562000 audit[3150]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc462de00 a2=3 a3=1 items=0 ppid=1 pid=3150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:33.646039 kernel: audit: type=1300 audit(1696279293.562:1183): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc462de00 a2=3 a3=1 items=0 ppid=1 pid=3150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:33.562000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:33.654281 kernel: audit: type=1327 audit(1696279293.562:1183): proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:33.658366 systemd[1]: Started session-16.scope. Oct 2 20:41:33.658656 systemd-logind[1335]: New session 16 of user core. Oct 2 20:41:33.662000 audit[3150]: USER_START pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:33.688000 audit[3155]: CRED_ACQ pid=3155 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:33.710767 kernel: audit: type=1105 audit(1696279293.662:1184): pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:33.710869 kernel: audit: type=1103 audit(1696279293.688:1185): pid=3155 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:33.718381 env[1352]: time="2023-10-02T20:41:33.718323722Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:41:33.742859 env[1352]: time="2023-10-02T20:41:33.742765763Z" level=info msg="CreateContainer within sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245\"" Oct 2 20:41:33.743467 env[1352]: time="2023-10-02T20:41:33.743445069Z" level=info msg="StartContainer for \"8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245\"" Oct 2 20:41:33.766276 systemd[1]: Started cri-containerd-8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245.scope. Oct 2 20:41:33.769489 systemd[1]: run-containerd-runc-k8s.io-8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245-runc.cafig2.mount: Deactivated successfully. Oct 2 20:41:33.783820 systemd[1]: cri-containerd-8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245.scope: Deactivated successfully. Oct 2 20:41:33.841008 kubelet[2477]: E1002 20:41:33.833130 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:33.846273 env[1352]: time="2023-10-02T20:41:33.846217503Z" level=info msg="shim disconnected" id=8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245 Oct 2 20:41:33.846273 env[1352]: time="2023-10-02T20:41:33.846270385Z" level=warning msg="cleaning up after shim disconnected" id=8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245 namespace=k8s.io Oct 2 20:41:33.846417 env[1352]: time="2023-10-02T20:41:33.846280586Z" level=info msg="cleaning up dead shim" Oct 2 20:41:33.865567 env[1352]: time="2023-10-02T20:41:33.865509151Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:41:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3179 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:41:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:41:33.865809 env[1352]: time="2023-10-02T20:41:33.865754480Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 20:41:33.871998 env[1352]: time="2023-10-02T20:41:33.871920352Z" level=error msg="Failed to pipe stderr of container \"8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245\"" error="reading from a closed fifo" Oct 2 20:41:33.872111 env[1352]: time="2023-10-02T20:41:33.871963554Z" level=error msg="Failed to pipe stdout of container \"8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245\"" error="reading from a closed fifo" Oct 2 20:41:33.875178 env[1352]: time="2023-10-02T20:41:33.875122353Z" level=error msg="StartContainer for \"8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:41:33.875743 kubelet[2477]: E1002 20:41:33.875419 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245" Oct 2 20:41:33.875743 kubelet[2477]: E1002 20:41:33.875677 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:41:33.875743 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:41:33.875743 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:41:33.875743 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-6xbnk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:41:33.875743 kubelet[2477]: E1002 20:41:33.875724 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:41:34.002631 sshd[3150]: pam_unix(sshd:session): session closed for user core Oct 2 20:41:34.003000 audit[3150]: USER_END pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:34.003000 audit[3150]: CRED_DISP pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:34.030735 systemd[1]: sshd@13-10.200.20.4:22-10.200.12.6:39032.service: Deactivated successfully. Oct 2 20:41:34.031506 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:41:34.051436 kernel: audit: type=1106 audit(1696279294.003:1186): pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:34.051533 kernel: audit: type=1104 audit(1696279294.003:1187): pid=3150 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:34.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.4:22-10.200.12.6:39032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:34.052232 systemd-logind[1335]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:41:34.053152 systemd-logind[1335]: Removed session 16. Oct 2 20:41:34.242113 kubelet[2477]: I1002 20:41:34.241700 2477 scope.go:117] "RemoveContainer" containerID="aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed" Oct 2 20:41:34.242113 kubelet[2477]: I1002 20:41:34.242069 2477 scope.go:117] "RemoveContainer" containerID="aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed" Oct 2 20:41:34.243835 env[1352]: time="2023-10-02T20:41:34.243797944Z" level=info msg="RemoveContainer for \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\"" Oct 2 20:41:34.244331 env[1352]: time="2023-10-02T20:41:34.244157437Z" level=info msg="RemoveContainer for \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\"" Oct 2 20:41:34.244331 env[1352]: time="2023-10-02T20:41:34.244219959Z" level=error msg="RemoveContainer for \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\" failed" error="failed to set removing state for container \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\": container is already in removing state" Oct 2 20:41:34.244596 kubelet[2477]: E1002 20:41:34.244552 2477 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\": container is already in removing state" containerID="aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed" Oct 2 20:41:34.244596 kubelet[2477]: I1002 20:41:34.244585 2477 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed"} err="rpc error: code = Unknown desc = failed to set removing state for container \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\": container is already in removing state" Oct 2 20:41:34.250621 env[1352]: time="2023-10-02T20:41:34.250579036Z" level=info msg="RemoveContainer for \"aa295cd1f21044139a3669714b476ef7077d955988736d74df0642ddf3fa87ed\" returns successfully" Oct 2 20:41:34.251157 kubelet[2477]: E1002 20:41:34.251133 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:41:34.732096 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245-rootfs.mount: Deactivated successfully. Oct 2 20:41:36.950683 kubelet[2477]: W1002 20:41:36.950634 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7ede1854_6a5b_4d56_b227_415f66324dfa.slice/cri-containerd-8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245.scope WatchSource:0}: task 8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245 not found: not found Oct 2 20:41:38.834047 kubelet[2477]: E1002 20:41:38.834022 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:43.835692 kubelet[2477]: E1002 20:41:43.835658 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:44.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.4:22-10.200.12.6:57666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:44.072342 systemd[1]: Started sshd@14-10.200.20.4:22-10.200.12.6:57666.service. Oct 2 20:41:44.077657 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:41:44.077749 kernel: audit: type=1130 audit(1696279304.071:1189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.4:22-10.200.12.6:57666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:44.481000 audit[3203]: USER_ACCT pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.482494 sshd[3203]: Accepted publickey for core from 10.200.12.6 port 57666 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:41:44.506967 kernel: audit: type=1101 audit(1696279304.481:1190): pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.505000 audit[3203]: CRED_ACQ pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.507355 sshd[3203]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:41:44.543492 kernel: audit: type=1103 audit(1696279304.505:1191): pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.543628 kernel: audit: type=1006 audit(1696279304.506:1192): pid=3203 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:41:44.506000 audit[3203]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd14e5200 a2=3 a3=1 items=0 ppid=1 pid=3203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:44.548220 systemd[1]: Started session-17.scope. Oct 2 20:41:44.548980 systemd-logind[1335]: New session 17 of user core. Oct 2 20:41:44.568036 kernel: audit: type=1300 audit(1696279304.506:1192): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd14e5200 a2=3 a3=1 items=0 ppid=1 pid=3203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:44.506000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:44.576562 kernel: audit: type=1327 audit(1696279304.506:1192): proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:44.575000 audit[3203]: USER_START pid=3203 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.603286 kernel: audit: type=1105 audit(1696279304.575:1193): pid=3203 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.579000 audit[3205]: CRED_ACQ pid=3205 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.625222 kernel: audit: type=1103 audit(1696279304.579:1194): pid=3205 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.882451 sshd[3203]: pam_unix(sshd:session): session closed for user core Oct 2 20:41:44.882000 audit[3203]: USER_END pid=3203 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.885697 systemd-logind[1335]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:41:44.887042 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:41:44.888141 systemd-logind[1335]: Removed session 17. Oct 2 20:41:44.888801 systemd[1]: sshd@14-10.200.20.4:22-10.200.12.6:57666.service: Deactivated successfully. Oct 2 20:41:44.882000 audit[3203]: CRED_DISP pid=3203 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.933113 kernel: audit: type=1106 audit(1696279304.882:1195): pid=3203 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.933209 kernel: audit: type=1104 audit(1696279304.882:1196): pid=3203 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:44.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.4:22-10.200.12.6:57666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:46.709688 kubelet[2477]: E1002 20:41:46.709650 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:41:48.837255 kubelet[2477]: E1002 20:41:48.837220 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:53.838478 kubelet[2477]: E1002 20:41:53.838370 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:41:55.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.4:22-10.200.12.6:59400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:55.024085 systemd[1]: Started sshd@15-10.200.20.4:22-10.200.12.6:59400.service. Oct 2 20:41:55.029287 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:41:55.029366 kernel: audit: type=1130 audit(1696279315.022:1198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.4:22-10.200.12.6:59400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:55.812000 audit[3223]: USER_ACCT pid=3223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:55.814311 sshd[3223]: Accepted publickey for core from 10.200.12.6 port 59400 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:41:55.837981 kernel: audit: type=1101 audit(1696279315.812:1199): pid=3223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:55.836000 audit[3223]: CRED_ACQ pid=3223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:55.839218 sshd[3223]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:41:55.875594 kernel: audit: type=1103 audit(1696279315.836:1200): pid=3223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:55.875698 kernel: audit: type=1006 audit(1696279315.836:1201): pid=3223 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 20:41:55.836000 audit[3223]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedb5b2f0 a2=3 a3=1 items=0 ppid=1 pid=3223 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:55.880726 systemd-logind[1335]: New session 18 of user core. Oct 2 20:41:55.881328 systemd[1]: Started session-18.scope. Oct 2 20:41:55.900587 kernel: audit: type=1300 audit(1696279315.836:1201): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedb5b2f0 a2=3 a3=1 items=0 ppid=1 pid=3223 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:41:55.836000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:55.909215 kernel: audit: type=1327 audit(1696279315.836:1201): proctitle=737368643A20636F7265205B707269765D Oct 2 20:41:55.909277 kernel: audit: type=1105 audit(1696279315.884:1202): pid=3223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:55.884000 audit[3223]: USER_START pid=3223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:55.888000 audit[3225]: CRED_ACQ pid=3225 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:55.956126 kernel: audit: type=1103 audit(1696279315.888:1203): pid=3225 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:56.203121 sshd[3223]: pam_unix(sshd:session): session closed for user core Oct 2 20:41:56.204000 audit[3223]: USER_END pid=3223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:56.208061 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:41:56.208984 systemd[1]: sshd@15-10.200.20.4:22-10.200.12.6:59400.service: Deactivated successfully. Oct 2 20:41:56.205000 audit[3223]: CRED_DISP pid=3223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:56.231742 systemd-logind[1335]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:41:56.253331 kernel: audit: type=1106 audit(1696279316.204:1204): pid=3223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:56.253421 kernel: audit: type=1104 audit(1696279316.205:1205): pid=3223 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:41:56.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.4:22-10.200.12.6:59400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:41:56.253870 systemd-logind[1335]: Removed session 18. Oct 2 20:41:58.840441 kubelet[2477]: E1002 20:41:58.840413 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:00.216000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.221449 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:42:00.221519 kernel: audit: type=1400 audit(1696279320.216:1207): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.216000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007020630 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.271755 kernel: audit: type=1300 audit(1696279320.216:1207): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007020630 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.271843 kernel: audit: type=1327 audit(1696279320.216:1207): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.216000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.216000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.318083 kernel: audit: type=1400 audit(1696279320.216:1208): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.318162 kernel: audit: type=1300 audit(1696279320.216:1208): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007866e20 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.216000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007866e20 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.216000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.370609 kernel: audit: type=1327 audit(1696279320.216:1208): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.370715 kernel: audit: type=1400 audit(1696279320.220:1209): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.220000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.220000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007ee6960 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.420510 kernel: audit: type=1300 audit(1696279320.220:1209): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007ee6960 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.420601 kernel: audit: type=1327 audit(1696279320.220:1209): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.228000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.467953 kernel: audit: type=1400 audit(1696279320.228:1210): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.228000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40070207e0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.322000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.322000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007866f40 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.323000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.323000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40070208a0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:42:00.323000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:42:00.870000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.870000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000821da0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:00.870000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:00.870000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:00.870000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011cc3c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:00.870000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:01.709071 kubelet[2477]: E1002 20:42:01.709034 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:42:03.842736 kubelet[2477]: E1002 20:42:03.842703 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:06.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.4:22-10.200.12.6:44388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:06.271435 systemd[1]: Started sshd@16-10.200.20.4:22-10.200.12.6:44388.service. Oct 2 20:42:06.276690 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:42:06.276783 kernel: audit: type=1130 audit(1696279326.270:1215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.4:22-10.200.12.6:44388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:06.678000 audit[3237]: USER_ACCT pid=3237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:06.679442 sshd[3237]: Accepted publickey for core from 10.200.12.6 port 44388 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:06.705019 kernel: audit: type=1101 audit(1696279326.678:1216): pid=3237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:06.704000 audit[3237]: CRED_ACQ pid=3237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:06.705501 sshd[3237]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:06.741952 kernel: audit: type=1103 audit(1696279326.704:1217): pid=3237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:06.742116 kernel: audit: type=1006 audit(1696279326.704:1218): pid=3237 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 20:42:06.742151 kernel: audit: type=1300 audit(1696279326.704:1218): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdef8330 a2=3 a3=1 items=0 ppid=1 pid=3237 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:06.704000 audit[3237]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdef8330 a2=3 a3=1 items=0 ppid=1 pid=3237 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:06.704000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:06.774468 kernel: audit: type=1327 audit(1696279326.704:1218): proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:06.776592 systemd-logind[1335]: New session 19 of user core. Oct 2 20:42:06.777079 systemd[1]: Started session-19.scope. Oct 2 20:42:06.780000 audit[3237]: USER_START pid=3237 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:06.780000 audit[3239]: CRED_ACQ pid=3239 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:06.827813 kernel: audit: type=1105 audit(1696279326.780:1219): pid=3237 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:06.827877 kernel: audit: type=1103 audit(1696279326.780:1220): pid=3239 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:07.086574 sshd[3237]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:07.086000 audit[3237]: USER_END pid=3237 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:07.089676 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:42:07.090455 systemd[1]: sshd@16-10.200.20.4:22-10.200.12.6:44388.service: Deactivated successfully. Oct 2 20:42:07.114177 systemd-logind[1335]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:42:07.087000 audit[3237]: CRED_DISP pid=3237 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:07.136000 kernel: audit: type=1106 audit(1696279327.086:1221): pid=3237 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:07.136094 kernel: audit: type=1104 audit(1696279327.087:1222): pid=3237 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:07.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.4:22-10.200.12.6:44388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:07.136815 systemd-logind[1335]: Removed session 19. Oct 2 20:42:07.160993 systemd[1]: Started sshd@17-10.200.20.4:22-10.200.12.6:44404.service. Oct 2 20:42:07.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.4:22-10.200.12.6:44404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:07.609000 audit[3250]: USER_ACCT pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:07.611105 sshd[3250]: Accepted publickey for core from 10.200.12.6 port 44404 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:07.611000 audit[3250]: CRED_ACQ pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:07.612000 audit[3250]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc41f250 a2=3 a3=1 items=0 ppid=1 pid=3250 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:07.612000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:07.613255 sshd[3250]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:07.617553 systemd[1]: Started session-20.scope. Oct 2 20:42:07.618974 systemd-logind[1335]: New session 20 of user core. Oct 2 20:42:07.622000 audit[3250]: USER_START pid=3250 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:07.625000 audit[3252]: CRED_ACQ pid=3252 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:08.593169 sshd[3250]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:08.593000 audit[3250]: USER_END pid=3250 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:08.593000 audit[3250]: CRED_DISP pid=3250 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:08.596291 systemd[1]: sshd@17-10.200.20.4:22-10.200.12.6:44404.service: Deactivated successfully. Oct 2 20:42:08.597052 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:42:08.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.4:22-10.200.12.6:44404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:08.597686 systemd-logind[1335]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:42:08.598391 systemd-logind[1335]: Removed session 20. Oct 2 20:42:08.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.4:22-10.200.12.6:33486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:08.659788 systemd[1]: Started sshd@18-10.200.20.4:22-10.200.12.6:33486.service. Oct 2 20:42:08.843880 kubelet[2477]: E1002 20:42:08.843376 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:09.063000 audit[3261]: USER_ACCT pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:09.064867 sshd[3261]: Accepted publickey for core from 10.200.12.6 port 33486 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:09.065000 audit[3261]: CRED_ACQ pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:09.065000 audit[3261]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8531810 a2=3 a3=1 items=0 ppid=1 pid=3261 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:09.065000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:09.066799 sshd[3261]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:09.071374 systemd[1]: Started session-21.scope. Oct 2 20:42:09.071849 systemd-logind[1335]: New session 21 of user core. Oct 2 20:42:09.074000 audit[3261]: USER_START pid=3261 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:09.077000 audit[3263]: CRED_ACQ pid=3263 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:09.436119 sshd[3261]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:09.436000 audit[3261]: USER_END pid=3261 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:09.437000 audit[3261]: CRED_DISP pid=3261 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:09.440037 systemd[1]: sshd@18-10.200.20.4:22-10.200.12.6:33486.service: Deactivated successfully. Oct 2 20:42:09.440761 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:42:09.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.4:22-10.200.12.6:33486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:09.441222 systemd-logind[1335]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:42:09.441973 systemd-logind[1335]: Removed session 21. Oct 2 20:42:13.844498 kubelet[2477]: E1002 20:42:13.844473 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:15.442000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:15.447789 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:42:15.447868 kernel: audit: type=1400 audit(1696279335.442:1242): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:15.442000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:15.491919 kernel: audit: type=1400 audit(1696279335.442:1243): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:15.442000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400070f020 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:15.521331 kernel: audit: type=1300 audit(1696279335.442:1242): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400070f020 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:15.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:15.545679 kernel: audit: type=1327 audit(1696279335.442:1242): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:15.545784 kernel: audit: type=1400 audit(1696279335.442:1244): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:15.442000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:15.442000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400070f240 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:15.597023 kernel: audit: type=1300 audit(1696279335.442:1244): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400070f240 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:15.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:15.621075 kernel: audit: type=1327 audit(1696279335.442:1244): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:15.621157 kernel: audit: type=1400 audit(1696279335.443:1245): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:15.443000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:42:15.443000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400070f600 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:15.673080 kernel: audit: type=1300 audit(1696279335.443:1245): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400070f600 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:15.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:15.697615 kernel: audit: type=1327 audit(1696279335.443:1245): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:15.442000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a84160 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:42:15.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:42:15.709811 kubelet[2477]: E1002 20:42:15.709771 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:42:18.845908 kubelet[2477]: E1002 20:42:18.845872 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:19.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.4:22-10.200.12.6:58576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:19.504586 systemd[1]: Started sshd@19-10.200.20.4:22-10.200.12.6:58576.service. Oct 2 20:42:19.906000 audit[3273]: USER_ACCT pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:19.908189 sshd[3273]: Accepted publickey for core from 10.200.12.6 port 58576 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:19.908000 audit[3273]: CRED_ACQ pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:19.908000 audit[3273]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1d3a2e0 a2=3 a3=1 items=0 ppid=1 pid=3273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:19.908000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:19.910623 sshd[3273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:19.914818 systemd-logind[1335]: New session 22 of user core. Oct 2 20:42:19.915305 systemd[1]: Started session-22.scope. Oct 2 20:42:19.918000 audit[3273]: USER_START pid=3273 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:19.921000 audit[3277]: CRED_ACQ pid=3277 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.279319 sshd[3273]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:20.279000 audit[3273]: USER_END pid=3273 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.279000 audit[3273]: CRED_DISP pid=3273 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:20.282969 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:42:20.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.4:22-10.200.12.6:58576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:20.283667 systemd-logind[1335]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:42:20.283772 systemd[1]: sshd@19-10.200.20.4:22-10.200.12.6:58576.service: Deactivated successfully. Oct 2 20:42:20.284826 systemd-logind[1335]: Removed session 22. Oct 2 20:42:23.846867 kubelet[2477]: E1002 20:42:23.846674 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:28.709232 kubelet[2477]: E1002 20:42:28.709189 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:42:28.847539 kubelet[2477]: E1002 20:42:28.847503 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:30.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.4:22-10.200.12.6:42952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:30.346719 systemd[1]: Started sshd@20-10.200.20.4:22-10.200.12.6:42952.service. Oct 2 20:42:30.352006 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:42:30.352109 kernel: audit: type=1130 audit(1696279350.345:1255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.4:22-10.200.12.6:42952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:30.751000 audit[3286]: USER_ACCT pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:30.752930 sshd[3286]: Accepted publickey for core from 10.200.12.6 port 42952 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:30.776000 audit[3286]: CRED_ACQ pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:30.777705 sshd[3286]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:30.799106 kernel: audit: type=1101 audit(1696279350.751:1256): pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:30.799212 kernel: audit: type=1103 audit(1696279350.776:1257): pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:30.813127 kernel: audit: type=1006 audit(1696279350.776:1258): pid=3286 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:42:30.776000 audit[3286]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcaa4f920 a2=3 a3=1 items=0 ppid=1 pid=3286 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:30.837395 kernel: audit: type=1300 audit(1696279350.776:1258): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcaa4f920 a2=3 a3=1 items=0 ppid=1 pid=3286 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:30.776000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:30.846338 kernel: audit: type=1327 audit(1696279350.776:1258): proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:30.848864 systemd-logind[1335]: New session 23 of user core. Oct 2 20:42:30.849337 systemd[1]: Started session-23.scope. Oct 2 20:42:30.852000 audit[3286]: USER_START pid=3286 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:30.879973 kernel: audit: type=1105 audit(1696279350.852:1259): pid=3286 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:30.879000 audit[3288]: CRED_ACQ pid=3288 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:30.902010 kernel: audit: type=1103 audit(1696279350.879:1260): pid=3288 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:31.185964 sshd[3286]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:31.186000 audit[3286]: USER_END pid=3286 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:31.189791 systemd-logind[1335]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:42:31.190835 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:42:31.191802 systemd-logind[1335]: Removed session 23. Oct 2 20:42:31.192265 systemd[1]: sshd@20-10.200.20.4:22-10.200.12.6:42952.service: Deactivated successfully. Oct 2 20:42:31.186000 audit[3286]: CRED_DISP pid=3286 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:31.233986 kernel: audit: type=1106 audit(1696279351.186:1261): pid=3286 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:31.234085 kernel: audit: type=1104 audit(1696279351.186:1262): pid=3286 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:31.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.4:22-10.200.12.6:42952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:33.848516 kubelet[2477]: E1002 20:42:33.848491 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:38.850238 kubelet[2477]: E1002 20:42:38.850208 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:41.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.4:22-10.200.12.6:50146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:41.254251 systemd[1]: Started sshd@21-10.200.20.4:22-10.200.12.6:50146.service. Oct 2 20:42:41.259676 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:42:41.259774 kernel: audit: type=1130 audit(1696279361.253:1264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.4:22-10.200.12.6:50146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:41.661000 audit[3297]: USER_ACCT pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:41.662235 sshd[3297]: Accepted publickey for core from 10.200.12.6 port 50146 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:41.686896 sshd[3297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:41.687277 kernel: audit: type=1101 audit(1696279361.661:1265): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:41.687325 kernel: audit: type=1103 audit(1696279361.685:1266): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:41.685000 audit[3297]: CRED_ACQ pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:41.712021 kubelet[2477]: E1002 20:42:41.711798 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:42:41.723297 kernel: audit: type=1006 audit(1696279361.685:1267): pid=3297 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:42:41.725301 kernel: audit: type=1300 audit(1696279361.685:1267): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd93300e0 a2=3 a3=1 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:41.685000 audit[3297]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd93300e0 a2=3 a3=1 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:41.685000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:41.756805 kernel: audit: type=1327 audit(1696279361.685:1267): proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:41.759919 systemd[1]: Started session-24.scope. Oct 2 20:42:41.760483 systemd-logind[1335]: New session 24 of user core. Oct 2 20:42:41.765000 audit[3297]: USER_START pid=3297 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:41.765000 audit[3300]: CRED_ACQ pid=3300 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:41.814382 kernel: audit: type=1105 audit(1696279361.765:1268): pid=3297 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:41.814517 kernel: audit: type=1103 audit(1696279361.765:1269): pid=3300 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:42.071702 sshd[3297]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:42.072000 audit[3297]: USER_END pid=3297 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:42.075368 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:42:42.076185 systemd[1]: sshd@21-10.200.20.4:22-10.200.12.6:50146.service: Deactivated successfully. Oct 2 20:42:42.072000 audit[3297]: CRED_DISP pid=3297 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:42.100146 systemd-logind[1335]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:42:42.101011 systemd-logind[1335]: Removed session 24. Oct 2 20:42:42.120583 kernel: audit: type=1106 audit(1696279362.072:1270): pid=3297 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:42.120684 kernel: audit: type=1104 audit(1696279362.072:1271): pid=3297 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:42.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.4:22-10.200.12.6:50146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:43.850835 kubelet[2477]: E1002 20:42:43.850809 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:48.852195 kubelet[2477]: E1002 20:42:48.852164 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:52.140087 systemd[1]: Started sshd@22-10.200.20.4:22-10.200.12.6:33896.service. Oct 2 20:42:52.167704 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:42:52.167799 kernel: audit: type=1130 audit(1696279372.139:1273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.4:22-10.200.12.6:33896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:52.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.4:22-10.200.12.6:33896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:52.541000 audit[3311]: USER_ACCT pid=3311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.542796 sshd[3311]: Accepted publickey for core from 10.200.12.6 port 33896 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:42:52.544914 sshd[3311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:42:52.543000 audit[3311]: CRED_ACQ pid=3311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.588247 kernel: audit: type=1101 audit(1696279372.541:1274): pid=3311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.588338 kernel: audit: type=1103 audit(1696279372.543:1275): pid=3311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.603027 kernel: audit: type=1006 audit(1696279372.543:1276): pid=3311 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:42:52.543000 audit[3311]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc1e68c0 a2=3 a3=1 items=0 ppid=1 pid=3311 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.627707 kernel: audit: type=1300 audit(1696279372.543:1276): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc1e68c0 a2=3 a3=1 items=0 ppid=1 pid=3311 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:42:52.543000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:52.635889 kernel: audit: type=1327 audit(1696279372.543:1276): proctitle=737368643A20636F7265205B707269765D Oct 2 20:42:52.636183 systemd-logind[1335]: New session 25 of user core. Oct 2 20:42:52.636632 systemd[1]: Started session-25.scope. Oct 2 20:42:52.640000 audit[3311]: USER_START pid=3311 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.668671 kernel: audit: type=1105 audit(1696279372.640:1277): pid=3311 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.668755 kernel: audit: type=1103 audit(1696279372.667:1278): pid=3313 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.667000 audit[3313]: CRED_ACQ pid=3313 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.970781 sshd[3311]: pam_unix(sshd:session): session closed for user core Oct 2 20:42:52.971000 audit[3311]: USER_END pid=3311 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.975709 systemd-logind[1335]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:42:52.976927 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:42:52.978081 systemd-logind[1335]: Removed session 25. Oct 2 20:42:52.978675 systemd[1]: sshd@22-10.200.20.4:22-10.200.12.6:33896.service: Deactivated successfully. Oct 2 20:42:52.971000 audit[3311]: CRED_DISP pid=3311 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:53.019706 kernel: audit: type=1106 audit(1696279372.971:1279): pid=3311 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:53.019815 kernel: audit: type=1104 audit(1696279372.971:1280): pid=3311 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:42:52.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.4:22-10.200.12.6:33896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:42:53.853678 kubelet[2477]: E1002 20:42:53.853652 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:42:54.709321 kubelet[2477]: E1002 20:42:54.709283 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:42:58.855478 kubelet[2477]: E1002 20:42:58.855451 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:00.216000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.222004 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:43:00.222135 kernel: audit: type=1400 audit(1696279380.216:1282): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.216000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fca31a0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.272020 kernel: audit: type=1300 audit(1696279380.216:1282): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fca31a0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.216000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.295985 kernel: audit: type=1327 audit(1696279380.216:1282): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.296109 kernel: audit: type=1400 audit(1696279380.217:1283): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.217000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.217000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fd9fb60 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.345639 kernel: audit: type=1300 audit(1696279380.217:1283): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fd9fb60 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.217000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.369909 kernel: audit: type=1327 audit(1696279380.217:1283): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.370058 kernel: audit: type=1400 audit(1696279380.222:1284): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.222000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.222000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fca3230 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.420600 kernel: audit: type=1300 audit(1696279380.222:1284): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fca3230 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.420909 kernel: audit: type=1327 audit(1696279380.222:1284): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.230000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.467664 kernel: audit: type=1400 audit(1696279380.230:1285): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.230000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fca3350 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.330000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.330000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4010abeb00 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.330000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.330000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.330000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40108b9740 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:43:00.330000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:43:00.871000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.871000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:00.871000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400103af40 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:43:00.871000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:00.871000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c85d10 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:43:00.871000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:03.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.4:22-10.200.12.6:53476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:03.038603 systemd[1]: Started sshd@23-10.200.20.4:22-10.200.12.6:53476.service. Oct 2 20:43:03.440000 audit[3323]: USER_ACCT pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:03.441422 sshd[3323]: Accepted publickey for core from 10.200.12.6 port 53476 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:43:03.442000 audit[3323]: CRED_ACQ pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:03.442000 audit[3323]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4af2860 a2=3 a3=1 items=0 ppid=1 pid=3323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:03.442000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:03.443392 sshd[3323]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:43:03.447704 systemd[1]: Started session-26.scope. Oct 2 20:43:03.448084 systemd-logind[1335]: New session 26 of user core. Oct 2 20:43:03.451000 audit[3323]: USER_START pid=3323 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:03.453000 audit[3325]: CRED_ACQ pid=3325 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:03.772746 kubelet[2477]: W1002 20:43:03.772709 2477 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:43:03.808243 sshd[3323]: pam_unix(sshd:session): session closed for user core Oct 2 20:43:03.808000 audit[3323]: USER_END pid=3323 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:03.809000 audit[3323]: CRED_DISP pid=3323 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:03.814698 systemd-logind[1335]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:43:03.814853 systemd[1]: sshd@23-10.200.20.4:22-10.200.12.6:53476.service: Deactivated successfully. Oct 2 20:43:03.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.4:22-10.200.12.6:53476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:03.815585 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:43:03.816301 systemd-logind[1335]: Removed session 26. Oct 2 20:43:03.857486 kubelet[2477]: E1002 20:43:03.857455 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:08.859137 kubelet[2477]: E1002 20:43:08.859111 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:09.709826 kubelet[2477]: E1002 20:43:09.709794 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:43:13.860823 kubelet[2477]: E1002 20:43:13.860791 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:13.891000 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:43:13.891119 kernel: audit: type=1130 audit(1696279393.875:1299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.4:22-10.200.12.6:37606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:13.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.4:22-10.200.12.6:37606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:13.876635 systemd[1]: Started sshd@24-10.200.20.4:22-10.200.12.6:37606.service. Oct 2 20:43:14.278000 audit[3337]: USER_ACCT pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.280173 sshd[3337]: Accepted publickey for core from 10.200.12.6 port 37606 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:43:14.304027 kernel: audit: type=1101 audit(1696279394.278:1300): pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.304633 sshd[3337]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:43:14.303000 audit[3337]: CRED_ACQ pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.331143 systemd[1]: Started session-27.scope. Oct 2 20:43:14.332439 systemd-logind[1335]: New session 27 of user core. Oct 2 20:43:14.340768 kernel: audit: type=1103 audit(1696279394.303:1301): pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.340842 kernel: audit: type=1006 audit(1696279394.303:1302): pid=3337 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:43:14.349419 kernel: audit: type=1300 audit(1696279394.303:1302): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc891d450 a2=3 a3=1 items=0 ppid=1 pid=3337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.303000 audit[3337]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc891d450 a2=3 a3=1 items=0 ppid=1 pid=3337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:14.303000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:14.374720 kernel: audit: type=1327 audit(1696279394.303:1302): proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:14.374838 kernel: audit: type=1105 audit(1696279394.345:1303): pid=3337 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.345000 audit[3337]: USER_START pid=3337 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.349000 audit[3339]: CRED_ACQ pid=3339 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.421674 kernel: audit: type=1103 audit(1696279394.349:1304): pid=3339 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.666135 sshd[3337]: pam_unix(sshd:session): session closed for user core Oct 2 20:43:14.666000 audit[3337]: USER_END pid=3337 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.669746 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:43:14.670526 systemd[1]: sshd@24-10.200.20.4:22-10.200.12.6:37606.service: Deactivated successfully. Oct 2 20:43:14.667000 audit[3337]: CRED_DISP pid=3337 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.695513 systemd-logind[1335]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:43:14.696457 systemd-logind[1335]: Removed session 27. Oct 2 20:43:14.716816 kernel: audit: type=1106 audit(1696279394.666:1305): pid=3337 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.716976 kernel: audit: type=1104 audit(1696279394.667:1306): pid=3337 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:14.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.4:22-10.200.12.6:37606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:15.442000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:15.442000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b2800 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:43:15.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:15.442000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:15.442000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b2920 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:43:15.442000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:15.443000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:15.443000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b2a40 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:43:15.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:15.443000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:43:15.443000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025b2b80 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:43:15.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:43:18.861646 kubelet[2477]: E1002 20:43:18.861620 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:22.709593 kubelet[2477]: E1002 20:43:22.709555 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:43:23.862775 kubelet[2477]: E1002 20:43:23.862748 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:24.761594 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:43:24.761768 kernel: audit: type=1130 audit(1696279404.733:1312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.4:22-10.200.12.6:54700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:24.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.4:22-10.200.12.6:54700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:24.734472 systemd[1]: Started sshd@25-10.200.20.4:22-10.200.12.6:54700.service. Oct 2 20:43:25.134000 audit[3351]: USER_ACCT pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.135391 sshd[3351]: Accepted publickey for core from 10.200.12.6 port 54700 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:43:25.137504 sshd[3351]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:43:25.136000 audit[3351]: CRED_ACQ pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.187848 kernel: audit: type=1101 audit(1696279405.134:1313): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.188166 kernel: audit: type=1103 audit(1696279405.136:1314): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.136000 audit[3351]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5a94940 a2=3 a3=1 items=0 ppid=1 pid=3351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:25.217105 systemd-logind[1335]: New session 28 of user core. Oct 2 20:43:25.218418 systemd[1]: Started session-28.scope. Oct 2 20:43:25.245195 kernel: audit: type=1006 audit(1696279405.136:1315): pid=3351 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:43:25.245553 kernel: audit: type=1300 audit(1696279405.136:1315): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5a94940 a2=3 a3=1 items=0 ppid=1 pid=3351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:25.258903 kernel: audit: type=1327 audit(1696279405.136:1315): proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:25.259535 kernel: audit: type=1105 audit(1696279405.248:1316): pid=3351 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.136000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:25.248000 audit[3351]: USER_START pid=3351 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.257000 audit[3353]: CRED_ACQ pid=3353 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.321434 kernel: audit: type=1103 audit(1696279405.257:1317): pid=3353 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.566844 sshd[3351]: pam_unix(sshd:session): session closed for user core Oct 2 20:43:25.567000 audit[3351]: USER_END pid=3351 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.571417 systemd-logind[1335]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:43:25.572663 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:43:25.573960 systemd-logind[1335]: Removed session 28. Oct 2 20:43:25.574611 systemd[1]: sshd@25-10.200.20.4:22-10.200.12.6:54700.service: Deactivated successfully. Oct 2 20:43:25.567000 audit[3351]: CRED_DISP pid=3351 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.615423 kernel: audit: type=1106 audit(1696279405.567:1318): pid=3351 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.615509 kernel: audit: type=1104 audit(1696279405.567:1319): pid=3351 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:25.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.4:22-10.200.12.6:54700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:28.864505 kubelet[2477]: E1002 20:43:28.864456 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:33.709406 kubelet[2477]: E1002 20:43:33.709366 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:43:33.866453 kubelet[2477]: E1002 20:43:33.866416 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:35.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.4:22-10.200.12.6:55136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:35.641074 systemd[1]: Started sshd@26-10.200.20.4:22-10.200.12.6:55136.service. Oct 2 20:43:35.646659 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:43:35.646763 kernel: audit: type=1130 audit(1696279415.640:1321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.4:22-10.200.12.6:55136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:36.083000 audit[3362]: USER_ACCT pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.085169 sshd[3362]: Accepted publickey for core from 10.200.12.6 port 55136 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:43:36.108963 kernel: audit: type=1101 audit(1696279416.083:1322): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.110514 sshd[3362]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:43:36.109000 audit[3362]: CRED_ACQ pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.138797 systemd[1]: Started session-29.scope. Oct 2 20:43:36.140454 systemd-logind[1335]: New session 29 of user core. Oct 2 20:43:36.148334 kernel: audit: type=1103 audit(1696279416.109:1323): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.148423 kernel: audit: type=1006 audit(1696279416.109:1324): pid=3362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 20:43:36.109000 audit[3362]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1321ce0 a2=3 a3=1 items=0 ppid=1 pid=3362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:36.173225 kernel: audit: type=1300 audit(1696279416.109:1324): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1321ce0 a2=3 a3=1 items=0 ppid=1 pid=3362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:36.109000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:36.181468 kernel: audit: type=1327 audit(1696279416.109:1324): proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:36.181706 kernel: audit: type=1105 audit(1696279416.148:1325): pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.148000 audit[3362]: USER_START pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.151000 audit[3364]: CRED_ACQ pid=3364 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.228718 kernel: audit: type=1103 audit(1696279416.151:1326): pid=3364 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.506799 sshd[3362]: pam_unix(sshd:session): session closed for user core Oct 2 20:43:36.506000 audit[3362]: USER_END pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.510119 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:43:36.510840 systemd[1]: sshd@26-10.200.20.4:22-10.200.12.6:55136.service: Deactivated successfully. Oct 2 20:43:36.507000 audit[3362]: CRED_DISP pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.556453 kernel: audit: type=1106 audit(1696279416.506:1327): pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.556548 kernel: audit: type=1104 audit(1696279416.507:1328): pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:36.535442 systemd-logind[1335]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:43:36.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.4:22-10.200.12.6:55136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:36.557450 systemd-logind[1335]: Removed session 29. Oct 2 20:43:38.867441 kubelet[2477]: E1002 20:43:38.867415 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:43.869156 kubelet[2477]: E1002 20:43:43.869120 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:44.709674 kubelet[2477]: E1002 20:43:44.709645 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-txsm4_kube-system(7ede1854-6a5b-4d56-b227-415f66324dfa)\"" pod="kube-system/cilium-txsm4" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" Oct 2 20:43:46.610480 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:43:46.610591 kernel: audit: type=1130 audit(1696279426.583:1330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.4:22-10.200.12.6:46704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:46.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.4:22-10.200.12.6:46704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:46.583845 systemd[1]: Started sshd@27-10.200.20.4:22-10.200.12.6:46704.service. Oct 2 20:43:47.023000 audit[3373]: USER_ACCT pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.024533 sshd[3373]: Accepted publickey for core from 10.200.12.6 port 46704 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:43:47.026756 sshd[3373]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:43:47.025000 audit[3373]: CRED_ACQ pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.072569 kernel: audit: type=1101 audit(1696279427.023:1331): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.072662 kernel: audit: type=1103 audit(1696279427.025:1332): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.087635 kernel: audit: type=1006 audit(1696279427.025:1333): pid=3373 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 20:43:47.025000 audit[3373]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9ed0120 a2=3 a3=1 items=0 ppid=1 pid=3373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:47.111650 kernel: audit: type=1300 audit(1696279427.025:1333): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9ed0120 a2=3 a3=1 items=0 ppid=1 pid=3373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:47.025000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:47.119929 kernel: audit: type=1327 audit(1696279427.025:1333): proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:47.123108 systemd[1]: Started session-30.scope. Oct 2 20:43:47.123452 systemd-logind[1335]: New session 30 of user core. Oct 2 20:43:47.126000 audit[3373]: USER_START pid=3373 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.130000 audit[3375]: CRED_ACQ pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.174797 kernel: audit: type=1105 audit(1696279427.126:1334): pid=3373 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.174908 kernel: audit: type=1103 audit(1696279427.130:1335): pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.455089 sshd[3373]: pam_unix(sshd:session): session closed for user core Oct 2 20:43:47.455000 audit[3373]: USER_END pid=3373 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.459714 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:43:47.460584 systemd[1]: sshd@27-10.200.20.4:22-10.200.12.6:46704.service: Deactivated successfully. Oct 2 20:43:47.456000 audit[3373]: CRED_DISP pid=3373 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.483852 systemd-logind[1335]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:43:47.505352 kernel: audit: type=1106 audit(1696279427.455:1336): pid=3373 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.505449 kernel: audit: type=1104 audit(1696279427.456:1337): pid=3373 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.4:22-10.200.12.6:46704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:47.506035 systemd-logind[1335]: Removed session 30. Oct 2 20:43:47.528806 systemd[1]: Started sshd@28-10.200.20.4:22-10.200.12.6:53884.service. Oct 2 20:43:47.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.4:22-10.200.12.6:53884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:47.969000 audit[3385]: USER_ACCT pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.971151 sshd[3385]: Accepted publickey for core from 10.200.12.6 port 53884 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:43:47.971000 audit[3385]: CRED_ACQ pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.972000 audit[3385]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd01d130 a2=3 a3=1 items=0 ppid=1 pid=3385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:47.972000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:47.973505 sshd[3385]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:43:47.979697 systemd-logind[1335]: New session 31 of user core. Oct 2 20:43:47.980191 systemd[1]: Started session-31.scope. Oct 2 20:43:47.984000 audit[3385]: USER_START pid=3385 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:47.987000 audit[3387]: CRED_ACQ pid=3387 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:48.870665 kubelet[2477]: E1002 20:43:48.870639 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:50.317378 env[1352]: time="2023-10-02T20:43:50.317106158Z" level=info msg="StopPodSandbox for \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\"" Oct 2 20:43:50.317378 env[1352]: time="2023-10-02T20:43:50.317184679Z" level=info msg="Container to stop \"8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:43:50.320682 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97-shm.mount: Deactivated successfully. Oct 2 20:43:50.328286 env[1352]: time="2023-10-02T20:43:50.328247538Z" level=info msg="StopContainer for \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\" with timeout 30 (s)" Oct 2 20:43:50.328679 env[1352]: time="2023-10-02T20:43:50.328646223Z" level=info msg="Stop container \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\" with signal terminated" Oct 2 20:43:50.338923 systemd[1]: cri-containerd-264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97.scope: Deactivated successfully. Oct 2 20:43:50.338000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:43:50.342000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:43:50.363335 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97-rootfs.mount: Deactivated successfully. Oct 2 20:43:50.368032 systemd[1]: cri-containerd-0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024.scope: Deactivated successfully. Oct 2 20:43:50.367000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:43:50.371000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:43:50.396008 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024-rootfs.mount: Deactivated successfully. Oct 2 20:43:50.438028 env[1352]: time="2023-10-02T20:43:50.437982358Z" level=info msg="shim disconnected" id=264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97 Oct 2 20:43:50.438835 env[1352]: time="2023-10-02T20:43:50.438808689Z" level=warning msg="cleaning up after shim disconnected" id=264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97 namespace=k8s.io Oct 2 20:43:50.438968 env[1352]: time="2023-10-02T20:43:50.438952290Z" level=info msg="cleaning up dead shim" Oct 2 20:43:50.439052 env[1352]: time="2023-10-02T20:43:50.438004678Z" level=info msg="shim disconnected" id=0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024 Oct 2 20:43:50.439498 env[1352]: time="2023-10-02T20:43:50.439464417Z" level=warning msg="cleaning up after shim disconnected" id=0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024 namespace=k8s.io Oct 2 20:43:50.439498 env[1352]: time="2023-10-02T20:43:50.439494897Z" level=info msg="cleaning up dead shim" Oct 2 20:43:50.453199 env[1352]: time="2023-10-02T20:43:50.453153509Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:43:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3432 runtime=io.containerd.runc.v2\n" Oct 2 20:43:50.453922 env[1352]: time="2023-10-02T20:43:50.453895398Z" level=info msg="TearDown network for sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" successfully" Oct 2 20:43:50.454102 env[1352]: time="2023-10-02T20:43:50.454074840Z" level=info msg="StopPodSandbox for \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" returns successfully" Oct 2 20:43:50.454262 env[1352]: time="2023-10-02T20:43:50.454058400Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:43:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3433 runtime=io.containerd.runc.v2\n" Oct 2 20:43:50.458283 env[1352]: time="2023-10-02T20:43:50.458245653Z" level=info msg="StopContainer for \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\" returns successfully" Oct 2 20:43:50.458704 env[1352]: time="2023-10-02T20:43:50.458681258Z" level=info msg="StopPodSandbox for \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\"" Oct 2 20:43:50.459164 env[1352]: time="2023-10-02T20:43:50.459111064Z" level=info msg="Container to stop \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:43:50.461818 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94-shm.mount: Deactivated successfully. Oct 2 20:43:50.470900 systemd[1]: cri-containerd-1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94.scope: Deactivated successfully. Oct 2 20:43:50.470000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:43:50.475000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:43:50.497689 kubelet[2477]: I1002 20:43:50.497657 2477 scope.go:117] "RemoveContainer" containerID="8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245" Oct 2 20:43:50.506521 env[1352]: time="2023-10-02T20:43:50.506484899Z" level=info msg="RemoveContainer for \"8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245\"" Oct 2 20:43:50.510354 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94-rootfs.mount: Deactivated successfully. Oct 2 20:43:50.519066 env[1352]: time="2023-10-02T20:43:50.519033177Z" level=info msg="RemoveContainer for \"8f46976dc6f06dce4dac2101a60a9ffa0efc5af1e5382be699f59e652bf92245\" returns successfully" Oct 2 20:43:50.524329 env[1352]: time="2023-10-02T20:43:50.524288003Z" level=info msg="shim disconnected" id=1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94 Oct 2 20:43:50.524329 env[1352]: time="2023-10-02T20:43:50.524327004Z" level=warning msg="cleaning up after shim disconnected" id=1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94 namespace=k8s.io Oct 2 20:43:50.524453 env[1352]: time="2023-10-02T20:43:50.524338364Z" level=info msg="cleaning up dead shim" Oct 2 20:43:50.536718 env[1352]: time="2023-10-02T20:43:50.536681519Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:43:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3476 runtime=io.containerd.runc.v2\n" Oct 2 20:43:50.537012 env[1352]: time="2023-10-02T20:43:50.536985683Z" level=info msg="TearDown network for sandbox \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\" successfully" Oct 2 20:43:50.537079 env[1352]: time="2023-10-02T20:43:50.537011203Z" level=info msg="StopPodSandbox for \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\" returns successfully" Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648379 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-xtables-lock\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648421 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cni-path\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648451 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-6xbnk\" (UniqueName: \"kubernetes.io/projected/7ede1854-6a5b-4d56-b227-415f66324dfa-kube-api-access-6xbnk\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648445 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648468 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-etc-cni-netd\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648488 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/7ede1854-6a5b-4d56-b227-415f66324dfa-hubble-tls\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648504 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-bpf-maps\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648525 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-config-path\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648545 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-msl2x\" (UniqueName: \"kubernetes.io/projected/bac34266-b83e-49d0-9759-040d6b918697-kube-api-access-msl2x\") pod \"bac34266-b83e-49d0-9759-040d6b918697\" (UID: \"bac34266-b83e-49d0-9759-040d6b918697\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648562 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-hostproc\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648581 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bac34266-b83e-49d0-9759-040d6b918697-cilium-config-path\") pod \"bac34266-b83e-49d0-9759-040d6b918697\" (UID: \"bac34266-b83e-49d0-9759-040d6b918697\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648601 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-host-proc-sys-kernel\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648618 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-host-proc-sys-net\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648634 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-lib-modules\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648652 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-run\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.651047 kubelet[2477]: I1002 20:43:50.648673 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/7ede1854-6a5b-4d56-b227-415f66324dfa-clustermesh-secrets\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.652110 kubelet[2477]: I1002 20:43:50.648691 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-cgroup\") pod \"7ede1854-6a5b-4d56-b227-415f66324dfa\" (UID: \"7ede1854-6a5b-4d56-b227-415f66324dfa\") " Oct 2 20:43:50.652110 kubelet[2477]: I1002 20:43:50.648724 2477 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-xtables-lock\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.652110 kubelet[2477]: I1002 20:43:50.648751 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.652110 kubelet[2477]: I1002 20:43:50.648771 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.652110 kubelet[2477]: I1002 20:43:50.649052 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cni-path" (OuterVolumeSpecName: "cni-path") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.652110 kubelet[2477]: I1002 20:43:50.651911 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bac34266-b83e-49d0-9759-040d6b918697-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bac34266-b83e-49d0-9759-040d6b918697" (UID: "bac34266-b83e-49d0-9759-040d6b918697"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:43:50.652110 kubelet[2477]: I1002 20:43:50.651975 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.653113 kubelet[2477]: I1002 20:43:50.653092 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.653230 kubelet[2477]: I1002 20:43:50.653216 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.653308 kubelet[2477]: I1002 20:43:50.653296 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.653390 kubelet[2477]: I1002 20:43:50.653378 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.653856 kubelet[2477]: I1002 20:43:50.653791 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:43:50.654069 kubelet[2477]: I1002 20:43:50.654014 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-hostproc" (OuterVolumeSpecName: "hostproc") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:43:50.655279 kubelet[2477]: I1002 20:43:50.655255 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/7ede1854-6a5b-4d56-b227-415f66324dfa-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:43:50.658404 kubelet[2477]: I1002 20:43:50.658379 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/7ede1854-6a5b-4d56-b227-415f66324dfa-kube-api-access-6xbnk" (OuterVolumeSpecName: "kube-api-access-6xbnk") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "kube-api-access-6xbnk". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:43:50.659350 kubelet[2477]: I1002 20:43:50.659328 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/7ede1854-6a5b-4d56-b227-415f66324dfa-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "7ede1854-6a5b-4d56-b227-415f66324dfa" (UID: "7ede1854-6a5b-4d56-b227-415f66324dfa"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:43:50.662020 kubelet[2477]: I1002 20:43:50.661992 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bac34266-b83e-49d0-9759-040d6b918697-kube-api-access-msl2x" (OuterVolumeSpecName: "kube-api-access-msl2x") pod "bac34266-b83e-49d0-9759-040d6b918697" (UID: "bac34266-b83e-49d0-9759-040d6b918697"). InnerVolumeSpecName "kube-api-access-msl2x". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:43:50.749461 kubelet[2477]: I1002 20:43:50.749429 2477 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cni-path\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.749647 kubelet[2477]: I1002 20:43:50.749636 2477 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-6xbnk\" (UniqueName: \"kubernetes.io/projected/7ede1854-6a5b-4d56-b227-415f66324dfa-kube-api-access-6xbnk\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.749729 kubelet[2477]: I1002 20:43:50.749720 2477 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-etc-cni-netd\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.749843 kubelet[2477]: I1002 20:43:50.749808 2477 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/7ede1854-6a5b-4d56-b227-415f66324dfa-hubble-tls\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.749918 kubelet[2477]: I1002 20:43:50.749909 2477 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-bpf-maps\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750023 kubelet[2477]: I1002 20:43:50.750013 2477 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-config-path\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750098 kubelet[2477]: I1002 20:43:50.750088 2477 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-msl2x\" (UniqueName: \"kubernetes.io/projected/bac34266-b83e-49d0-9759-040d6b918697-kube-api-access-msl2x\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750163 kubelet[2477]: I1002 20:43:50.750154 2477 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-hostproc\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750235 kubelet[2477]: I1002 20:43:50.750226 2477 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bac34266-b83e-49d0-9759-040d6b918697-cilium-config-path\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750306 kubelet[2477]: I1002 20:43:50.750297 2477 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750378 kubelet[2477]: I1002 20:43:50.750369 2477 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-host-proc-sys-net\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750445 kubelet[2477]: I1002 20:43:50.750437 2477 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-lib-modules\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750519 kubelet[2477]: I1002 20:43:50.750510 2477 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-run\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750586 kubelet[2477]: I1002 20:43:50.750575 2477 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/7ede1854-6a5b-4d56-b227-415f66324dfa-clustermesh-secrets\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.750661 kubelet[2477]: I1002 20:43:50.750652 2477 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/7ede1854-6a5b-4d56-b227-415f66324dfa-cilium-cgroup\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:43:50.802333 systemd[1]: Removed slice kubepods-burstable-pod7ede1854_6a5b_4d56_b227_415f66324dfa.slice. Oct 2 20:43:51.320626 systemd[1]: var-lib-kubelet-pods-bac34266\x2db83e\x2d49d0\x2d9759\x2d040d6b918697-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmsl2x.mount: Deactivated successfully. Oct 2 20:43:51.320718 systemd[1]: var-lib-kubelet-pods-7ede1854\x2d6a5b\x2d4d56\x2db227\x2d415f66324dfa-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d6xbnk.mount: Deactivated successfully. Oct 2 20:43:51.320779 systemd[1]: var-lib-kubelet-pods-7ede1854\x2d6a5b\x2d4d56\x2db227\x2d415f66324dfa-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:43:51.320831 systemd[1]: var-lib-kubelet-pods-7ede1854\x2d6a5b\x2d4d56\x2db227\x2d415f66324dfa-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:43:51.501768 kubelet[2477]: I1002 20:43:51.501732 2477 scope.go:117] "RemoveContainer" containerID="0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024" Oct 2 20:43:51.504271 env[1352]: time="2023-10-02T20:43:51.503977656Z" level=info msg="RemoveContainer for \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\"" Oct 2 20:43:51.506982 systemd[1]: Removed slice kubepods-besteffort-podbac34266_b83e_49d0_9759_040d6b918697.slice. Oct 2 20:43:51.512192 env[1352]: time="2023-10-02T20:43:51.512106078Z" level=info msg="RemoveContainer for \"0ab0e46414734cd0616a0e255293e635e2cc43d59ec3ddbf10d855affabe2024\" returns successfully" Oct 2 20:43:51.711500 kubelet[2477]: I1002 20:43:51.711170 2477 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" path="/var/lib/kubelet/pods/7ede1854-6a5b-4d56-b227-415f66324dfa/volumes" Oct 2 20:43:51.711624 kubelet[2477]: I1002 20:43:51.711608 2477 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="bac34266-b83e-49d0-9759-040d6b918697" path="/var/lib/kubelet/pods/bac34266-b83e-49d0-9759-040d6b918697/volumes" Oct 2 20:43:52.356227 sshd[3385]: pam_unix(sshd:session): session closed for user core Oct 2 20:43:52.356000 audit[3385]: USER_END pid=3385 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.360053 systemd[1]: sshd@28-10.200.20.4:22-10.200.12.6:53884.service: Deactivated successfully. Oct 2 20:43:52.361014 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 20:43:52.361486 systemd[1]: session-31.scope: Consumed 1.480s CPU time. Oct 2 20:43:52.362223 systemd-logind[1335]: Session 31 logged out. Waiting for processes to exit. Oct 2 20:43:52.363053 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 20:43:52.363135 kernel: audit: type=1106 audit(1696279432.356:1351): pid=3385 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.363463 systemd-logind[1335]: Removed session 31. Oct 2 20:43:52.356000 audit[3385]: CRED_DISP pid=3385 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.415395 kernel: audit: type=1104 audit(1696279432.356:1352): pid=3385 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.415536 kernel: audit: type=1131 audit(1696279432.356:1353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.4:22-10.200.12.6:53884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:52.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.4:22-10.200.12.6:53884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:52.431091 systemd[1]: Started sshd@29-10.200.20.4:22-10.200.12.6:53900.service. Oct 2 20:43:52.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.4:22-10.200.12.6:53900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:52.457870 kernel: audit: type=1130 audit(1696279432.430:1354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.4:22-10.200.12.6:53900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:43:52.831000 audit[3495]: USER_ACCT pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.832349 sshd[3495]: Accepted publickey for core from 10.200.12.6 port 53900 ssh2: RSA SHA256:pOhi17uv1dMw9wbwzof49dIVAjOqWAX9EZnbvXjLyxI Oct 2 20:43:52.856968 kernel: audit: type=1101 audit(1696279432.831:1355): pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.857070 kernel: audit: type=1103 audit(1696279432.855:1356): pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.855000 audit[3495]: CRED_ACQ pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.857580 sshd[3495]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:43:52.862628 systemd[1]: Started session-32.scope. Oct 2 20:43:52.864263 systemd-logind[1335]: New session 32 of user core. Oct 2 20:43:52.892670 kernel: audit: type=1006 audit(1696279432.855:1357): pid=3495 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 20:43:52.892760 kernel: audit: type=1300 audit(1696279432.855:1357): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3860ad0 a2=3 a3=1 items=0 ppid=1 pid=3495 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:52.855000 audit[3495]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3860ad0 a2=3 a3=1 items=0 ppid=1 pid=3495 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:52.855000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:52.923902 kernel: audit: type=1327 audit(1696279432.855:1357): proctitle=737368643A20636F7265205B707269765D Oct 2 20:43:52.924215 kernel: audit: type=1105 audit(1696279432.878:1358): pid=3495 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.878000 audit[3495]: USER_START pid=3495 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:52.882000 audit[3497]: CRED_ACQ pid=3497 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:43:53.872389 kubelet[2477]: E1002 20:43:53.872357 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:43:55.169064 kubelet[2477]: I1002 20:43:55.169011 2477 topology_manager.go:215] "Topology Admit Handler" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" podNamespace="kube-system" podName="cilium-fvdnz" Oct 2 20:43:55.169064 kubelet[2477]: E1002 20:43:55.169073 2477 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: E1002 20:43:55.169084 2477 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: E1002 20:43:55.169093 2477 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bac34266-b83e-49d0-9759-040d6b918697" containerName="cilium-operator" Oct 2 20:43:55.169475 kubelet[2477]: E1002 20:43:55.169112 2477 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: E1002 20:43:55.169119 2477 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: I1002 20:43:55.169139 2477 memory_manager.go:346] "RemoveStaleState removing state" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: I1002 20:43:55.169147 2477 memory_manager.go:346] "RemoveStaleState removing state" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: I1002 20:43:55.169153 2477 memory_manager.go:346] "RemoveStaleState removing state" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: I1002 20:43:55.169159 2477 memory_manager.go:346] "RemoveStaleState removing state" podUID="bac34266-b83e-49d0-9759-040d6b918697" containerName="cilium-operator" Oct 2 20:43:55.169475 kubelet[2477]: I1002 20:43:55.169164 2477 memory_manager.go:346] "RemoveStaleState removing state" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: I1002 20:43:55.169170 2477 memory_manager.go:346] "RemoveStaleState removing state" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: E1002 20:43:55.169194 2477 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: I1002 20:43:55.169211 2477 memory_manager.go:346] "RemoveStaleState removing state" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.169475 kubelet[2477]: E1002 20:43:55.169226 2477 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7ede1854-6a5b-4d56-b227-415f66324dfa" containerName="mount-cgroup" Oct 2 20:43:55.174706 systemd[1]: Created slice kubepods-burstable-pod2118dfae_4fd0_43f5_9b3f_a59b7cc4490c.slice. Oct 2 20:43:55.273573 kubelet[2477]: I1002 20:43:55.273522 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-hostproc\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.273573 kubelet[2477]: I1002 20:43:55.273575 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-config-path\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.273761 kubelet[2477]: I1002 20:43:55.273599 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-bpf-maps\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.273761 kubelet[2477]: I1002 20:43:55.273632 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-host-proc-sys-kernel\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.273761 kubelet[2477]: I1002 20:43:55.273656 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-clustermesh-secrets\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.273761 kubelet[2477]: I1002 20:43:55.273675 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q54sl\" (UniqueName: \"kubernetes.io/projected/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-kube-api-access-q54sl\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.273761 kubelet[2477]: I1002 20:43:55.273704 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-run\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.273761 kubelet[2477]: I1002 20:43:55.273725 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-etc-cni-netd\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.273761 kubelet[2477]: I1002 20:43:55.273744 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-cgroup\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.274023 kubelet[2477]: I1002 20:43:55.273762 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cni-path\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.274023 kubelet[2477]: I1002 20:43:55.273803 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-host-proc-sys-net\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.274023 kubelet[2477]: I1002 20:43:55.273822 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-lib-modules\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.274023 kubelet[2477]: I1002 20:43:55.273853 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-xtables-lock\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.274023 kubelet[2477]: I1002 20:43:55.273874 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-ipsec-secrets\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.274023 kubelet[2477]: I1002 20:43:55.273893 2477 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-hubble-tls\") pod \"cilium-fvdnz\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " pod="kube-system/cilium-fvdnz" Oct 2 20:43:55.479405 env[1352]: time="2023-10-02T20:43:55.479297722Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-fvdnz,Uid:2118dfae-4fd0-43f5-9b3f-a59b7cc4490c,Namespace:kube-system,Attempt:0,}" Oct 2 20:43:55.512944 env[1352]: time="2023-10-02T20:43:55.512858776Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:43:55.513078 env[1352]: time="2023-10-02T20:43:55.512956897Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:43:55.513078 env[1352]: time="2023-10-02T20:43:55.512985778Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:43:55.513247 env[1352]: time="2023-10-02T20:43:55.513197940Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab pid=3515 runtime=io.containerd.runc.v2 Oct 2 20:43:55.527119 systemd[1]: Started cri-containerd-a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab.scope. Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.543000 audit: BPF prog-id=129 op=LOAD Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3515 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:55.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134323731656239663266353933386438613732373533333961663833 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3515 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:55.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134323731656239663266353933386438613732373533333961663833 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit: BPF prog-id=130 op=LOAD Oct 2 20:43:55.544000 audit[3526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3515 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:55.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134323731656239663266353933386438613732373533333961663833 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit: BPF prog-id=131 op=LOAD Oct 2 20:43:55.544000 audit[3526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3515 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:55.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134323731656239663266353933386438613732373533333961663833 Oct 2 20:43:55.544000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:43:55.544000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { perfmon } for pid=3526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit[3526]: AVC avc: denied { bpf } for pid=3526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:43:55.544000 audit: BPF prog-id=132 op=LOAD Oct 2 20:43:55.544000 audit[3526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3515 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:43:55.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134323731656239663266353933386438613732373533333961663833 Oct 2 20:43:55.560727 env[1352]: time="2023-10-02T20:43:55.560675525Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-fvdnz,Uid:2118dfae-4fd0-43f5-9b3f-a59b7cc4490c,Namespace:kube-system,Attempt:0,} returns sandbox id \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\"" Oct 2 20:43:55.563606 env[1352]: time="2023-10-02T20:43:55.563574001Z" level=info msg="CreateContainer within sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:43:55.592065 env[1352]: time="2023-10-02T20:43:55.592009512Z" level=info msg="CreateContainer within sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\"" Oct 2 20:43:55.593501 env[1352]: time="2023-10-02T20:43:55.593136445Z" level=info msg="StartContainer for \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\"" Oct 2 20:43:55.612728 systemd[1]: Started cri-containerd-c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03.scope. Oct 2 20:43:55.628721 systemd[1]: cri-containerd-c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03.scope: Deactivated successfully. Oct 2 20:43:55.708240 env[1352]: time="2023-10-02T20:43:55.708122783Z" level=info msg="shim disconnected" id=c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03 Oct 2 20:43:55.708479 env[1352]: time="2023-10-02T20:43:55.708461787Z" level=warning msg="cleaning up after shim disconnected" id=c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03 namespace=k8s.io Oct 2 20:43:55.708558 env[1352]: time="2023-10-02T20:43:55.708545668Z" level=info msg="cleaning up dead shim" Oct 2 20:43:55.722269 env[1352]: time="2023-10-02T20:43:55.722222916Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:43:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3577 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:43:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:43:55.722687 env[1352]: time="2023-10-02T20:43:55.722634842Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:43:55.724064 env[1352]: time="2023-10-02T20:43:55.724029419Z" level=error msg="Failed to pipe stdout of container \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\"" error="reading from a closed fifo" Oct 2 20:43:55.724179 env[1352]: time="2023-10-02T20:43:55.724053299Z" level=error msg="Failed to pipe stderr of container \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\"" error="reading from a closed fifo" Oct 2 20:43:55.727378 env[1352]: time="2023-10-02T20:43:55.727332539Z" level=error msg="StartContainer for \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:43:55.727576 kubelet[2477]: E1002 20:43:55.727553 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03" Oct 2 20:43:55.727673 kubelet[2477]: E1002 20:43:55.727654 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:43:55.727673 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:43:55.727673 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:43:55.727673 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q54sl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:43:55.728995 kubelet[2477]: E1002 20:43:55.727694 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:43:56.514685 env[1352]: time="2023-10-02T20:43:56.514616418Z" level=info msg="CreateContainer within sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:43:56.546098 env[1352]: time="2023-10-02T20:43:56.546032884Z" level=info msg="CreateContainer within sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\"" Oct 2 20:43:56.546654 env[1352]: time="2023-10-02T20:43:56.546623011Z" level=info msg="StartContainer for \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\"" Oct 2 20:43:56.570618 systemd[1]: Started cri-containerd-a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258.scope. Oct 2 20:43:56.587838 systemd[1]: cri-containerd-a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258.scope: Deactivated successfully. Oct 2 20:43:56.602472 env[1352]: time="2023-10-02T20:43:56.602421497Z" level=info msg="shim disconnected" id=a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258 Oct 2 20:43:56.602697 env[1352]: time="2023-10-02T20:43:56.602679500Z" level=warning msg="cleaning up after shim disconnected" id=a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258 namespace=k8s.io Oct 2 20:43:56.602781 env[1352]: time="2023-10-02T20:43:56.602768421Z" level=info msg="cleaning up dead shim" Oct 2 20:43:56.615566 env[1352]: time="2023-10-02T20:43:56.615519857Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:43:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3615 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:43:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:43:56.615825 env[1352]: time="2023-10-02T20:43:56.615773100Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:43:56.616033 env[1352]: time="2023-10-02T20:43:56.615998703Z" level=error msg="Failed to pipe stdout of container \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\"" error="reading from a closed fifo" Oct 2 20:43:56.616146 env[1352]: time="2023-10-02T20:43:56.616118065Z" level=error msg="Failed to pipe stderr of container \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\"" error="reading from a closed fifo" Oct 2 20:43:56.619529 env[1352]: time="2023-10-02T20:43:56.619482746Z" level=error msg="StartContainer for \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:43:56.620273 kubelet[2477]: E1002 20:43:56.619728 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258" Oct 2 20:43:56.620273 kubelet[2477]: E1002 20:43:56.619845 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:43:56.620273 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:43:56.620273 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:43:56.620273 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q54sl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:43:56.620273 kubelet[2477]: E1002 20:43:56.619896 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:43:57.384636 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258-rootfs.mount: Deactivated successfully. Oct 2 20:43:57.514862 kubelet[2477]: I1002 20:43:57.514837 2477 scope.go:117] "RemoveContainer" containerID="c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03" Oct 2 20:43:57.515642 kubelet[2477]: I1002 20:43:57.515623 2477 scope.go:117] "RemoveContainer" containerID="c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03" Oct 2 20:43:57.516930 env[1352]: time="2023-10-02T20:43:57.516894940Z" level=info msg="RemoveContainer for \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\"" Oct 2 20:43:57.518066 env[1352]: time="2023-10-02T20:43:57.518038434Z" level=info msg="RemoveContainer for \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\"" Oct 2 20:43:57.518283 env[1352]: time="2023-10-02T20:43:57.518240757Z" level=error msg="RemoveContainer for \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\" failed" error="failed to set removing state for container \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\": container is already in removing state" Oct 2 20:43:57.518492 kubelet[2477]: E1002 20:43:57.518475 2477 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\": container is already in removing state" containerID="c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03" Oct 2 20:43:57.518595 kubelet[2477]: E1002 20:43:57.518584 2477 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03": container is already in removing state; Skipping pod "cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c)" Oct 2 20:43:57.519060 kubelet[2477]: E1002 20:43:57.519043 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c)\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:43:57.525968 env[1352]: time="2023-10-02T20:43:57.525201722Z" level=info msg="RemoveContainer for \"c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03\" returns successfully" Oct 2 20:43:58.812350 kubelet[2477]: W1002 20:43:58.812298 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod2118dfae_4fd0_43f5_9b3f_a59b7cc4490c.slice/cri-containerd-c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03.scope WatchSource:0}: container "c48f312d1647ea379ad08d2472d4631cdc541fded78a0988ce40b5e6ddbf0e03" in namespace "k8s.io": not found Oct 2 20:43:58.873285 kubelet[2477]: E1002 20:43:58.873214 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:00.218000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.223416 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:44:00.223563 kernel: audit: type=1400 audit(1696279440.218:1379): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.218000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.267212 kernel: audit: type=1400 audit(1696279440.218:1378): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.218000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40052f7400 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.295416 kernel: audit: type=1300 audit(1696279440.218:1378): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40052f7400 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.295545 kernel: audit: type=1327 audit(1696279440.218:1378): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.218000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.218000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400832c690 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.347718 kernel: audit: type=1300 audit(1696279440.218:1379): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400832c690 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.218000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.373361 kernel: audit: type=1327 audit(1696279440.218:1379): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.222000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.397807 kernel: audit: type=1400 audit(1696279440.222:1380): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.222000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400824a810 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.425669 kernel: audit: type=1300 audit(1696279440.222:1380): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400824a810 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.450780 kernel: audit: type=1327 audit(1696279440.222:1380): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.230000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.473715 kernel: audit: type=1400 audit(1696279440.230:1381): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.230000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400832c930 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.347000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.347000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400824a840 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.347000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.347000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.347000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40052f7c60 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:44:00.347000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:44:00.872000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.872000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400070f140 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:00.872000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:00.873000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:00.873000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40020913e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:00.873000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:01.919259 kubelet[2477]: W1002 20:44:01.919214 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod2118dfae_4fd0_43f5_9b3f_a59b7cc4490c.slice/cri-containerd-a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258.scope WatchSource:0}: task a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258 not found: not found Oct 2 20:44:03.697703 env[1352]: time="2023-10-02T20:44:03.697664717Z" level=info msg="StopPodSandbox for \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\"" Oct 2 20:44:03.698169 env[1352]: time="2023-10-02T20:44:03.698123363Z" level=info msg="TearDown network for sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" successfully" Oct 2 20:44:03.698300 env[1352]: time="2023-10-02T20:44:03.698230124Z" level=info msg="StopPodSandbox for \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" returns successfully" Oct 2 20:44:03.698731 env[1352]: time="2023-10-02T20:44:03.698685689Z" level=info msg="RemovePodSandbox for \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\"" Oct 2 20:44:03.698779 env[1352]: time="2023-10-02T20:44:03.698730410Z" level=info msg="Forcibly stopping sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\"" Oct 2 20:44:03.698814 env[1352]: time="2023-10-02T20:44:03.698801051Z" level=info msg="TearDown network for sandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" successfully" Oct 2 20:44:03.706380 env[1352]: time="2023-10-02T20:44:03.706341661Z" level=info msg="RemovePodSandbox \"264b740c5ed5e1715258bfa3f912c8f9ce0cd600ef34e1995bbcd4338663ec97\" returns successfully" Oct 2 20:44:03.706874 env[1352]: time="2023-10-02T20:44:03.706851027Z" level=info msg="StopPodSandbox for \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\"" Oct 2 20:44:03.707096 env[1352]: time="2023-10-02T20:44:03.707059829Z" level=info msg="TearDown network for sandbox \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\" successfully" Oct 2 20:44:03.707179 env[1352]: time="2023-10-02T20:44:03.707163831Z" level=info msg="StopPodSandbox for \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\" returns successfully" Oct 2 20:44:03.707515 env[1352]: time="2023-10-02T20:44:03.707486755Z" level=info msg="RemovePodSandbox for \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\"" Oct 2 20:44:03.707583 env[1352]: time="2023-10-02T20:44:03.707518675Z" level=info msg="Forcibly stopping sandbox \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\"" Oct 2 20:44:03.707608 env[1352]: time="2023-10-02T20:44:03.707577516Z" level=info msg="TearDown network for sandbox \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\" successfully" Oct 2 20:44:03.714714 env[1352]: time="2023-10-02T20:44:03.714668041Z" level=info msg="RemovePodSandbox \"1560d8437ecea822d904a9fb37d7b110bc5e225f267c2f857117bff378802c94\" returns successfully" Oct 2 20:44:03.874464 kubelet[2477]: E1002 20:44:03.874438 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:08.876054 kubelet[2477]: E1002 20:44:08.876026 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:09.712839 env[1352]: time="2023-10-02T20:44:09.712782826Z" level=info msg="CreateContainer within sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:44:09.741373 env[1352]: time="2023-10-02T20:44:09.741315041Z" level=info msg="CreateContainer within sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\"" Oct 2 20:44:09.741978 env[1352]: time="2023-10-02T20:44:09.741926528Z" level=info msg="StartContainer for \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\"" Oct 2 20:44:09.765581 systemd[1]: Started cri-containerd-f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa.scope. Oct 2 20:44:09.782193 systemd[1]: cri-containerd-f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa.scope: Deactivated successfully. Oct 2 20:44:09.787071 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa-rootfs.mount: Deactivated successfully. Oct 2 20:44:09.859131 env[1352]: time="2023-10-02T20:44:09.859074542Z" level=info msg="shim disconnected" id=f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa Oct 2 20:44:09.859131 env[1352]: time="2023-10-02T20:44:09.859130062Z" level=warning msg="cleaning up after shim disconnected" id=f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa namespace=k8s.io Oct 2 20:44:09.859367 env[1352]: time="2023-10-02T20:44:09.859141302Z" level=info msg="cleaning up dead shim" Oct 2 20:44:09.872799 env[1352]: time="2023-10-02T20:44:09.872742142Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:44:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3653 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:44:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:44:09.873088 env[1352]: time="2023-10-02T20:44:09.873021905Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:44:09.876091 env[1352]: time="2023-10-02T20:44:09.876052781Z" level=error msg="Failed to pipe stdout of container \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\"" error="reading from a closed fifo" Oct 2 20:44:09.876240 env[1352]: time="2023-10-02T20:44:09.876099301Z" level=error msg="Failed to pipe stderr of container \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\"" error="reading from a closed fifo" Oct 2 20:44:09.880256 env[1352]: time="2023-10-02T20:44:09.880208349Z" level=error msg="StartContainer for \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:44:09.880519 kubelet[2477]: E1002 20:44:09.880492 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa" Oct 2 20:44:09.880842 kubelet[2477]: E1002 20:44:09.880605 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:44:09.880842 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:44:09.880842 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:44:09.880842 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q54sl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:44:09.880842 kubelet[2477]: E1002 20:44:09.880646 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:44:10.540599 kubelet[2477]: I1002 20:44:10.540180 2477 scope.go:117] "RemoveContainer" containerID="a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258" Oct 2 20:44:10.540979 kubelet[2477]: I1002 20:44:10.540961 2477 scope.go:117] "RemoveContainer" containerID="a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258" Oct 2 20:44:10.542818 env[1352]: time="2023-10-02T20:44:10.542786937Z" level=info msg="RemoveContainer for \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\"" Oct 2 20:44:10.543097 env[1352]: time="2023-10-02T20:44:10.543064620Z" level=info msg="RemoveContainer for \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\"" Oct 2 20:44:10.543171 env[1352]: time="2023-10-02T20:44:10.543136301Z" level=error msg="RemoveContainer for \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\" failed" error="failed to set removing state for container \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\": container is already in removing state" Oct 2 20:44:10.543324 kubelet[2477]: E1002 20:44:10.543303 2477 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\": container is already in removing state" containerID="a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258" Oct 2 20:44:10.543392 kubelet[2477]: E1002 20:44:10.543338 2477 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258": container is already in removing state; Skipping pod "cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c)" Oct 2 20:44:10.543630 kubelet[2477]: E1002 20:44:10.543612 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c)\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:44:10.551959 env[1352]: time="2023-10-02T20:44:10.551904444Z" level=info msg="RemoveContainer for \"a91032f920594aa145cecd1b0a63dc1d5433f01db403b9cb9221a2b0253ba258\" returns successfully" Oct 2 20:44:12.964636 kubelet[2477]: W1002 20:44:12.964584 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod2118dfae_4fd0_43f5_9b3f_a59b7cc4490c.slice/cri-containerd-f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa.scope WatchSource:0}: task f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa not found: not found Oct 2 20:44:13.878459 kubelet[2477]: E1002 20:44:13.878056 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:15.443000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:15.449593 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:44:15.449709 kernel: audit: type=1400 audit(1696279455.443:1387): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:15.443000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:15.492814 kernel: audit: type=1400 audit(1696279455.443:1386): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:15.492950 kernel: audit: type=1300 audit(1696279455.443:1387): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010e1ca0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:15.443000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010e1ca0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:15.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:15.546200 kernel: audit: type=1327 audit(1696279455.443:1387): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:15.546297 kernel: audit: type=1400 audit(1696279455.443:1388): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:15.443000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:15.443000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010e1ce0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:15.596781 kernel: audit: type=1300 audit(1696279455.443:1388): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010e1ce0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:15.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:15.620705 kernel: audit: type=1327 audit(1696279455.443:1388): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:15.620783 kernel: audit: type=1400 audit(1696279455.443:1389): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:15.443000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:44:15.443000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010e1d00 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:15.672053 kernel: audit: type=1300 audit(1696279455.443:1389): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010e1d00 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:15.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:15.696129 kernel: audit: type=1327 audit(1696279455.443:1389): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:15.443000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000ef5100 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:44:15.443000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:44:18.879325 kubelet[2477]: E1002 20:44:18.879297 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:23.880737 kubelet[2477]: E1002 20:44:23.880702 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:24.708984 kubelet[2477]: E1002 20:44:24.708925 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c)\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:44:28.881447 kubelet[2477]: E1002 20:44:28.881419 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:33.882857 kubelet[2477]: E1002 20:44:33.882831 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:37.711740 env[1352]: time="2023-10-02T20:44:37.711680190Z" level=info msg="CreateContainer within sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:44:37.735728 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount242299727.mount: Deactivated successfully. Oct 2 20:44:37.740607 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount693627280.mount: Deactivated successfully. Oct 2 20:44:37.748281 env[1352]: time="2023-10-02T20:44:37.748170186Z" level=info msg="CreateContainer within sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098\"" Oct 2 20:44:37.749928 env[1352]: time="2023-10-02T20:44:37.748635911Z" level=info msg="StartContainer for \"c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098\"" Oct 2 20:44:37.772084 systemd[1]: Started cri-containerd-c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098.scope. Oct 2 20:44:37.787979 systemd[1]: cri-containerd-c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098.scope: Deactivated successfully. Oct 2 20:44:37.813179 env[1352]: time="2023-10-02T20:44:37.813131292Z" level=info msg="shim disconnected" id=c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098 Oct 2 20:44:37.813408 env[1352]: time="2023-10-02T20:44:37.813390734Z" level=warning msg="cleaning up after shim disconnected" id=c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098 namespace=k8s.io Oct 2 20:44:37.813469 env[1352]: time="2023-10-02T20:44:37.813457375Z" level=info msg="cleaning up dead shim" Oct 2 20:44:37.826223 env[1352]: time="2023-10-02T20:44:37.826180593Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:44:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3691 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:44:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:44:37.826633 env[1352]: time="2023-10-02T20:44:37.826582598Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:44:37.828489 env[1352]: time="2023-10-02T20:44:37.826870521Z" level=error msg="Failed to pipe stdout of container \"c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098\"" error="reading from a closed fifo" Oct 2 20:44:37.828606 env[1352]: time="2023-10-02T20:44:37.828451018Z" level=error msg="Failed to pipe stderr of container \"c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098\"" error="reading from a closed fifo" Oct 2 20:44:37.832082 env[1352]: time="2023-10-02T20:44:37.832039937Z" level=error msg="StartContainer for \"c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:44:37.832985 kubelet[2477]: E1002 20:44:37.832320 2477 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098" Oct 2 20:44:37.832985 kubelet[2477]: E1002 20:44:37.832444 2477 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:44:37.832985 kubelet[2477]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:44:37.832985 kubelet[2477]: rm /hostbin/cilium-mount Oct 2 20:44:37.832985 kubelet[2477]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q54sl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:44:37.832985 kubelet[2477]: E1002 20:44:37.832480 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:44:38.589281 kubelet[2477]: I1002 20:44:38.589250 2477 scope.go:117] "RemoveContainer" containerID="f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa" Oct 2 20:44:38.589661 kubelet[2477]: I1002 20:44:38.589640 2477 scope.go:117] "RemoveContainer" containerID="f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa" Oct 2 20:44:38.592968 env[1352]: time="2023-10-02T20:44:38.591119243Z" level=info msg="RemoveContainer for \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\"" Oct 2 20:44:38.599527 env[1352]: time="2023-10-02T20:44:38.599486814Z" level=info msg="RemoveContainer for \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\" returns successfully" Oct 2 20:44:38.600005 env[1352]: time="2023-10-02T20:44:38.599975059Z" level=info msg="RemoveContainer for \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\"" Oct 2 20:44:38.600094 env[1352]: time="2023-10-02T20:44:38.600002539Z" level=info msg="RemoveContainer for \"f2d8f02ca181844e3971264b2d5554c859d9d8c44d6430444b4eb35a9da4e6fa\" returns successfully" Oct 2 20:44:38.600629 kubelet[2477]: E1002 20:44:38.600597 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c)\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:44:38.733983 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098-rootfs.mount: Deactivated successfully. Oct 2 20:44:38.884437 kubelet[2477]: E1002 20:44:38.883988 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:40.918494 kubelet[2477]: W1002 20:44:40.918450 2477 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod2118dfae_4fd0_43f5_9b3f_a59b7cc4490c.slice/cri-containerd-c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098.scope WatchSource:0}: task c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098 not found: not found Oct 2 20:44:43.885478 kubelet[2477]: E1002 20:44:43.885444 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:48.887107 kubelet[2477]: E1002 20:44:48.887070 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:53.709659 kubelet[2477]: E1002 20:44:53.709625 2477 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fvdnz_kube-system(2118dfae-4fd0-43f5-9b3f-a59b7cc4490c)\"" pod="kube-system/cilium-fvdnz" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" Oct 2 20:44:53.887756 kubelet[2477]: E1002 20:44:53.887732 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:44:56.357730 env[1352]: time="2023-10-02T20:44:56.357663480Z" level=info msg="StopPodSandbox for \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\"" Oct 2 20:44:56.358100 env[1352]: time="2023-10-02T20:44:56.357742035Z" level=info msg="Container to stop \"c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:44:56.359155 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab-shm.mount: Deactivated successfully. Oct 2 20:44:56.385095 systemd[1]: cri-containerd-a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab.scope: Deactivated successfully. Oct 2 20:44:56.391177 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:44:56.391297 kernel: audit: type=1334 audit(1696279496.384:1390): prog-id=129 op=UNLOAD Oct 2 20:44:56.384000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:44:56.398000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:44:56.411502 kernel: audit: type=1334 audit(1696279496.398:1391): prog-id=132 op=UNLOAD Oct 2 20:44:56.426653 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab-rootfs.mount: Deactivated successfully. Oct 2 20:44:56.443608 env[1352]: time="2023-10-02T20:44:56.443555589Z" level=info msg="shim disconnected" id=a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab Oct 2 20:44:56.443608 env[1352]: time="2023-10-02T20:44:56.443608705Z" level=warning msg="cleaning up after shim disconnected" id=a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab namespace=k8s.io Oct 2 20:44:56.443844 env[1352]: time="2023-10-02T20:44:56.443619225Z" level=info msg="cleaning up dead shim" Oct 2 20:44:56.455606 env[1352]: time="2023-10-02T20:44:56.455566677Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:44:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3724 runtime=io.containerd.runc.v2\n" Oct 2 20:44:56.455894 env[1352]: time="2023-10-02T20:44:56.455868219Z" level=info msg="TearDown network for sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" successfully" Oct 2 20:44:56.455948 env[1352]: time="2023-10-02T20:44:56.455893977Z" level=info msg="StopPodSandbox for \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" returns successfully" Oct 2 20:44:56.479792 sshd[3495]: pam_unix(sshd:session): session closed for user core Oct 2 20:44:56.480000 audit[3495]: USER_END pid=3495 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:56.483288 systemd[1]: sshd@29-10.200.20.4:22-10.200.12.6:53900.service: Deactivated successfully. Oct 2 20:44:56.483984 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:44:56.484141 systemd[1]: session-32.scope: Consumed 2.360s CPU time. Oct 2 20:44:56.494731 kubelet[2477]: I1002 20:44:56.494708 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-config-path\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495117 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-etc-cni-netd\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495144 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cni-path\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495164 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-hostproc\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495181 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-cgroup\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495197 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-lib-modules\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495214 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-xtables-lock\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495238 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-ipsec-secrets\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495258 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-clustermesh-secrets\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495274 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-run\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495293 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-host-proc-sys-net\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495313 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-hubble-tls\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495329 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-bpf-maps\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495348 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-host-proc-sys-kernel\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.495642 kubelet[2477]: I1002 20:44:56.495367 2477 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-q54sl\" (UniqueName: \"kubernetes.io/projected/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-kube-api-access-q54sl\") pod \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\" (UID: \"2118dfae-4fd0-43f5-9b3f-a59b7cc4490c\") " Oct 2 20:44:56.499401 kubelet[2477]: I1002 20:44:56.499376 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.501654 systemd[1]: var-lib-kubelet-pods-2118dfae\x2d4fd0\x2d43f5\x2d9b3f\x2da59b7cc4490c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dq54sl.mount: Deactivated successfully. Oct 2 20:44:56.510755 kubelet[2477]: I1002 20:44:56.510507 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:44:56.510755 kubelet[2477]: I1002 20:44:56.510535 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.510755 kubelet[2477]: I1002 20:44:56.510563 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cni-path" (OuterVolumeSpecName: "cni-path") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.510755 kubelet[2477]: I1002 20:44:56.510574 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-hostproc" (OuterVolumeSpecName: "hostproc") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.510755 kubelet[2477]: I1002 20:44:56.510585 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.510755 kubelet[2477]: I1002 20:44:56.510598 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.510755 kubelet[2477]: I1002 20:44:56.510715 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-kube-api-access-q54sl" (OuterVolumeSpecName: "kube-api-access-q54sl") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "kube-api-access-q54sl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:44:56.510755 kubelet[2477]: I1002 20:44:56.510738 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.511027 kubelet[2477]: I1002 20:44:56.510899 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.511027 kubelet[2477]: I1002 20:44:56.510922 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.480000 audit[3495]: CRED_DISP pid=3495 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:56.511410 systemd-logind[1335]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:44:56.512018 kubelet[2477]: I1002 20:44:56.511348 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:44:56.512604 systemd-logind[1335]: Removed session 32. Oct 2 20:44:56.519282 systemd[1]: var-lib-kubelet-pods-2118dfae\x2d4fd0\x2d43f5\x2d9b3f\x2da59b7cc4490c-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:44:56.533144 kernel: audit: type=1106 audit(1696279496.480:1392): pid=3495 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:56.533268 kernel: audit: type=1104 audit(1696279496.480:1393): pid=3495 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:44:56.534657 kubelet[2477]: I1002 20:44:56.534621 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:44:56.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.4:22-10.200.12.6:53900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:44:56.538990 systemd[1]: var-lib-kubelet-pods-2118dfae\x2d4fd0\x2d43f5\x2d9b3f\x2da59b7cc4490c-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:44:56.558422 kernel: audit: type=1131 audit(1696279496.482:1394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.4:22-10.200.12.6:53900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:44:56.559491 kubelet[2477]: I1002 20:44:56.559460 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:44:56.559858 kubelet[2477]: I1002 20:44:56.559839 2477 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" (UID: "2118dfae-4fd0-43f5-9b3f-a59b7cc4490c"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:44:56.596115 kubelet[2477]: I1002 20:44:56.596090 2477 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-lib-modules\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.596286 kubelet[2477]: I1002 20:44:56.596276 2477 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-xtables-lock\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.596369 kubelet[2477]: I1002 20:44:56.596360 2477 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.596444 kubelet[2477]: I1002 20:44:56.596435 2477 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-run\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.596528 kubelet[2477]: I1002 20:44:56.596520 2477 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-clustermesh-secrets\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.596605 kubelet[2477]: I1002 20:44:56.596596 2477 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-host-proc-sys-net\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.596675 kubelet[2477]: I1002 20:44:56.596666 2477 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-hubble-tls\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.596740 kubelet[2477]: I1002 20:44:56.596731 2477 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-bpf-maps\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.596890 kubelet[2477]: I1002 20:44:56.596879 2477 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.597001 kubelet[2477]: I1002 20:44:56.596991 2477 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-q54sl\" (UniqueName: \"kubernetes.io/projected/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-kube-api-access-q54sl\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.597089 kubelet[2477]: I1002 20:44:56.597080 2477 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cni-path\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.597165 kubelet[2477]: I1002 20:44:56.597156 2477 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-config-path\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.597228 kubelet[2477]: I1002 20:44:56.597220 2477 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-etc-cni-netd\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.597297 kubelet[2477]: I1002 20:44:56.597289 2477 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-hostproc\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.597364 kubelet[2477]: I1002 20:44:56.597354 2477 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c-cilium-cgroup\") on node \"ci-3510.3.0-a-1cb893e9b8\" DevicePath \"\"" Oct 2 20:44:56.623133 kubelet[2477]: I1002 20:44:56.621393 2477 scope.go:117] "RemoveContainer" containerID="c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098" Oct 2 20:44:56.627365 env[1352]: time="2023-10-02T20:44:56.626443948Z" level=info msg="RemoveContainer for \"c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098\"" Oct 2 20:44:56.627052 systemd[1]: Removed slice kubepods-burstable-pod2118dfae_4fd0_43f5_9b3f_a59b7cc4490c.slice. Oct 2 20:44:56.637486 env[1352]: time="2023-10-02T20:44:56.637403939Z" level=info msg="RemoveContainer for \"c8444ccaf07477435412102a3b29292a7e434a99a2170dc7ee43ed758e04e098\" returns successfully" Oct 2 20:44:57.359202 systemd[1]: var-lib-kubelet-pods-2118dfae\x2d4fd0\x2d43f5\x2d9b3f\x2da59b7cc4490c-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:44:57.710794 kubelet[2477]: I1002 20:44:57.710704 2477 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="2118dfae-4fd0-43f5-9b3f-a59b7cc4490c" path="/var/lib/kubelet/pods/2118dfae-4fd0-43f5-9b3f-a59b7cc4490c/volumes" Oct 2 20:44:58.889451 kubelet[2477]: E1002 20:44:58.889428 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:00.218000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.218000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.264000 kernel: audit: type=1400 audit(1696279500.218:1395): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.264065 kernel: audit: type=1400 audit(1696279500.218:1396): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.218000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007989bf0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:45:00.292355 kernel: audit: type=1300 audit(1696279500.218:1396): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007989bf0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:45:00.292467 kernel: audit: type=1327 audit(1696279500.218:1396): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:45:00.218000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:45:00.218000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4009065720 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:45:00.345193 kernel: audit: type=1300 audit(1696279500.218:1395): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4009065720 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:45:00.218000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:45:00.218000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.218000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4006f1b530 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:45:00.218000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:45:00.229000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.229000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4007989ce0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:45:00.229000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:45:00.347000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.347000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4006f1b740 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:45:00.347000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:45:00.348000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.348000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40083ebaa0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:45:00.348000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:45:00.872000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.872000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011cca60 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:00.872000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:00.873000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:00.873000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010b59b0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:00.873000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:03.717587 env[1352]: time="2023-10-02T20:45:03.717340632Z" level=info msg="StopPodSandbox for \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\"" Oct 2 20:45:03.717587 env[1352]: time="2023-10-02T20:45:03.717437667Z" level=info msg="TearDown network for sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" successfully" Oct 2 20:45:03.717587 env[1352]: time="2023-10-02T20:45:03.717470065Z" level=info msg="StopPodSandbox for \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" returns successfully" Oct 2 20:45:03.719077 env[1352]: time="2023-10-02T20:45:03.718179345Z" level=info msg="RemovePodSandbox for \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\"" Oct 2 20:45:03.719077 env[1352]: time="2023-10-02T20:45:03.718212503Z" level=info msg="Forcibly stopping sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\"" Oct 2 20:45:03.719077 env[1352]: time="2023-10-02T20:45:03.718269660Z" level=info msg="TearDown network for sandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" successfully" Oct 2 20:45:03.724827 env[1352]: time="2023-10-02T20:45:03.724744457Z" level=info msg="RemovePodSandbox \"a4271eb9f2f5938d8a7275339af83b53d0f5d798217505515171d0c2f4d8bfab\" returns successfully" Oct 2 20:45:03.890902 kubelet[2477]: E1002 20:45:03.890879 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:08.892458 kubelet[2477]: E1002 20:45:08.892422 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:13.893103 kubelet[2477]: E1002 20:45:13.893068 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:15.444000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:15.451059 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 2 20:45:15.451125 kernel: audit: type=1400 audit(1696279515.444:1403): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:15.444000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:15.497880 kernel: audit: type=1400 audit(1696279515.444:1404): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:15.498051 kernel: audit: type=1300 audit(1696279515.444:1403): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40000ec1e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:15.444000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40000ec1e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:15.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:15.552217 kernel: audit: type=1327 audit(1696279515.444:1403): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:15.552323 kernel: audit: type=1400 audit(1696279515.445:1405): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:15.445000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:15.445000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40000ec520 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:15.604361 kernel: audit: type=1300 audit(1696279515.445:1405): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40000ec520 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:15.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:15.628873 kernel: audit: type=1327 audit(1696279515.445:1405): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:15.628976 kernel: audit: type=1400 audit(1696279515.445:1406): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:15.445000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:45:15.445000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40000ec560 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:15.680143 kernel: audit: type=1300 audit(1696279515.445:1406): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40000ec560 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:15.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:15.705226 kernel: audit: type=1327 audit(1696279515.445:1406): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:15.444000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001252100 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:45:15.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:45:18.894657 kubelet[2477]: E1002 20:45:18.894625 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:23.896591 kubelet[2477]: E1002 20:45:23.896424 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:28.897747 kubelet[2477]: E1002 20:45:28.897719 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:33.899324 kubelet[2477]: E1002 20:45:33.899301 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:38.901045 kubelet[2477]: E1002 20:45:38.901019 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:43.903014 kubelet[2477]: E1002 20:45:43.902982 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:48.904487 kubelet[2477]: E1002 20:45:48.904454 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:53.905470 kubelet[2477]: E1002 20:45:53.905436 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:45:58.907046 kubelet[2477]: E1002 20:45:58.907020 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:00.218000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.224800 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:46:00.224905 kernel: audit: type=1400 audit(1696279560.218:1407): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.218000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400ecef800 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.275539 kernel: audit: type=1300 audit(1696279560.218:1407): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400ecef800 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.218000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.300469 kernel: audit: type=1327 audit(1696279560.218:1407): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.300575 kernel: audit: type=1400 audit(1696279560.219:1408): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.219000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.219000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400eef3c40 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.350533 kernel: audit: type=1300 audit(1696279560.219:1408): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400eef3c40 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.375351 kernel: audit: type=1327 audit(1696279560.219:1408): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.375450 kernel: audit: type=1400 audit(1696279560.224:1409): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.224000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.224000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400ed12510 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.430108 kernel: audit: type=1300 audit(1696279560.224:1409): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400ed12510 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.224000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.454386 kernel: audit: type=1327 audit(1696279560.224:1409): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.454464 kernel: audit: type=1400 audit(1696279560.232:1410): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.232000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.232000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400ecef8c0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.232000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.348000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.348000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ed12990 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.348000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.348000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.348000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400f3284e0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:46:00.348000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:46:00.873000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.873000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400103aea0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:00.873000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:00.873000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:00.873000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6f080 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:00.873000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:03.908047 kubelet[2477]: E1002 20:46:03.908022 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:08.909159 kubelet[2477]: E1002 20:46:08.909124 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:13.909859 kubelet[2477]: E1002 20:46:13.909833 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:15.445000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:15.451872 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:46:15.452042 kernel: audit: type=1400 audit(1696279575.445:1415): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:15.446000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:15.495385 kernel: audit: type=1400 audit(1696279575.446:1416): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:15.495490 kernel: audit: type=1300 audit(1696279575.446:1416): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400103b900 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:15.446000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400103b900 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:15.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:15.549135 kernel: audit: type=1327 audit(1696279575.446:1416): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:15.549233 kernel: audit: type=1400 audit(1696279575.446:1417): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:15.446000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:15.446000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400103baa0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:15.600814 kernel: audit: type=1300 audit(1696279575.446:1417): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400103baa0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:15.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:15.625587 kernel: audit: type=1327 audit(1696279575.446:1417): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:15.625697 kernel: audit: type=1400 audit(1696279575.447:1418): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:15.447000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:46:15.447000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400103bcc0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:15.678265 kernel: audit: type=1300 audit(1696279575.447:1418): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400103bcc0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:15.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:15.702678 kernel: audit: type=1327 audit(1696279575.447:1418): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:15.445000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400228c400 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:46:15.445000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:46:18.911679 kubelet[2477]: E1002 20:46:18.911644 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:23.912741 kubelet[2477]: E1002 20:46:23.912715 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:28.913856 kubelet[2477]: E1002 20:46:28.913821 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:33.914896 kubelet[2477]: E1002 20:46:33.914869 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:38.916664 kubelet[2477]: E1002 20:46:38.916613 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:43.917779 kubelet[2477]: E1002 20:46:43.917742 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:48.918984 kubelet[2477]: E1002 20:46:48.918925 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:53.919880 kubelet[2477]: E1002 20:46:53.919695 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:46:58.921163 kubelet[2477]: E1002 20:46:58.921127 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:00.220000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.226080 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:47:00.226199 kernel: audit: type=1400 audit(1696279620.220:1420): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.220000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.271867 kernel: audit: type=1400 audit(1696279620.220:1419): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.220000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008081fb0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.301101 kernel: audit: type=1300 audit(1696279620.220:1420): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008081fb0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.301206 kernel: audit: type=1327 audit(1696279620.220:1420): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.220000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400582bd00 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.354911 kernel: audit: type=1300 audit(1696279620.220:1419): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400582bd00 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.379837 kernel: audit: type=1327 audit(1696279620.220:1419): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.380013 kernel: audit: type=1400 audit(1696279620.225:1421): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.225000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.225000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4004c77a10 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.433070 kernel: audit: type=1300 audit(1696279620.225:1421): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4004c77a10 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.225000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.459169 kernel: audit: type=1327 audit(1696279620.225:1421): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.459307 kernel: audit: type=1400 audit(1696279620.230:1422): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.230000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.230000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=400fd20060 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.346000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.346000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400fd20120 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.346000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.346000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.346000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40095d6a80 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:47:00.346000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:47:00.874000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.874000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ef5620 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:00.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:00.874000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:00.874000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40019b7230 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:00.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:03.921929 kubelet[2477]: E1002 20:47:03.921905 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:08.923020 kubelet[2477]: E1002 20:47:08.922991 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:13.924802 kubelet[2477]: E1002 20:47:13.924769 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:15.446000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:15.453010 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:47:15.453131 kernel: audit: type=1400 audit(1696279635.446:1427): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:15.455000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:15.498107 kernel: audit: type=1400 audit(1696279635.455:1428): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:15.498234 kernel: audit: type=1300 audit(1696279635.455:1428): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b5e300 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:15.455000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b5e300 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:15.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:15.551643 kernel: audit: type=1327 audit(1696279635.455:1428): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:15.455000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:15.574275 kernel: audit: type=1400 audit(1696279635.455:1429): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:15.574404 kernel: audit: type=1300 audit(1696279635.455:1429): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b5e320 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:15.455000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b5e320 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:15.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:15.627342 kernel: audit: type=1327 audit(1696279635.455:1429): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:15.456000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:15.649717 kernel: audit: type=1400 audit(1696279635.456:1430): avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:47:15.649816 kernel: audit: type=1300 audit(1696279635.456:1430): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b5e6c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:15.456000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b5e6c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:15.456000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:15.704116 kernel: audit: type=1327 audit(1696279635.456:1430): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:15.446000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e8ec00 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:47:15.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:47:18.926132 kubelet[2477]: E1002 20:47:18.926095 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:23.928032 kubelet[2477]: E1002 20:47:23.928008 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:28.929380 kubelet[2477]: E1002 20:47:28.929356 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:33.930669 kubelet[2477]: E1002 20:47:33.930644 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:38.931841 kubelet[2477]: E1002 20:47:38.931817 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:43.933770 kubelet[2477]: E1002 20:47:43.933744 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:48.935525 kubelet[2477]: E1002 20:47:48.935484 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:53.936883 kubelet[2477]: E1002 20:47:53.936857 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:47:58.938244 kubelet[2477]: E1002 20:47:58.938210 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:00.220000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.226514 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:48:00.226631 kernel: audit: type=1400 audit(1696279680.220:1431): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.221000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.271519 kernel: audit: type=1400 audit(1696279680.221:1432): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.271621 kernel: audit: type=1300 audit(1696279680.221:1432): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4009951e40 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.221000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4009951e40 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.221000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.324829 kernel: audit: type=1327 audit(1696279680.221:1432): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.324977 kernel: audit: type=1300 audit(1696279680.220:1431): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007b9d200 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.220000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007b9d200 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.377178 kernel: audit: type=1327 audit(1696279680.220:1431): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.230000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.400030 kernel: audit: type=1400 audit(1696279680.230:1433): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.400140 kernel: audit: type=1300 audit(1696279680.230:1433): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40041cc4e0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.230000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40041cc4e0 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.451730 kernel: audit: type=1327 audit(1696279680.230:1433): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.234000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.474881 kernel: audit: type=1400 audit(1696279680.234:1434): avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.234000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40041cc510 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.234000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.349000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.349000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40057fc300 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.349000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.350000 audit[2305]: AVC avc: denied { watch } for pid=2305 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.350000 audit[2305]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400a83fc40 a2=fc6 a3=0 items=0 ppid=2165 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c267,c664 key=(null) Oct 2 20:48:00.350000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:48:00.874000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.874000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:00.874000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001c6f240 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:48:00.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:00.874000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009fd410 a2=fc6 a3=0 items=0 ppid=2207 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:48:00.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:02.566425 systemd[1]: cri-containerd-08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd.scope: Deactivated successfully. Oct 2 20:48:02.566741 systemd[1]: cri-containerd-08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd.scope: Consumed 5.033s CPU time. Oct 2 20:48:02.569000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:48:02.569000 audit: BPF prog-id=96 op=UNLOAD Oct 2 20:48:02.592442 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd-rootfs.mount: Deactivated successfully. Oct 2 20:48:02.611446 env[1352]: time="2023-10-02T20:48:02.611400957Z" level=info msg="shim disconnected" id=08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd Oct 2 20:48:02.612009 env[1352]: time="2023-10-02T20:48:02.611980790Z" level=warning msg="cleaning up after shim disconnected" id=08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd namespace=k8s.io Oct 2 20:48:02.612111 env[1352]: time="2023-10-02T20:48:02.612097108Z" level=info msg="cleaning up dead shim" Oct 2 20:48:02.624845 env[1352]: time="2023-10-02T20:48:02.624800382Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:48:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3781 runtime=io.containerd.runc.v2\n" Oct 2 20:48:02.910575 kubelet[2477]: I1002 20:48:02.910123 2477 scope.go:117] "RemoveContainer" containerID="08be0ca44ac4ada4b20f274f829bb3668d4f988bf69ef36702cc07f9bba722cd" Oct 2 20:48:02.912382 env[1352]: time="2023-10-02T20:48:02.912340230Z" level=info msg="CreateContainer within sandbox \"95eb1a1021011f7a516cf3662dd9c199801874a730c43815549b6abcd0f61809\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:48:02.937523 env[1352]: time="2023-10-02T20:48:02.937468302Z" level=info msg="CreateContainer within sandbox \"95eb1a1021011f7a516cf3662dd9c199801874a730c43815549b6abcd0f61809\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"92b96da1ffb1e1f2f548635315eaacf014c1cdb4f9a65f81fef34b9d240eef0a\"" Oct 2 20:48:02.938086 env[1352]: time="2023-10-02T20:48:02.938047215Z" level=info msg="StartContainer for \"92b96da1ffb1e1f2f548635315eaacf014c1cdb4f9a65f81fef34b9d240eef0a\"" Oct 2 20:48:02.961079 systemd[1]: Started cri-containerd-92b96da1ffb1e1f2f548635315eaacf014c1cdb4f9a65f81fef34b9d240eef0a.scope. Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.987000 audit: BPF prog-id=133 op=LOAD Oct 2 20:48:02.987000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.987000 audit[3802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2207 pid=3802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:02.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932623936646131666662316531663266353438363335333135656161 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2207 pid=3802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:02.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932623936646131666662316531663266353438363335333135656161 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.988000 audit: BPF prog-id=134 op=LOAD Oct 2 20:48:02.988000 audit[3802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2207 pid=3802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:02.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932623936646131666662316531663266353438363335333135656161 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.989000 audit: BPF prog-id=135 op=LOAD Oct 2 20:48:02.989000 audit[3802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2207 pid=3802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:02.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932623936646131666662316531663266353438363335333135656161 Oct 2 20:48:02.989000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:48:02.990000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { perfmon } for pid=3802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit[3802]: AVC avc: denied { bpf } for pid=3802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:02.990000 audit: BPF prog-id=136 op=LOAD Oct 2 20:48:02.990000 audit[3802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2207 pid=3802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:02.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932623936646131666662316531663266353438363335333135656161 Oct 2 20:48:03.023180 env[1352]: time="2023-10-02T20:48:03.023133187Z" level=info msg="StartContainer for \"92b96da1ffb1e1f2f548635315eaacf014c1cdb4f9a65f81fef34b9d240eef0a\" returns successfully" Oct 2 20:48:03.038519 kubelet[2477]: E1002 20:48:03.038326 2477 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.4:58358->10.200.20.24:2379: read: connection timed out" Oct 2 20:48:03.774317 kubelet[2477]: W1002 20:48:03.774286 2477 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:48:03.938833 kubelet[2477]: E1002 20:48:03.938799 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:04.552000 audit[3813]: AVC avc: denied { watch } for pid=3813 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:04.552000 audit[3813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400095a540 a2=fc6 a3=0 items=0 ppid=2207 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:48:04.552000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:04.552000 audit[3813]: AVC avc: denied { watch } for pid=3813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:48:04.552000 audit[3813]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400034e5a0 a2=fc6 a3=0 items=0 ppid=2207 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c642 key=(null) Oct 2 20:48:04.552000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:48:06.813873 kubelet[2477]: E1002 20:48:06.813749 2477 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-1cb893e9b8.178a6560dbdcfba2", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-1cb893e9b8", UID:"855d020c71951f52be0aecac3b3ee124", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-1cb893e9b8"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 47, 56, 338371490, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 47, 56, 338371490, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-1cb893e9b8"}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.4:58190->10.200.20.24:2379: read: connection timed out' (will not retry!) Oct 2 20:48:08.654992 systemd[1]: cri-containerd-63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7.scope: Deactivated successfully. Oct 2 20:48:08.655306 systemd[1]: cri-containerd-63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7.scope: Consumed 2.922s CPU time. Oct 2 20:48:08.665989 kernel: kauditd_printk_skb: 79 callbacks suppressed Oct 2 20:48:08.666127 kernel: audit: type=1334 audit(1696279688.658:1461): prog-id=88 op=UNLOAD Oct 2 20:48:08.658000 audit: BPF prog-id=88 op=UNLOAD Oct 2 20:48:08.658000 audit: BPF prog-id=95 op=UNLOAD Oct 2 20:48:08.677727 kernel: audit: type=1334 audit(1696279688.658:1462): prog-id=95 op=UNLOAD Oct 2 20:48:08.692158 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7-rootfs.mount: Deactivated successfully. Oct 2 20:48:08.719385 env[1352]: time="2023-10-02T20:48:08.719339863Z" level=info msg="shim disconnected" id=63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7 Oct 2 20:48:08.719844 env[1352]: time="2023-10-02T20:48:08.719822177Z" level=warning msg="cleaning up after shim disconnected" id=63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7 namespace=k8s.io Oct 2 20:48:08.719915 env[1352]: time="2023-10-02T20:48:08.719902176Z" level=info msg="cleaning up dead shim" Oct 2 20:48:08.733484 env[1352]: time="2023-10-02T20:48:08.733440848Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:48:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3843 runtime=io.containerd.runc.v2\n" Oct 2 20:48:08.923787 kubelet[2477]: I1002 20:48:08.923329 2477 scope.go:117] "RemoveContainer" containerID="63a1590580846c8c5999fd59c3ce03c88049d3f5b1f699087b1ed3e32d76feb7" Oct 2 20:48:08.925345 env[1352]: time="2023-10-02T20:48:08.925304868Z" level=info msg="CreateContainer within sandbox \"3fe88c0b650ff31afcd3a4cfc0efaa6dad8647505648d096f3a9de616eb0dac3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:48:08.939791 kubelet[2477]: E1002 20:48:08.939760 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:08.943188 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4118480168.mount: Deactivated successfully. Oct 2 20:48:08.947769 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount738671131.mount: Deactivated successfully. Oct 2 20:48:08.956376 env[1352]: time="2023-10-02T20:48:08.956334963Z" level=info msg="CreateContainer within sandbox \"3fe88c0b650ff31afcd3a4cfc0efaa6dad8647505648d096f3a9de616eb0dac3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"e028025c9f101fb327afc2516590e356bac0a07ae5df6d18e8f0f6b8b9587feb\"" Oct 2 20:48:08.957021 env[1352]: time="2023-10-02T20:48:08.956983715Z" level=info msg="StartContainer for \"e028025c9f101fb327afc2516590e356bac0a07ae5df6d18e8f0f6b8b9587feb\"" Oct 2 20:48:08.977532 systemd[1]: Started cri-containerd-e028025c9f101fb327afc2516590e356bac0a07ae5df6d18e8f0f6b8b9587feb.scope. Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031647 kernel: audit: type=1400 audit(1696279688.995:1463): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031755 kernel: audit: type=1400 audit(1696279688.995:1464): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.049263 kernel: audit: type=1400 audit(1696279688.995:1465): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.049353 kernel: audit: type=1400 audit(1696279688.995:1466): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.086263 kernel: audit: type=1400 audit(1696279688.995:1467): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.108763 kernel: audit: type=1400 audit(1696279688.995:1468): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.126559 kernel: audit: type=1400 audit(1696279688.995:1469): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.126644 kernel: audit: type=1400 audit(1696279688.995:1470): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:08.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit: BPF prog-id=137 op=LOAD Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2250 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:09.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530323830323563396631303166623332376166633235313635393065 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2250 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:09.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530323830323563396631303166623332376166633235313635393065 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.013000 audit: BPF prog-id=138 op=LOAD Oct 2 20:48:09.013000 audit[3863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2250 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:09.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530323830323563396631303166623332376166633235313635393065 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit: BPF prog-id=139 op=LOAD Oct 2 20:48:09.031000 audit[3863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2250 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:09.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530323830323563396631303166623332376166633235313635393065 Oct 2 20:48:09.031000 audit: BPF prog-id=139 op=UNLOAD Oct 2 20:48:09.031000 audit: BPF prog-id=138 op=UNLOAD Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:48:09.031000 audit: BPF prog-id=140 op=LOAD Oct 2 20:48:09.031000 audit[3863]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2250 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:48:09.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530323830323563396631303166623332376166633235313635393065 Oct 2 20:48:09.162409 env[1352]: time="2023-10-02T20:48:09.162366384Z" level=info msg="StartContainer for \"e028025c9f101fb327afc2516590e356bac0a07ae5df6d18e8f0f6b8b9587feb\" returns successfully" Oct 2 20:48:12.830086 kubelet[2477]: I1002 20:48:12.830049 2477 status_manager.go:853] "Failed to get status for pod" podUID="855d020c71951f52be0aecac3b3ee124" pod="kube-system/kube-apiserver-ci-3510.3.0-a-1cb893e9b8" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.4:58290->10.200.20.24:2379: read: connection timed out" Oct 2 20:48:13.039287 kubelet[2477]: E1002 20:48:13.039262 2477 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-1cb893e9b8?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 20:48:13.940678 kubelet[2477]: E1002 20:48:13.940643 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:18.941654 kubelet[2477]: E1002 20:48:18.941624 2477 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:48:23.041128 kubelet[2477]: E1002 20:48:23.040960 2477 request.go:1116] Unexpected error when reading response body: net/http: request canceled (Client.Timeout or context cancellation while reading body) Oct 2 20:48:23.041128 kubelet[2477]: E1002 20:48:23.041109 2477 controller.go:193] "Failed to update lease" err="unexpected error when reading response body. Please retry. Original error: net/http: request canceled (Client.Timeout or context cancellation while reading body)"