Oct 2 21:20:59.083557 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 21:20:59.083585 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 21:20:59.083594 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 21:20:59.083601 kernel: printk: bootconsole [pl11] enabled Oct 2 21:20:59.083606 kernel: efi: EFI v2.70 by EDK II Oct 2 21:20:59.083611 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef3d098 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 21:20:59.083618 kernel: random: crng init done Oct 2 21:20:59.083623 kernel: ACPI: Early table checksum verification disabled Oct 2 21:20:59.083629 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 21:20:59.083634 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083639 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083646 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 21:20:59.083651 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083657 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083664 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083670 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083675 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083682 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083688 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 21:20:59.083694 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:20:59.083699 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 21:20:59.083705 kernel: NUMA: Failed to initialise from firmware Oct 2 21:20:59.083711 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:20:59.083716 kernel: NUMA: NODE_DATA [mem 0x1bf7f2900-0x1bf7f7fff] Oct 2 21:20:59.083722 kernel: Zone ranges: Oct 2 21:20:59.083728 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 21:20:59.083733 kernel: DMA32 empty Oct 2 21:20:59.083740 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:20:59.083745 kernel: Movable zone start for each node Oct 2 21:20:59.083751 kernel: Early memory node ranges Oct 2 21:20:59.083756 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 21:20:59.083762 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 21:20:59.083768 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 21:20:59.083773 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 21:20:59.083779 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 21:20:59.083784 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 21:20:59.083790 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 21:20:59.083795 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 21:20:59.083801 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:20:59.083808 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:20:59.083816 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 21:20:59.083822 kernel: psci: probing for conduit method from ACPI. Oct 2 21:20:59.083828 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 21:20:59.083834 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 21:20:59.083841 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 21:20:59.083847 kernel: psci: SMC Calling Convention v1.4 Oct 2 21:20:59.083853 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 21:20:59.083859 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 21:20:59.083865 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 21:20:59.083871 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 21:20:59.083877 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 21:20:59.083883 kernel: Detected PIPT I-cache on CPU0 Oct 2 21:20:59.083889 kernel: CPU features: detected: GIC system register CPU interface Oct 2 21:20:59.083895 kernel: CPU features: detected: Hardware dirty bit management Oct 2 21:20:59.083901 kernel: CPU features: detected: Spectre-BHB Oct 2 21:20:59.083907 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 21:20:59.083914 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 21:20:59.083920 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 21:20:59.083926 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 21:20:59.083932 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 21:20:59.083938 kernel: Policy zone: Normal Oct 2 21:20:59.083945 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:20:59.083952 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 21:20:59.083958 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 21:20:59.083964 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 21:20:59.083970 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 21:20:59.083977 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 21:20:59.083984 kernel: Memory: 3992064K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202096K reserved, 0K cma-reserved) Oct 2 21:20:59.083990 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 21:20:59.083996 kernel: trace event string verifier disabled Oct 2 21:20:59.084002 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 21:20:59.084008 kernel: rcu: RCU event tracing is enabled. Oct 2 21:20:59.084014 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 21:20:59.084020 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 21:20:59.084027 kernel: Tracing variant of Tasks RCU enabled. Oct 2 21:20:59.084033 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 21:20:59.084039 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 21:20:59.084046 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 21:20:59.084052 kernel: GICv3: 960 SPIs implemented Oct 2 21:20:59.084058 kernel: GICv3: 0 Extended SPIs implemented Oct 2 21:20:59.084065 kernel: GICv3: Distributor has no Range Selector support Oct 2 21:20:59.084070 kernel: Root IRQ handler: gic_handle_irq Oct 2 21:20:59.084076 kernel: GICv3: 16 PPIs implemented Oct 2 21:20:59.084082 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 21:20:59.084088 kernel: ITS: No ITS available, not enabling LPIs Oct 2 21:20:59.084095 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:20:59.084101 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 21:20:59.084107 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 21:20:59.084113 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 21:20:59.084120 kernel: Console: colour dummy device 80x25 Oct 2 21:20:59.084127 kernel: printk: console [tty1] enabled Oct 2 21:20:59.084133 kernel: ACPI: Core revision 20210730 Oct 2 21:20:59.084139 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 21:20:59.084146 kernel: pid_max: default: 32768 minimum: 301 Oct 2 21:20:59.084152 kernel: LSM: Security Framework initializing Oct 2 21:20:59.084158 kernel: SELinux: Initializing. Oct 2 21:20:59.084165 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:20:59.084171 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:20:59.084179 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 21:20:59.084185 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 21:20:59.084191 kernel: rcu: Hierarchical SRCU implementation. Oct 2 21:20:59.084198 kernel: Remapping and enabling EFI services. Oct 2 21:20:59.084204 kernel: smp: Bringing up secondary CPUs ... Oct 2 21:20:59.084210 kernel: Detected PIPT I-cache on CPU1 Oct 2 21:20:59.084217 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 21:20:59.084223 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:20:59.084229 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 21:20:59.084236 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 21:20:59.084242 kernel: SMP: Total of 2 processors activated. Oct 2 21:20:59.084249 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 21:20:59.084255 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 21:20:59.084262 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 21:20:59.084268 kernel: CPU features: detected: CRC32 instructions Oct 2 21:20:59.084275 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 21:20:59.084281 kernel: CPU features: detected: LSE atomic instructions Oct 2 21:20:59.084287 kernel: CPU features: detected: Privileged Access Never Oct 2 21:20:59.084295 kernel: CPU: All CPU(s) started at EL1 Oct 2 21:20:59.084301 kernel: alternatives: patching kernel code Oct 2 21:20:59.084312 kernel: devtmpfs: initialized Oct 2 21:20:59.084320 kernel: KASLR enabled Oct 2 21:20:59.084327 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 21:20:59.084334 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 21:20:59.084340 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 21:20:59.084347 kernel: SMBIOS 3.1.0 present. Oct 2 21:20:59.084353 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 21:20:59.084361 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 21:20:59.084368 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 21:20:59.084375 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 21:20:59.084382 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 21:20:59.084388 kernel: audit: initializing netlink subsys (disabled) Oct 2 21:20:59.084395 kernel: audit: type=2000 audit(0.088:1): state=initialized audit_enabled=0 res=1 Oct 2 21:20:59.084401 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 21:20:59.084408 kernel: cpuidle: using governor menu Oct 2 21:20:59.084416 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 21:20:59.084422 kernel: ASID allocator initialised with 32768 entries Oct 2 21:20:59.084429 kernel: ACPI: bus type PCI registered Oct 2 21:20:59.084435 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 21:20:59.084442 kernel: Serial: AMBA PL011 UART driver Oct 2 21:20:59.084449 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 21:20:59.084455 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 21:20:59.084462 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 21:20:59.084469 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 21:20:59.084476 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 21:20:59.084483 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 21:20:59.084489 kernel: ACPI: Added _OSI(Module Device) Oct 2 21:20:59.084496 kernel: ACPI: Added _OSI(Processor Device) Oct 2 21:20:59.084503 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 21:20:59.084509 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 21:20:59.084516 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 21:20:59.084522 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 21:20:59.084529 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 21:20:59.084537 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 21:20:59.084543 kernel: ACPI: Interpreter enabled Oct 2 21:20:59.084550 kernel: ACPI: Using GIC for interrupt routing Oct 2 21:20:59.084557 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 21:20:59.084569 kernel: printk: console [ttyAMA0] enabled Oct 2 21:20:59.084576 kernel: printk: bootconsole [pl11] disabled Oct 2 21:20:59.084582 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 21:20:59.084589 kernel: iommu: Default domain type: Translated Oct 2 21:20:59.084595 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 21:20:59.084603 kernel: vgaarb: loaded Oct 2 21:20:59.084610 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 21:20:59.084616 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 21:20:59.084623 kernel: PTP clock support registered Oct 2 21:20:59.084629 kernel: Registered efivars operations Oct 2 21:20:59.084636 kernel: No ACPI PMU IRQ for CPU0 Oct 2 21:20:59.084643 kernel: No ACPI PMU IRQ for CPU1 Oct 2 21:20:59.084649 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 21:20:59.084655 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 21:20:59.084663 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 21:20:59.084670 kernel: pnp: PnP ACPI init Oct 2 21:20:59.084677 kernel: pnp: PnP ACPI: found 0 devices Oct 2 21:20:59.084683 kernel: NET: Registered PF_INET protocol family Oct 2 21:20:59.084690 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 21:20:59.084696 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 21:20:59.084703 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 21:20:59.084710 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 21:20:59.084717 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 21:20:59.084725 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 21:20:59.084731 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:20:59.084738 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:20:59.084745 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 21:20:59.084751 kernel: PCI: CLS 0 bytes, default 64 Oct 2 21:20:59.084758 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 21:20:59.084765 kernel: kvm [1]: HYP mode not available Oct 2 21:20:59.084771 kernel: Initialise system trusted keyrings Oct 2 21:20:59.084778 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 21:20:59.084785 kernel: Key type asymmetric registered Oct 2 21:20:59.084792 kernel: Asymmetric key parser 'x509' registered Oct 2 21:20:59.084799 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 21:20:59.084805 kernel: io scheduler mq-deadline registered Oct 2 21:20:59.084812 kernel: io scheduler kyber registered Oct 2 21:20:59.084818 kernel: io scheduler bfq registered Oct 2 21:20:59.084825 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 21:20:59.084831 kernel: thunder_xcv, ver 1.0 Oct 2 21:20:59.084838 kernel: thunder_bgx, ver 1.0 Oct 2 21:20:59.084845 kernel: nicpf, ver 1.0 Oct 2 21:20:59.084852 kernel: nicvf, ver 1.0 Oct 2 21:20:59.085021 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 21:20:59.085083 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T21:20:58 UTC (1696281658) Oct 2 21:20:59.085092 kernel: efifb: probing for efifb Oct 2 21:20:59.085099 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 21:20:59.085106 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 21:20:59.085113 kernel: efifb: scrolling: redraw Oct 2 21:20:59.085121 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 21:20:59.085128 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:20:59.085134 kernel: fb0: EFI VGA frame buffer device Oct 2 21:20:59.085141 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 21:20:59.085148 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 21:20:59.085155 kernel: NET: Registered PF_INET6 protocol family Oct 2 21:20:59.085162 kernel: Segment Routing with IPv6 Oct 2 21:20:59.085169 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 21:20:59.085176 kernel: NET: Registered PF_PACKET protocol family Oct 2 21:20:59.085184 kernel: Key type dns_resolver registered Oct 2 21:20:59.085191 kernel: registered taskstats version 1 Oct 2 21:20:59.085197 kernel: Loading compiled-in X.509 certificates Oct 2 21:20:59.085204 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 21:20:59.085211 kernel: Key type .fscrypt registered Oct 2 21:20:59.085217 kernel: Key type fscrypt-provisioning registered Oct 2 21:20:59.085224 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 21:20:59.085231 kernel: ima: Allocated hash algorithm: sha1 Oct 2 21:20:59.085237 kernel: ima: No architecture policies found Oct 2 21:20:59.085245 kernel: Freeing unused kernel memory: 34560K Oct 2 21:20:59.085252 kernel: Run /init as init process Oct 2 21:20:59.085259 kernel: with arguments: Oct 2 21:20:59.085265 kernel: /init Oct 2 21:20:59.085271 kernel: with environment: Oct 2 21:20:59.085278 kernel: HOME=/ Oct 2 21:20:59.085284 kernel: TERM=linux Oct 2 21:20:59.085290 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 21:20:59.085299 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:20:59.085309 systemd[1]: Detected virtualization microsoft. Oct 2 21:20:59.085317 systemd[1]: Detected architecture arm64. Oct 2 21:20:59.085324 systemd[1]: Running in initrd. Oct 2 21:20:59.085332 systemd[1]: No hostname configured, using default hostname. Oct 2 21:20:59.085339 systemd[1]: Hostname set to . Oct 2 21:20:59.085346 systemd[1]: Initializing machine ID from random generator. Oct 2 21:20:59.085353 systemd[1]: Queued start job for default target initrd.target. Oct 2 21:20:59.085362 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:20:59.085369 systemd[1]: Reached target cryptsetup.target. Oct 2 21:20:59.085376 systemd[1]: Reached target paths.target. Oct 2 21:20:59.085383 systemd[1]: Reached target slices.target. Oct 2 21:20:59.085390 systemd[1]: Reached target swap.target. Oct 2 21:20:59.085397 systemd[1]: Reached target timers.target. Oct 2 21:20:59.085404 systemd[1]: Listening on iscsid.socket. Oct 2 21:20:59.085411 systemd[1]: Listening on iscsiuio.socket. Oct 2 21:20:59.085420 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 21:20:59.085427 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 21:20:59.085434 systemd[1]: Listening on systemd-journald.socket. Oct 2 21:20:59.085441 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:20:59.085448 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:20:59.085456 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:20:59.085463 systemd[1]: Reached target sockets.target. Oct 2 21:20:59.085470 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:20:59.085477 systemd[1]: Finished network-cleanup.service. Oct 2 21:20:59.085485 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 21:20:59.085492 systemd[1]: Starting systemd-journald.service... Oct 2 21:20:59.085499 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:20:59.085506 systemd[1]: Starting systemd-resolved.service... Oct 2 21:20:59.085513 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 21:20:59.085524 systemd-journald[276]: Journal started Oct 2 21:20:59.085559 systemd-journald[276]: Runtime Journal (/run/log/journal/0b82c00c4cf34db0900166432ce33402) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:20:59.076050 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 21:20:59.107788 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 21:20:59.121948 systemd[1]: Started systemd-journald.service. Oct 2 21:20:59.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.132716 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 21:20:59.148824 kernel: Bridge firewalling registered Oct 2 21:20:59.148848 kernel: audit: type=1130 audit(1696281659.121:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.143967 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:20:59.153262 systemd-resolved[278]: Positive Trust Anchors: Oct 2 21:20:59.198991 kernel: audit: type=1130 audit(1696281659.157:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.199014 kernel: SCSI subsystem initialized Oct 2 21:20:59.199023 kernel: audit: type=1130 audit(1696281659.182:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.153270 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:20:59.282608 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 21:20:59.282630 kernel: device-mapper: uevent: version 1.0.3 Oct 2 21:20:59.282639 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 21:20:59.282647 kernel: audit: type=1130 audit(1696281659.193:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.282657 kernel: audit: type=1130 audit(1696281659.225:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.153302 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:20:59.156547 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 21:20:59.157752 systemd[1]: Started systemd-resolved.service. Oct 2 21:20:59.182944 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 21:20:59.194188 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 21:20:59.225733 systemd[1]: Reached target nss-lookup.target. Oct 2 21:20:59.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.283703 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 21:20:59.379858 kernel: audit: type=1130 audit(1696281659.352:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.312772 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 21:20:59.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.325833 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 21:20:59.445680 kernel: audit: type=1130 audit(1696281659.379:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.445704 kernel: audit: type=1130 audit(1696281659.384:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.344181 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:20:59.353284 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 21:20:59.456302 dracut-cmdline[296]: dracut-dracut-053 Oct 2 21:20:59.456302 dracut-cmdline[296]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=t Oct 2 21:20:59.456302 dracut-cmdline[296]: tyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:20:59.514664 kernel: audit: type=1130 audit(1696281659.461:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.379873 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 21:20:59.404520 systemd[1]: Starting dracut-cmdline.service... Oct 2 21:20:59.430624 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:20:59.448701 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:20:59.604597 kernel: Loading iSCSI transport class v2.0-870. Oct 2 21:20:59.614588 kernel: iscsi: registered transport (tcp) Oct 2 21:20:59.634252 kernel: iscsi: registered transport (qla4xxx) Oct 2 21:20:59.634270 kernel: QLogic iSCSI HBA Driver Oct 2 21:20:59.713294 systemd[1]: Finished dracut-cmdline.service. Oct 2 21:20:59.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:20:59.718746 systemd[1]: Starting dracut-pre-udev.service... Oct 2 21:20:59.781584 kernel: raid6: neonx8 gen() 13820 MB/s Oct 2 21:20:59.801576 kernel: raid6: neonx8 xor() 10837 MB/s Oct 2 21:20:59.821574 kernel: raid6: neonx4 gen() 13508 MB/s Oct 2 21:20:59.842575 kernel: raid6: neonx4 xor() 11310 MB/s Oct 2 21:20:59.862573 kernel: raid6: neonx2 gen() 13127 MB/s Oct 2 21:20:59.882577 kernel: raid6: neonx2 xor() 10260 MB/s Oct 2 21:20:59.903574 kernel: raid6: neonx1 gen() 10483 MB/s Oct 2 21:20:59.923576 kernel: raid6: neonx1 xor() 8783 MB/s Oct 2 21:20:59.944578 kernel: raid6: int64x8 gen() 6294 MB/s Oct 2 21:20:59.965574 kernel: raid6: int64x8 xor() 3545 MB/s Oct 2 21:20:59.985574 kernel: raid6: int64x4 gen() 7297 MB/s Oct 2 21:21:00.005573 kernel: raid6: int64x4 xor() 3854 MB/s Oct 2 21:21:00.026574 kernel: raid6: int64x2 gen() 6150 MB/s Oct 2 21:21:00.046573 kernel: raid6: int64x2 xor() 3321 MB/s Oct 2 21:21:00.066573 kernel: raid6: int64x1 gen() 5044 MB/s Oct 2 21:21:00.091646 kernel: raid6: int64x1 xor() 2646 MB/s Oct 2 21:21:00.091656 kernel: raid6: using algorithm neonx8 gen() 13820 MB/s Oct 2 21:21:00.091664 kernel: raid6: .... xor() 10837 MB/s, rmw enabled Oct 2 21:21:00.095785 kernel: raid6: using neon recovery algorithm Oct 2 21:21:00.117142 kernel: xor: measuring software checksum speed Oct 2 21:21:00.117156 kernel: 8regs : 17304 MB/sec Oct 2 21:21:00.121574 kernel: 32regs : 20749 MB/sec Oct 2 21:21:00.130018 kernel: arm64_neon : 27826 MB/sec Oct 2 21:21:00.130042 kernel: xor: using function: arm64_neon (27826 MB/sec) Oct 2 21:21:00.186582 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 21:21:00.205132 systemd[1]: Finished dracut-pre-udev.service. Oct 2 21:21:00.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:00.213000 audit: BPF prog-id=7 op=LOAD Oct 2 21:21:00.213000 audit: BPF prog-id=8 op=LOAD Oct 2 21:21:00.214357 systemd[1]: Starting systemd-udevd.service... Oct 2 21:21:00.232017 systemd-udevd[475]: Using default interface naming scheme 'v252'. Oct 2 21:21:00.237384 systemd[1]: Started systemd-udevd.service. Oct 2 21:21:00.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:00.249279 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 21:21:00.278941 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Oct 2 21:21:00.330435 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 21:21:00.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:00.336126 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:21:00.382988 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:21:00.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:00.448595 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 21:21:00.465591 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 21:21:00.465641 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 21:21:00.470581 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 21:21:00.470615 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Oct 2 21:21:00.486177 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 21:21:00.486228 kernel: scsi host0: storvsc_host_t Oct 2 21:21:00.486266 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 21:21:00.502790 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 21:21:00.502851 kernel: scsi host1: storvsc_host_t Oct 2 21:21:00.505572 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 21:21:00.523149 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Oct 2 21:21:00.542177 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 21:21:00.542373 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 21:21:00.543576 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 21:21:00.561393 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 21:21:00.561593 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 21:21:00.565680 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 21:21:00.572897 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 21:21:00.573059 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 21:21:00.583741 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:21:00.583784 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 21:21:00.633777 kernel: hv_netvsc 002248b8-5f75-0022-48b8-5f75002248b8 eth0: VF slot 1 added Oct 2 21:21:00.649214 kernel: hv_vmbus: registering driver hv_pci Oct 2 21:21:00.649263 kernel: hv_pci 9a466d4e-c942-48b7-a155-0efcce4a2016: PCI VMBus probing: Using version 0x10004 Oct 2 21:21:00.665388 kernel: hv_pci 9a466d4e-c942-48b7-a155-0efcce4a2016: PCI host bridge to bus c942:00 Oct 2 21:21:00.665551 kernel: pci_bus c942:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 21:21:00.671634 kernel: pci_bus c942:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 21:21:00.823117 kernel: pci c942:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 21:21:00.834186 kernel: pci c942:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:21:00.855105 kernel: pci c942:00:02.0: enabling Extended Tags Oct 2 21:21:00.872712 kernel: pci c942:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at c942:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 21:21:00.885801 kernel: pci_bus c942:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 21:21:00.885978 kernel: pci c942:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:21:00.926591 kernel: mlx5_core c942:00:02.0: firmware version: 16.31.2424 Oct 2 21:21:01.023219 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 21:21:01.067586 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (536) Oct 2 21:21:01.093109 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:21:01.109910 kernel: mlx5_core c942:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 21:21:01.225590 kernel: hv_netvsc 002248b8-5f75-0022-48b8-5f75002248b8 eth0: VF registering: eth1 Oct 2 21:21:01.230580 kernel: mlx5_core c942:00:02.0 eth1: joined to eth0 Oct 2 21:21:01.243582 kernel: mlx5_core c942:00:02.0 enP51522s1: renamed from eth1 Oct 2 21:21:01.257431 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 21:21:01.266304 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 21:21:01.281341 systemd[1]: Starting disk-uuid.service... Oct 2 21:21:01.317213 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 21:21:02.317379 disk-uuid[598]: The operation has completed successfully. Oct 2 21:21:02.322507 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:21:02.390612 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 21:21:02.394709 systemd[1]: Finished disk-uuid.service. Oct 2 21:21:02.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:02.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:02.405133 systemd[1]: Starting verity-setup.service... Oct 2 21:21:02.449848 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 21:21:02.642889 systemd[1]: Found device dev-mapper-usr.device. Oct 2 21:21:02.649024 systemd[1]: Mounting sysusr-usr.mount... Oct 2 21:21:02.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:02.658123 systemd[1]: Finished verity-setup.service. Oct 2 21:21:02.719595 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 21:21:02.720240 systemd[1]: Mounted sysusr-usr.mount. Oct 2 21:21:02.724444 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 21:21:02.725357 systemd[1]: Starting ignition-setup.service... Oct 2 21:21:02.736644 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 21:21:02.768920 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:21:02.768971 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:21:02.773732 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:21:02.853128 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 21:21:02.910328 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 21:21:02.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:02.918000 audit: BPF prog-id=9 op=LOAD Oct 2 21:21:02.920143 systemd[1]: Starting systemd-networkd.service... Oct 2 21:21:02.949344 systemd-networkd[875]: lo: Link UP Oct 2 21:21:02.949356 systemd-networkd[875]: lo: Gained carrier Oct 2 21:21:02.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:02.949782 systemd-networkd[875]: Enumeration completed Oct 2 21:21:02.953099 systemd[1]: Started systemd-networkd.service. Oct 2 21:21:02.957976 systemd[1]: Reached target network.target. Oct 2 21:21:02.961638 systemd-networkd[875]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:21:02.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:02.972092 systemd[1]: Starting iscsiuio.service... Oct 2 21:21:03.040065 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:21:03.040089 kernel: audit: type=1130 audit(1696281662.990:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:02.983094 systemd[1]: Started iscsiuio.service. Oct 2 21:21:03.060660 kernel: audit: type=1130 audit(1696281663.039:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:03.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:02.997722 systemd[1]: Starting iscsid.service... Oct 2 21:21:03.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:03.086428 iscsid[880]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:21:03.086428 iscsid[880]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 21:21:03.086428 iscsid[880]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 21:21:03.086428 iscsid[880]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 21:21:03.086428 iscsid[880]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 21:21:03.086428 iscsid[880]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:21:03.086428 iscsid[880]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 21:21:03.214063 kernel: audit: type=1130 audit(1696281663.064:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:03.214095 kernel: mlx5_core c942:00:02.0 enP51522s1: Link up Oct 2 21:21:03.214249 kernel: audit: type=1130 audit(1696281663.149:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:03.214260 kernel: hv_netvsc 002248b8-5f75-0022-48b8-5f75002248b8 eth0: Data path switched to VF: enP51522s1 Oct 2 21:21:03.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:03.036105 systemd[1]: Started iscsid.service. Oct 2 21:21:03.056058 systemd[1]: Finished ignition-setup.service. Oct 2 21:21:03.237323 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 21:21:03.065399 systemd[1]: Starting dracut-initqueue.service... Oct 2 21:21:03.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:03.098155 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 21:21:03.145109 systemd[1]: Finished dracut-initqueue.service. Oct 2 21:21:03.150090 systemd[1]: Reached target remote-fs-pre.target. Oct 2 21:21:03.280911 kernel: audit: type=1130 audit(1696281663.242:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:03.176168 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:21:03.187260 systemd[1]: Reached target remote-fs.target. Oct 2 21:21:03.200917 systemd[1]: Starting dracut-pre-mount.service... Oct 2 21:21:03.231261 systemd-networkd[875]: enP51522s1: Link UP Oct 2 21:21:03.231440 systemd-networkd[875]: eth0: Link UP Oct 2 21:21:03.231854 systemd-networkd[875]: eth0: Gained carrier Oct 2 21:21:03.238342 systemd[1]: Finished dracut-pre-mount.service. Oct 2 21:21:03.239042 systemd-networkd[875]: enP51522s1: Gained carrier Oct 2 21:21:03.272693 systemd-networkd[875]: eth0: DHCPv4 address 10.200.20.16/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:21:04.509847 systemd-networkd[875]: eth0: Gained IPv6LL Oct 2 21:21:06.329811 ignition[885]: Ignition 2.14.0 Oct 2 21:21:06.329823 ignition[885]: Stage: fetch-offline Oct 2 21:21:06.329881 ignition[885]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:06.329903 ignition[885]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:06.422443 ignition[885]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:06.422624 ignition[885]: parsed url from cmdline: "" Oct 2 21:21:06.422628 ignition[885]: no config URL provided Oct 2 21:21:06.422633 ignition[885]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:21:06.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.436083 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 21:21:06.422641 ignition[885]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:21:06.488006 kernel: audit: type=1130 audit(1696281666.446:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.447821 systemd[1]: Starting ignition-fetch.service... Oct 2 21:21:06.422646 ignition[885]: failed to fetch config: resource requires networking Oct 2 21:21:06.422748 ignition[885]: Ignition finished successfully Oct 2 21:21:06.479157 ignition[901]: Ignition 2.14.0 Oct 2 21:21:06.479163 ignition[901]: Stage: fetch Oct 2 21:21:06.479271 ignition[901]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:06.479291 ignition[901]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:06.500085 ignition[901]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:06.500238 ignition[901]: parsed url from cmdline: "" Oct 2 21:21:06.500242 ignition[901]: no config URL provided Oct 2 21:21:06.500247 ignition[901]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:21:06.500256 ignition[901]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:21:06.500287 ignition[901]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 21:21:06.517427 ignition[901]: GET result: OK Oct 2 21:21:06.517460 ignition[901]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 21:21:06.566113 ignition[901]: opening config device: "/dev/sr0" Oct 2 21:21:06.566470 ignition[901]: getting drive status for "/dev/sr0" Oct 2 21:21:06.566523 ignition[901]: drive status: OK Oct 2 21:21:06.566653 ignition[901]: mounting config device Oct 2 21:21:06.566681 ignition[901]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure4085676935" Oct 2 21:21:06.592598 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 21:21:06.593365 ignition[901]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure4085676935" Oct 2 21:21:06.593380 ignition[901]: checking for config drive Oct 2 21:21:06.594426 systemd[1]: tmp-ignition\x2dazure4085676935.mount: Deactivated successfully. Oct 2 21:21:06.593781 ignition[901]: reading config Oct 2 21:21:06.594139 ignition[901]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure4085676935" Oct 2 21:21:06.599962 ignition[901]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure4085676935" Oct 2 21:21:06.599978 ignition[901]: config has been read from custom data Oct 2 21:21:06.600091 ignition[901]: parsing config with SHA512: a6278c8f2abd785b113b6cbce95f3809e31572e7e61b679801f464e4835e137008581d709caeef461b7aac7ae4846efb8de14067d8b88eb5e4bc8eeedcb34391 Oct 2 21:21:06.635806 unknown[901]: fetched base config from "system" Oct 2 21:21:06.635818 unknown[901]: fetched base config from "system" Oct 2 21:21:06.636390 ignition[901]: fetch: fetch complete Oct 2 21:21:06.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.635823 unknown[901]: fetched user config from "azure" Oct 2 21:21:06.682472 kernel: audit: type=1130 audit(1696281666.651:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.636395 ignition[901]: fetch: fetch passed Oct 2 21:21:06.646088 systemd[1]: Finished ignition-fetch.service. Oct 2 21:21:06.636448 ignition[901]: Ignition finished successfully Oct 2 21:21:06.674286 systemd[1]: Starting ignition-kargs.service... Oct 2 21:21:06.692353 ignition[909]: Ignition 2.14.0 Oct 2 21:21:06.692360 ignition[909]: Stage: kargs Oct 2 21:21:06.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.705722 systemd[1]: Finished ignition-kargs.service. Oct 2 21:21:06.731507 kernel: audit: type=1130 audit(1696281666.709:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.692472 ignition[909]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:06.692532 ignition[909]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:06.696014 ignition[909]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:06.702092 ignition[909]: kargs: kargs passed Oct 2 21:21:06.702185 ignition[909]: Ignition finished successfully Oct 2 21:21:06.748805 systemd[1]: Starting ignition-disks.service... Oct 2 21:21:06.770057 ignition[915]: Ignition 2.14.0 Oct 2 21:21:06.770068 ignition[915]: Stage: disks Oct 2 21:21:06.770192 ignition[915]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:06.779045 systemd[1]: Finished ignition-disks.service. Oct 2 21:21:06.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.770214 ignition[915]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:06.775627 ignition[915]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:06.824967 kernel: audit: type=1130 audit(1696281666.789:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.776913 ignition[915]: disks: disks passed Oct 2 21:21:06.808742 systemd[1]: Reached target initrd-root-device.target. Oct 2 21:21:06.776960 ignition[915]: Ignition finished successfully Oct 2 21:21:06.814803 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:21:06.821626 systemd[1]: Reached target local-fs.target. Oct 2 21:21:06.829022 systemd[1]: Reached target sysinit.target. Oct 2 21:21:06.836320 systemd[1]: Reached target basic.target. Oct 2 21:21:06.847790 systemd[1]: Starting systemd-fsck-root.service... Oct 2 21:21:06.923002 systemd-fsck[923]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 21:21:06.932355 systemd[1]: Finished systemd-fsck-root.service. Oct 2 21:21:06.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.964505 systemd[1]: Mounting sysroot.mount... Oct 2 21:21:06.977341 kernel: audit: type=1130 audit(1696281666.936:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:06.990454 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 21:21:06.990189 systemd[1]: Mounted sysroot.mount. Oct 2 21:21:06.994514 systemd[1]: Reached target initrd-root-fs.target. Oct 2 21:21:07.032341 systemd[1]: Mounting sysroot-usr.mount... Oct 2 21:21:07.037371 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 21:21:07.042759 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 21:21:07.042805 systemd[1]: Reached target ignition-diskful.target. Oct 2 21:21:07.051255 systemd[1]: Mounted sysroot-usr.mount. Oct 2 21:21:07.122308 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:21:07.127756 systemd[1]: Starting initrd-setup-root.service... Oct 2 21:21:07.157769 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (933) Oct 2 21:21:07.171777 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:21:07.171824 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:21:07.171840 initrd-setup-root[938]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 21:21:07.183625 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:21:07.187426 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:21:07.231008 initrd-setup-root[964]: cut: /sysroot/etc/group: No such file or directory Oct 2 21:21:07.245831 initrd-setup-root[972]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 21:21:07.264087 initrd-setup-root[980]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 21:21:07.785014 systemd[1]: Finished initrd-setup-root.service. Oct 2 21:21:07.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:07.790293 systemd[1]: Starting ignition-mount.service... Oct 2 21:21:07.807982 systemd[1]: Starting sysroot-boot.service... Oct 2 21:21:07.822397 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 21:21:07.822523 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 21:21:07.846041 systemd[1]: Finished sysroot-boot.service. Oct 2 21:21:07.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:07.859154 ignition[1002]: INFO : Ignition 2.14.0 Oct 2 21:21:07.859154 ignition[1002]: INFO : Stage: mount Oct 2 21:21:07.868233 ignition[1002]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:07.868233 ignition[1002]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:07.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:07.892672 ignition[1002]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:07.892672 ignition[1002]: INFO : mount: mount passed Oct 2 21:21:07.892672 ignition[1002]: INFO : Ignition finished successfully Oct 2 21:21:07.874918 systemd[1]: Finished ignition-mount.service. Oct 2 21:21:08.827248 coreos-metadata[932]: Oct 02 21:21:08.827 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 21:21:08.837433 coreos-metadata[932]: Oct 02 21:21:08.837 INFO Fetch successful Oct 2 21:21:08.871337 coreos-metadata[932]: Oct 02 21:21:08.871 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 21:21:08.893177 coreos-metadata[932]: Oct 02 21:21:08.893 INFO Fetch successful Oct 2 21:21:08.899586 coreos-metadata[932]: Oct 02 21:21:08.898 INFO wrote hostname ci-3510.3.0-a-32a653638a to /sysroot/etc/hostname Oct 2 21:21:08.908442 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 21:21:08.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:08.939009 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 21:21:08.939079 kernel: audit: type=1130 audit(1696281668.913:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:08.922649 systemd[1]: Starting ignition-files.service... Oct 2 21:21:08.949704 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:21:08.980138 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (1011) Oct 2 21:21:08.980181 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:21:08.980191 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:21:08.989545 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:21:08.994754 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:21:09.013970 ignition[1030]: INFO : Ignition 2.14.0 Oct 2 21:21:09.019371 ignition[1030]: INFO : Stage: files Oct 2 21:21:09.019371 ignition[1030]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:09.019371 ignition[1030]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:09.042467 ignition[1030]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:09.049624 ignition[1030]: DEBUG : files: compiled without relabeling support, skipping Oct 2 21:21:09.095649 ignition[1030]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 21:21:09.095649 ignition[1030]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 21:21:09.160551 ignition[1030]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 21:21:09.169169 ignition[1030]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 21:21:09.183539 unknown[1030]: wrote ssh authorized keys file for user: core Oct 2 21:21:09.189259 ignition[1030]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 21:21:09.199525 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 21:21:09.210512 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 21:21:09.606113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 21:21:10.302059 ignition[1030]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 21:21:10.317595 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 21:21:10.317595 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 21:21:10.317595 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 21:21:10.534399 kernel: mlx5_core c942:00:02.0: poll_health:739:(pid 0): device's health compromised - reached miss count Oct 2 21:21:10.626209 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 21:21:10.916228 ignition[1030]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 21:21:10.932213 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 21:21:10.932213 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:21:10.932213 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 21:21:11.028074 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 21:21:12.019256 ignition[1030]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 21:21:12.036520 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:21:12.036520 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:21:12.036520 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 21:21:12.080749 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 21:21:12.854309 ignition[1030]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 21:21:12.870584 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:21:12.870584 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:21:12.870584 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 21:21:12.906684 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 21:21:13.726401 ignition[1030]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 21:21:13.742122 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:21:13.742122 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:21:13.742122 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:21:13.742122 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:21:13.742122 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 21:21:14.071802 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 21:21:14.401127 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:21:14.410733 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 21:21:14.410733 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 21:21:14.410733 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:21:14.447023 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1033) Oct 2 21:21:14.447043 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:21:14.447043 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:21:14.447043 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:21:14.447043 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1956091858" Oct 2 21:21:14.447043 ignition[1030]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1956091858": device or resource busy Oct 2 21:21:14.447043 ignition[1030]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1956091858", trying btrfs: device or resource busy Oct 2 21:21:14.447043 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1956091858" Oct 2 21:21:14.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1956091858" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem1956091858" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem1956091858" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1475377615" Oct 2 21:21:14.546863 ignition[1030]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1475377615": device or resource busy Oct 2 21:21:14.546863 ignition[1030]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1475377615", trying btrfs: device or resource busy Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1475377615" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1475377615" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem1475377615" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem1475377615" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 21:21:14.546863 ignition[1030]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 21:21:14.852405 kernel: audit: type=1130 audit(1696281674.521:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.852434 kernel: audit: type=1130 audit(1696281674.595:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.852445 kernel: audit: type=1131 audit(1696281674.595:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.852454 kernel: audit: type=1130 audit(1696281674.652:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.852470 kernel: audit: type=1130 audit(1696281674.725:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.852481 kernel: audit: type=1131 audit(1696281674.755:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.470215 systemd[1]: mnt-oem1956091858.mount: Deactivated successfully. Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(1b): [started] setting preset to enabled for "waagent.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(1b): [finished] setting preset to enabled for "waagent.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(1c): [started] setting preset to enabled for "nvidia.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(1c): [finished] setting preset to enabled for "nvidia.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:21:14.858544 ignition[1030]: INFO : files: files passed Oct 2 21:21:15.176789 kernel: audit: type=1130 audit(1696281674.868:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.176821 kernel: audit: type=1131 audit(1696281674.957:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.176831 kernel: audit: type=1131 audit(1696281675.140:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.506816 systemd[1]: mnt-oem1475377615.mount: Deactivated successfully. Oct 2 21:21:15.203603 kernel: audit: type=1131 audit(1696281675.180:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.203659 initrd-setup-root-after-ignition[1055]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 21:21:15.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.217319 ignition[1030]: INFO : Ignition finished successfully Oct 2 21:21:15.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.509304 systemd[1]: Finished ignition-files.service. Oct 2 21:21:15.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.523158 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 21:21:14.562863 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 21:21:15.264791 iscsid[880]: iscsid shutting down. Oct 2 21:21:14.563739 systemd[1]: Starting ignition-quench.service... Oct 2 21:21:15.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.590560 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 21:21:15.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.590732 systemd[1]: Finished ignition-quench.service. Oct 2 21:21:15.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.646971 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 21:21:15.314104 ignition[1068]: INFO : Ignition 2.14.0 Oct 2 21:21:15.314104 ignition[1068]: INFO : Stage: umount Oct 2 21:21:15.314104 ignition[1068]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:15.314104 ignition[1068]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:15.314104 ignition[1068]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:15.314104 ignition[1068]: INFO : umount: umount passed Oct 2 21:21:15.314104 ignition[1068]: INFO : Ignition finished successfully Oct 2 21:21:15.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.652703 systemd[1]: Reached target ignition-complete.target. Oct 2 21:21:15.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.684464 systemd[1]: Starting initrd-parse-etc.service... Oct 2 21:21:14.714032 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 21:21:14.714137 systemd[1]: Finished initrd-parse-etc.service. Oct 2 21:21:14.755923 systemd[1]: Reached target initrd-fs.target. Oct 2 21:21:14.786024 systemd[1]: Reached target initrd.target. Oct 2 21:21:14.800745 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 21:21:15.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.809400 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 21:21:14.858646 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 21:21:15.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.869691 systemd[1]: Starting initrd-cleanup.service... Oct 2 21:21:15.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.904633 systemd[1]: Stopped target nss-lookup.target. Oct 2 21:21:14.919517 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 21:21:14.935440 systemd[1]: Stopped target timers.target. Oct 2 21:21:15.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.946900 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 21:21:14.946969 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 21:21:14.958265 systemd[1]: Stopped target initrd.target. Oct 2 21:21:15.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:14.991275 systemd[1]: Stopped target basic.target. Oct 2 21:21:15.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.527000 audit: BPF prog-id=6 op=UNLOAD Oct 2 21:21:15.006595 systemd[1]: Stopped target ignition-complete.target. Oct 2 21:21:15.019504 systemd[1]: Stopped target ignition-diskful.target. Oct 2 21:21:15.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.035116 systemd[1]: Stopped target initrd-root-device.target. Oct 2 21:21:15.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.047680 systemd[1]: Stopped target remote-fs.target. Oct 2 21:21:15.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.059340 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 21:21:15.071979 systemd[1]: Stopped target sysinit.target. Oct 2 21:21:15.085374 systemd[1]: Stopped target local-fs.target. Oct 2 21:21:15.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.097106 systemd[1]: Stopped target local-fs-pre.target. Oct 2 21:21:15.111001 systemd[1]: Stopped target swap.target. Oct 2 21:21:15.125025 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 21:21:15.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.125090 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 21:21:15.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.140726 systemd[1]: Stopped target cryptsetup.target. Oct 2 21:21:15.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.172863 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 21:21:15.172926 systemd[1]: Stopped dracut-initqueue.service. Oct 2 21:21:15.181109 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 21:21:15.181151 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 21:21:15.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.209004 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 21:21:15.209053 systemd[1]: Stopped ignition-files.service. Oct 2 21:21:15.686742 kernel: hv_netvsc 002248b8-5f75-0022-48b8-5f75002248b8 eth0: Data path switched from VF: enP51522s1 Oct 2 21:21:15.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.221511 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 21:21:15.221550 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 21:21:15.236134 systemd[1]: Stopping ignition-mount.service... Oct 2 21:21:15.263120 systemd[1]: Stopping iscsid.service... Oct 2 21:21:15.267147 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 21:21:15.267228 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 21:21:15.276056 systemd[1]: Stopping sysroot-boot.service... Oct 2 21:21:15.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:15.284374 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 21:21:15.284439 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 21:21:15.290362 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 21:21:15.290407 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 21:21:15.307882 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 21:21:15.308221 systemd[1]: Stopped iscsid.service. Oct 2 21:21:15.318443 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 21:21:15.318545 systemd[1]: Finished initrd-cleanup.service. Oct 2 21:21:15.327397 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 21:21:15.777227 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Oct 2 21:21:15.327597 systemd[1]: Stopped ignition-mount.service. Oct 2 21:21:15.336827 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 21:21:15.336902 systemd[1]: Stopped ignition-disks.service. Oct 2 21:21:15.350467 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 21:21:15.350514 systemd[1]: Stopped ignition-kargs.service. Oct 2 21:21:15.366720 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 21:21:15.366767 systemd[1]: Stopped ignition-fetch.service. Oct 2 21:21:15.378761 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 21:21:15.378814 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 21:21:15.393966 systemd[1]: Stopped target paths.target. Oct 2 21:21:15.402018 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 21:21:15.405730 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 21:21:15.410608 systemd[1]: Stopped target slices.target. Oct 2 21:21:15.419529 systemd[1]: Stopped target sockets.target. Oct 2 21:21:15.427239 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 21:21:15.427295 systemd[1]: Closed iscsid.socket. Oct 2 21:21:15.434374 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 21:21:15.434430 systemd[1]: Stopped ignition-setup.service. Oct 2 21:21:15.442766 systemd[1]: Stopping iscsiuio.service... Oct 2 21:21:15.454522 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 21:21:15.455021 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 21:21:15.455123 systemd[1]: Stopped iscsiuio.service. Oct 2 21:21:15.461718 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 21:21:15.461803 systemd[1]: Stopped sysroot-boot.service. Oct 2 21:21:15.469456 systemd[1]: Stopped target network.target. Oct 2 21:21:15.476994 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 21:21:15.477030 systemd[1]: Closed iscsiuio.socket. Oct 2 21:21:15.484804 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 21:21:15.484855 systemd[1]: Stopped initrd-setup-root.service. Oct 2 21:21:15.494335 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:21:15.501988 systemd[1]: Stopping systemd-resolved.service... Oct 2 21:21:15.510378 systemd-networkd[875]: eth0: DHCPv6 lease lost Oct 2 21:21:15.777000 audit: BPF prog-id=9 op=UNLOAD Oct 2 21:21:15.514288 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:21:15.514391 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:21:15.520256 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 21:21:15.520364 systemd[1]: Stopped systemd-resolved.service. Oct 2 21:21:15.528128 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 21:21:15.528170 systemd[1]: Closed systemd-networkd.socket. Oct 2 21:21:15.536301 systemd[1]: Stopping network-cleanup.service... Oct 2 21:21:15.545614 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 21:21:15.545677 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 21:21:15.550528 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 21:21:15.550643 systemd[1]: Stopped systemd-sysctl.service. Oct 2 21:21:15.563191 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 21:21:15.563256 systemd[1]: Stopped systemd-modules-load.service. Oct 2 21:21:15.567835 systemd[1]: Stopping systemd-udevd.service... Oct 2 21:21:15.576018 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 21:21:15.580519 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 21:21:15.580694 systemd[1]: Stopped systemd-udevd.service. Oct 2 21:21:15.589539 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 21:21:15.589616 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 21:21:15.598599 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 21:21:15.598641 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 21:21:15.607064 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 21:21:15.607111 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 21:21:15.614719 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 21:21:15.614762 systemd[1]: Stopped dracut-cmdline.service. Oct 2 21:21:15.623714 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 21:21:15.623757 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 21:21:15.635208 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 21:21:15.649946 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 21:21:15.650022 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 21:21:15.660638 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 21:21:15.673520 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 21:21:15.709937 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 21:21:15.710052 systemd[1]: Stopped network-cleanup.service. Oct 2 21:21:15.717701 systemd[1]: Reached target initrd-switch-root.target. Oct 2 21:21:15.726312 systemd[1]: Starting initrd-switch-root.service... Oct 2 21:21:15.745888 systemd[1]: Switching root. Oct 2 21:21:15.778996 systemd-journald[276]: Journal stopped Oct 2 21:21:27.675373 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 21:21:27.675393 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 21:21:27.675404 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 21:21:27.675414 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 21:21:27.675422 kernel: SELinux: policy capability open_perms=1 Oct 2 21:21:27.675430 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 21:21:27.675439 kernel: SELinux: policy capability always_check_network=0 Oct 2 21:21:27.675448 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 21:21:27.675456 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 21:21:27.675463 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 21:21:27.675472 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 21:21:27.675481 systemd[1]: Successfully loaded SELinux policy in 272.573ms. Oct 2 21:21:27.675491 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 24.290ms. Oct 2 21:21:27.675501 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:21:27.675512 systemd[1]: Detected virtualization microsoft. Oct 2 21:21:27.675521 systemd[1]: Detected architecture arm64. Oct 2 21:21:27.675530 systemd[1]: Detected first boot. Oct 2 21:21:27.675539 systemd[1]: Hostname set to . Oct 2 21:21:27.675547 systemd[1]: Initializing machine ID from random generator. Oct 2 21:21:27.675556 systemd[1]: Populated /etc with preset unit settings. Oct 2 21:21:27.675577 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:21:27.675587 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:21:27.675599 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:21:27.675608 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 21:21:27.675616 kernel: audit: type=1334 audit(1696281686.865:88): prog-id=12 op=LOAD Oct 2 21:21:27.675625 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 21:21:27.675633 kernel: audit: type=1334 audit(1696281686.865:89): prog-id=3 op=UNLOAD Oct 2 21:21:27.675642 kernel: audit: type=1334 audit(1696281686.866:90): prog-id=13 op=LOAD Oct 2 21:21:27.675652 kernel: audit: type=1334 audit(1696281686.866:91): prog-id=14 op=LOAD Oct 2 21:21:27.675662 kernel: audit: type=1334 audit(1696281686.866:92): prog-id=4 op=UNLOAD Oct 2 21:21:27.675670 systemd[1]: Stopped initrd-switch-root.service. Oct 2 21:21:27.675679 kernel: audit: type=1334 audit(1696281686.866:93): prog-id=5 op=UNLOAD Oct 2 21:21:27.675688 kernel: audit: type=1131 audit(1696281686.869:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.675697 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 21:21:27.675705 kernel: audit: type=1334 audit(1696281686.919:95): prog-id=12 op=UNLOAD Oct 2 21:21:27.675715 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 21:21:27.675725 kernel: audit: type=1130 audit(1696281686.919:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.675734 kernel: audit: type=1131 audit(1696281686.919:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.675742 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 21:21:27.675751 systemd[1]: Created slice system-getty.slice. Oct 2 21:21:27.675763 systemd[1]: Created slice system-modprobe.slice. Oct 2 21:21:27.675772 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 21:21:27.675782 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 21:21:27.675791 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 21:21:27.675801 systemd[1]: Created slice user.slice. Oct 2 21:21:27.675811 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:21:27.675820 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 21:21:27.675829 systemd[1]: Set up automount boot.automount. Oct 2 21:21:27.675838 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 21:21:27.675848 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 21:21:27.675857 systemd[1]: Stopped target initrd-fs.target. Oct 2 21:21:27.675866 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 21:21:27.675875 systemd[1]: Reached target integritysetup.target. Oct 2 21:21:27.675885 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:21:27.675895 systemd[1]: Reached target remote-fs.target. Oct 2 21:21:27.675904 systemd[1]: Reached target slices.target. Oct 2 21:21:27.675913 systemd[1]: Reached target swap.target. Oct 2 21:21:27.675922 systemd[1]: Reached target torcx.target. Oct 2 21:21:27.675931 systemd[1]: Reached target veritysetup.target. Oct 2 21:21:27.675940 systemd[1]: Listening on systemd-coredump.socket. Oct 2 21:21:27.675949 systemd[1]: Listening on systemd-initctl.socket. Oct 2 21:21:27.675960 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:21:27.675970 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:21:27.675979 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:21:27.675988 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 21:21:27.675999 systemd[1]: Mounting dev-hugepages.mount... Oct 2 21:21:27.676008 systemd[1]: Mounting dev-mqueue.mount... Oct 2 21:21:27.676017 systemd[1]: Mounting media.mount... Oct 2 21:21:27.676027 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 21:21:27.676036 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 21:21:27.676046 systemd[1]: Mounting tmp.mount... Oct 2 21:21:27.676056 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 21:21:27.676065 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 21:21:27.676074 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:21:27.676085 systemd[1]: Starting modprobe@configfs.service... Oct 2 21:21:27.676094 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 21:21:27.676103 systemd[1]: Starting modprobe@drm.service... Oct 2 21:21:27.676112 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 21:21:27.676122 systemd[1]: Starting modprobe@fuse.service... Oct 2 21:21:27.676131 systemd[1]: Starting modprobe@loop.service... Oct 2 21:21:27.676141 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 21:21:27.676150 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 21:21:27.676160 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 21:21:27.676170 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 21:21:27.676180 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 21:21:27.676189 systemd[1]: Stopped systemd-journald.service. Oct 2 21:21:27.676198 systemd[1]: systemd-journald.service: Consumed 2.993s CPU time. Oct 2 21:21:27.676207 kernel: loop: module loaded Oct 2 21:21:27.676217 systemd[1]: Starting systemd-journald.service... Oct 2 21:21:27.676226 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:21:27.676235 systemd[1]: Starting systemd-network-generator.service... Oct 2 21:21:27.676246 systemd[1]: Starting systemd-remount-fs.service... Oct 2 21:21:27.676256 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:21:27.676265 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 21:21:27.676274 kernel: fuse: init (API version 7.34) Oct 2 21:21:27.676283 systemd[1]: Stopped verity-setup.service. Oct 2 21:21:27.676292 systemd[1]: Mounted dev-hugepages.mount. Oct 2 21:21:27.676301 systemd[1]: Mounted dev-mqueue.mount. Oct 2 21:21:27.676310 systemd[1]: Mounted media.mount. Oct 2 21:21:27.676320 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 21:21:27.676329 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 21:21:27.676339 systemd[1]: Mounted tmp.mount. Oct 2 21:21:27.676348 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 21:21:27.676357 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:21:27.676370 systemd-journald[1207]: Journal started Oct 2 21:21:27.676406 systemd-journald[1207]: Runtime Journal (/run/log/journal/aac16a30f68f4f02afa634e399c1a543) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:21:18.371000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 21:21:19.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:21:19.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:21:19.171000 audit: BPF prog-id=10 op=LOAD Oct 2 21:21:19.171000 audit: BPF prog-id=10 op=UNLOAD Oct 2 21:21:19.171000 audit: BPF prog-id=11 op=LOAD Oct 2 21:21:19.171000 audit: BPF prog-id=11 op=UNLOAD Oct 2 21:21:26.865000 audit: BPF prog-id=12 op=LOAD Oct 2 21:21:26.865000 audit: BPF prog-id=3 op=UNLOAD Oct 2 21:21:26.866000 audit: BPF prog-id=13 op=LOAD Oct 2 21:21:26.866000 audit: BPF prog-id=14 op=LOAD Oct 2 21:21:26.866000 audit: BPF prog-id=4 op=UNLOAD Oct 2 21:21:26.866000 audit: BPF prog-id=5 op=UNLOAD Oct 2 21:21:26.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:26.919000 audit: BPF prog-id=12 op=UNLOAD Oct 2 21:21:26.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:26.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.518000 audit: BPF prog-id=15 op=LOAD Oct 2 21:21:27.518000 audit: BPF prog-id=16 op=LOAD Oct 2 21:21:27.518000 audit: BPF prog-id=17 op=LOAD Oct 2 21:21:27.518000 audit: BPF prog-id=13 op=UNLOAD Oct 2 21:21:27.518000 audit: BPF prog-id=14 op=UNLOAD Oct 2 21:21:27.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.672000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 21:21:27.672000 audit[1207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=fffffdb4cfd0 a2=4000 a3=1 items=0 ppid=1 pid=1207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:21:27.672000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 21:21:26.864711 systemd[1]: Queued start job for default target multi-user.target. Oct 2 21:21:20.456420 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:21:26.867429 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 21:21:20.507691 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:21:26.869874 systemd[1]: systemd-journald.service: Consumed 2.993s CPU time. Oct 2 21:21:20.507711 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:21:20.507749 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 21:21:20.507759 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 21:21:20.507800 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 21:21:20.507815 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 21:21:20.508021 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 21:21:20.508055 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:21:20.508067 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:21:20.508459 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 21:21:20.508494 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 21:21:20.508513 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 21:21:20.508527 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 21:21:20.508543 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 21:21:20.508556 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:20Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 21:21:25.992476 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:25Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:21:25.992750 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:25Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:21:25.992854 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:25Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:21:25.993004 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:25Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:21:25.993053 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:25Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 21:21:25.993113 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2023-10-02T21:21:25Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 21:21:27.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.692734 systemd[1]: Started systemd-journald.service. Oct 2 21:21:27.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.693626 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 21:21:27.693755 systemd[1]: Finished modprobe@configfs.service. Oct 2 21:21:27.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.698945 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 21:21:27.699065 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 21:21:27.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.704221 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 21:21:27.704336 systemd[1]: Finished modprobe@drm.service. Oct 2 21:21:27.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.708993 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 21:21:27.709113 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 21:21:27.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.714234 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 21:21:27.714351 systemd[1]: Finished modprobe@fuse.service. Oct 2 21:21:27.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.720017 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 21:21:27.720138 systemd[1]: Finished modprobe@loop.service. Oct 2 21:21:27.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.724932 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:21:27.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.730287 systemd[1]: Finished systemd-network-generator.service. Oct 2 21:21:27.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.738078 systemd[1]: Finished systemd-remount-fs.service. Oct 2 21:21:27.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.743484 systemd[1]: Reached target network-pre.target. Oct 2 21:21:27.749814 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 21:21:27.760727 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 21:21:27.765062 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 21:21:27.812134 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 21:21:27.817917 systemd[1]: Starting systemd-journal-flush.service... Oct 2 21:21:27.822618 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 21:21:27.823921 systemd[1]: Starting systemd-random-seed.service... Oct 2 21:21:27.828475 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 21:21:27.829624 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:21:27.835672 systemd[1]: Starting systemd-sysusers.service... Oct 2 21:21:27.841813 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:21:27.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.847132 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 21:21:27.852083 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 21:21:27.858198 systemd[1]: Starting systemd-udev-settle.service... Oct 2 21:21:27.884901 systemd[1]: Finished systemd-random-seed.service. Oct 2 21:21:27.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.890201 systemd[1]: Reached target first-boot-complete.target. Oct 2 21:21:27.899662 systemd-journald[1207]: Time spent on flushing to /var/log/journal/aac16a30f68f4f02afa634e399c1a543 is 14.086ms for 1111 entries. Oct 2 21:21:27.899662 systemd-journald[1207]: System Journal (/var/log/journal/aac16a30f68f4f02afa634e399c1a543) is 8.0M, max 2.6G, 2.6G free. Oct 2 21:21:28.031867 systemd-journald[1207]: Received client request to flush runtime journal. Oct 2 21:21:27.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:27.959615 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:21:28.036811 udevadm[1222]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 21:21:28.033291 systemd[1]: Finished systemd-journal-flush.service. Oct 2 21:21:28.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:28.403892 systemd[1]: Finished systemd-sysusers.service. Oct 2 21:21:28.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:28.959624 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 21:21:28.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:28.964000 audit: BPF prog-id=18 op=LOAD Oct 2 21:21:28.964000 audit: BPF prog-id=19 op=LOAD Oct 2 21:21:28.964000 audit: BPF prog-id=7 op=UNLOAD Oct 2 21:21:28.964000 audit: BPF prog-id=8 op=UNLOAD Oct 2 21:21:28.966178 systemd[1]: Starting systemd-udevd.service... Oct 2 21:21:28.987456 systemd-udevd[1225]: Using default interface naming scheme 'v252'. Oct 2 21:21:29.136255 systemd[1]: Started systemd-udevd.service. Oct 2 21:21:29.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.146000 audit: BPF prog-id=20 op=LOAD Oct 2 21:21:29.147579 systemd[1]: Starting systemd-networkd.service... Oct 2 21:21:29.189377 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 21:21:29.221000 audit: BPF prog-id=21 op=LOAD Oct 2 21:21:29.221000 audit: BPF prog-id=22 op=LOAD Oct 2 21:21:29.221000 audit: BPF prog-id=23 op=LOAD Oct 2 21:21:29.222944 systemd[1]: Starting systemd-userdbd.service... Oct 2 21:21:29.282000 audit[1226]: AVC avc: denied { confidentiality } for pid=1226 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 21:21:29.293598 kernel: hv_vmbus: registering driver hv_balloon Oct 2 21:21:29.293686 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 21:21:29.297588 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 21:21:29.304401 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 21:21:29.309581 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 21:21:29.321607 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 21:21:29.321660 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 21:21:29.329265 systemd[1]: Started systemd-userdbd.service. Oct 2 21:21:29.338810 kernel: Console: switching to colour dummy device 80x25 Oct 2 21:21:29.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.343606 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:21:29.282000 audit[1226]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaab050e9770 a1=aa2c a2=ffff9bfa24b0 a3=aaab05046010 items=10 ppid=1225 pid=1226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:21:29.282000 audit: CWD cwd="/" Oct 2 21:21:29.282000 audit: PATH item=0 name=(null) inode=9108 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=1 name=(null) inode=9109 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=2 name=(null) inode=9108 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=3 name=(null) inode=9110 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=4 name=(null) inode=9108 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=5 name=(null) inode=9111 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=6 name=(null) inode=9108 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=7 name=(null) inode=9112 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=8 name=(null) inode=9108 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PATH item=9 name=(null) inode=9113 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:29.282000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 21:21:29.370255 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 21:21:29.370333 kernel: hv_vmbus: registering driver hv_utils Oct 2 21:21:29.372734 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 21:21:29.461580 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 21:21:29.461638 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 21:21:29.704494 systemd-networkd[1246]: lo: Link UP Oct 2 21:21:29.704768 systemd-networkd[1246]: lo: Gained carrier Oct 2 21:21:29.705254 systemd-networkd[1246]: Enumeration completed Oct 2 21:21:29.705431 systemd[1]: Started systemd-networkd.service. Oct 2 21:21:29.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.711960 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:21:29.755343 systemd-networkd[1246]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:21:29.763975 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1227) Oct 2 21:21:29.791846 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:21:29.799365 systemd[1]: Finished systemd-udev-settle.service. Oct 2 21:21:29.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.805767 systemd[1]: Starting lvm2-activation-early.service... Oct 2 21:21:29.814955 kernel: mlx5_core c942:00:02.0 enP51522s1: Link up Oct 2 21:21:29.856943 kernel: hv_netvsc 002248b8-5f75-0022-48b8-5f75002248b8 eth0: Data path switched to VF: enP51522s1 Oct 2 21:21:29.858871 systemd-networkd[1246]: enP51522s1: Link UP Oct 2 21:21:29.859301 systemd-networkd[1246]: eth0: Link UP Oct 2 21:21:29.859311 systemd-networkd[1246]: eth0: Gained carrier Oct 2 21:21:29.864495 systemd-networkd[1246]: enP51522s1: Gained carrier Oct 2 21:21:29.874063 systemd-networkd[1246]: eth0: DHCPv4 address 10.200.20.16/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:21:30.169003 lvm[1302]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:21:30.209034 systemd[1]: Finished lvm2-activation-early.service. Oct 2 21:21:30.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:30.214221 systemd[1]: Reached target cryptsetup.target. Oct 2 21:21:30.220737 systemd[1]: Starting lvm2-activation.service... Oct 2 21:21:30.228851 lvm[1303]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:21:30.257020 systemd[1]: Finished lvm2-activation.service. Oct 2 21:21:30.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:30.261991 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:21:30.266587 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 21:21:30.266615 systemd[1]: Reached target local-fs.target. Oct 2 21:21:30.271261 systemd[1]: Reached target machines.target. Oct 2 21:21:30.277600 systemd[1]: Starting ldconfig.service... Oct 2 21:21:30.281517 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 21:21:30.281601 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:21:30.283311 systemd[1]: Starting systemd-boot-update.service... Oct 2 21:21:30.289145 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 21:21:30.296351 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 21:21:30.301235 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:21:30.301296 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:21:30.302481 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 21:21:30.329558 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1305 (bootctl) Oct 2 21:21:30.331210 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 21:21:30.957164 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 21:21:30.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:31.105820 systemd-tmpfiles[1308]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 21:21:31.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:31.482660 systemd-fsck[1313]: fsck.fat 4.2 (2021-01-31) Oct 2 21:21:31.482660 systemd-fsck[1313]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 21:21:31.457022 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 21:21:31.464305 systemd[1]: Mounting boot.mount... Oct 2 21:21:31.477252 systemd[1]: Mounted boot.mount. Oct 2 21:21:31.487292 systemd[1]: Finished systemd-boot-update.service. Oct 2 21:21:31.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:31.525631 systemd-tmpfiles[1308]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 21:21:31.550897 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 21:21:31.551487 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 21:21:31.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:31.604135 systemd-tmpfiles[1308]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 21:21:31.857043 systemd-networkd[1246]: eth0: Gained IPv6LL Oct 2 21:21:31.862267 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:21:31.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.228882 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 21:21:34.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.237357 systemd[1]: Starting audit-rules.service... Oct 2 21:21:34.239146 kernel: kauditd_printk_skb: 70 callbacks suppressed Oct 2 21:21:34.239228 kernel: audit: type=1130 audit(1696281694.233:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.260493 systemd[1]: Starting clean-ca-certificates.service... Oct 2 21:21:34.266747 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 21:21:34.271000 audit: BPF prog-id=24 op=LOAD Oct 2 21:21:34.273453 systemd[1]: Starting systemd-resolved.service... Oct 2 21:21:34.279651 kernel: audit: type=1334 audit(1696281694.271:154): prog-id=24 op=LOAD Oct 2 21:21:34.281000 audit: BPF prog-id=25 op=LOAD Oct 2 21:21:34.283766 systemd[1]: Starting systemd-timesyncd.service... Oct 2 21:21:34.288938 kernel: audit: type=1334 audit(1696281694.281:155): prog-id=25 op=LOAD Oct 2 21:21:34.293464 systemd[1]: Starting systemd-update-utmp.service... Oct 2 21:21:34.556751 systemd[1]: Finished clean-ca-certificates.service. Oct 2 21:21:34.555000 audit[1325]: SYSTEM_BOOT pid=1325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.579053 kernel: audit: type=1127 audit(1696281694.555:156): pid=1325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.582660 systemd[1]: Finished systemd-update-utmp.service. Oct 2 21:21:34.601707 kernel: audit: type=1130 audit(1696281694.578:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.602803 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 21:21:34.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.619749 systemd[1]: Started systemd-timesyncd.service. Oct 2 21:21:34.624527 systemd[1]: Reached target time-set.target. Oct 2 21:21:34.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.645595 kernel: audit: type=1130 audit(1696281694.601:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.645673 kernel: audit: type=1130 audit(1696281694.623:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.985267 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 21:21:34.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:35.010952 kernel: audit: type=1130 audit(1696281694.990:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:35.138401 systemd-resolved[1323]: Positive Trust Anchors: Oct 2 21:21:35.138412 systemd-resolved[1323]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:21:35.138438 systemd-resolved[1323]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:21:35.171459 systemd-timesyncd[1324]: Contacted time server 205.233.73.201:123 (0.flatcar.pool.ntp.org). Oct 2 21:21:35.171859 systemd-timesyncd[1324]: Initial clock synchronization to Mon 2023-10-02 21:21:35.171293 UTC. Oct 2 21:21:35.360276 systemd-resolved[1323]: Using system hostname 'ci-3510.3.0-a-32a653638a'. Oct 2 21:21:35.362436 systemd[1]: Started systemd-resolved.service. Oct 2 21:21:35.367122 systemd[1]: Reached target network.target. Oct 2 21:21:35.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:35.387868 systemd[1]: Reached target network-online.target. Oct 2 21:21:35.393086 kernel: audit: type=1130 audit(1696281695.366:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:35.393448 systemd[1]: Reached target nss-lookup.target. Oct 2 21:21:36.032000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:21:36.032000 audit[1340]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd3b44f60 a2=420 a3=0 items=0 ppid=1319 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:21:36.032000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 21:21:36.046934 kernel: audit: type=1305 audit(1696281696.032:162): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:21:36.050229 augenrules[1340]: No rules Oct 2 21:21:36.051277 systemd[1]: Finished audit-rules.service. Oct 2 21:21:52.749772 ldconfig[1304]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 21:21:52.764325 systemd[1]: Finished ldconfig.service. Oct 2 21:21:52.770758 systemd[1]: Starting systemd-update-done.service... Oct 2 21:21:52.796813 systemd[1]: Finished systemd-update-done.service. Oct 2 21:21:52.801932 systemd[1]: Reached target sysinit.target. Oct 2 21:21:52.806539 systemd[1]: Started motdgen.path. Oct 2 21:21:52.810263 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 21:21:52.816838 systemd[1]: Started logrotate.timer. Oct 2 21:21:52.821197 systemd[1]: Started mdadm.timer. Oct 2 21:21:52.825045 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 21:21:52.829802 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 21:21:52.829835 systemd[1]: Reached target paths.target. Oct 2 21:21:52.834108 systemd[1]: Reached target timers.target. Oct 2 21:21:52.840989 systemd[1]: Listening on dbus.socket. Oct 2 21:21:52.846393 systemd[1]: Starting docker.socket... Oct 2 21:21:52.853334 systemd[1]: Listening on sshd.socket. Oct 2 21:21:52.857590 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:21:52.858198 systemd[1]: Listening on docker.socket. Oct 2 21:21:52.862611 systemd[1]: Reached target sockets.target. Oct 2 21:21:52.867059 systemd[1]: Reached target basic.target. Oct 2 21:21:52.871288 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:21:52.871317 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:21:52.872550 systemd[1]: Starting containerd.service... Oct 2 21:21:52.877787 systemd[1]: Starting dbus.service... Oct 2 21:21:52.882584 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 21:21:52.888215 systemd[1]: Starting extend-filesystems.service... Oct 2 21:21:52.896062 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 21:21:52.897195 systemd[1]: Starting motdgen.service... Oct 2 21:21:52.902053 systemd[1]: Started nvidia.service. Oct 2 21:21:52.907267 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 21:21:52.912906 systemd[1]: Starting prepare-critools.service... Oct 2 21:21:52.918362 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 21:21:52.923912 systemd[1]: Starting sshd-keygen.service... Oct 2 21:21:52.932509 systemd[1]: Starting systemd-logind.service... Oct 2 21:21:52.940293 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:21:52.940366 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 21:21:52.941116 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 21:21:52.943406 systemd[1]: Starting update-engine.service... Oct 2 21:21:52.950371 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 21:21:52.964600 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 21:21:52.964805 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 21:21:53.014435 extend-filesystems[1351]: Found sda Oct 2 21:21:53.020221 extend-filesystems[1351]: Found sda1 Oct 2 21:21:53.020221 extend-filesystems[1351]: Found sda2 Oct 2 21:21:53.020221 extend-filesystems[1351]: Found sda3 Oct 2 21:21:53.020221 extend-filesystems[1351]: Found usr Oct 2 21:21:53.020221 extend-filesystems[1351]: Found sda4 Oct 2 21:21:53.020221 extend-filesystems[1351]: Found sda6 Oct 2 21:21:53.020221 extend-filesystems[1351]: Found sda7 Oct 2 21:21:53.020221 extend-filesystems[1351]: Found sda9 Oct 2 21:21:53.020221 extend-filesystems[1351]: Checking size of /dev/sda9 Oct 2 21:21:53.073967 jq[1350]: false Oct 2 21:21:53.074170 jq[1368]: true Oct 2 21:21:53.027042 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 21:21:53.027279 systemd[1]: Finished motdgen.service. Oct 2 21:21:53.061237 systemd-logind[1361]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 2 21:21:53.061444 systemd-logind[1361]: New seat seat0. Oct 2 21:21:53.079765 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 21:21:53.079953 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 21:21:53.114022 jq[1397]: true Oct 2 21:21:53.146223 extend-filesystems[1351]: Old size kept for /dev/sda9 Oct 2 21:21:53.160175 tar[1371]: ./ Oct 2 21:21:53.160175 tar[1371]: ./macvlan Oct 2 21:21:53.160396 tar[1372]: crictl Oct 2 21:21:53.161135 extend-filesystems[1351]: Found sr0 Oct 2 21:21:53.161399 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 21:21:53.161595 systemd[1]: Finished extend-filesystems.service. Oct 2 21:21:53.203801 env[1374]: time="2023-10-02T21:21:53.203748334Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 21:21:53.264741 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 21:21:53.268941 env[1374]: time="2023-10-02T21:21:53.268884176Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 21:21:53.274847 env[1374]: time="2023-10-02T21:21:53.274782773Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:21:53.277489 env[1374]: time="2023-10-02T21:21:53.277445931Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:21:53.277489 env[1374]: time="2023-10-02T21:21:53.277483371Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:21:53.278136 env[1374]: time="2023-10-02T21:21:53.278099371Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:21:53.278136 env[1374]: time="2023-10-02T21:21:53.278127651Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 21:21:53.278213 env[1374]: time="2023-10-02T21:21:53.278142531Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 21:21:53.278213 env[1374]: time="2023-10-02T21:21:53.278152771Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 21:21:53.278255 env[1374]: time="2023-10-02T21:21:53.278230571Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:21:53.278519 env[1374]: time="2023-10-02T21:21:53.278496811Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:21:53.278651 env[1374]: time="2023-10-02T21:21:53.278618810Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:21:53.278651 env[1374]: time="2023-10-02T21:21:53.278643010Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 21:21:53.278714 env[1374]: time="2023-10-02T21:21:53.278696290Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 21:21:53.278714 env[1374]: time="2023-10-02T21:21:53.278707250Z" level=info msg="metadata content store policy set" policy=shared Oct 2 21:21:53.279029 tar[1371]: ./static Oct 2 21:21:53.286209 bash[1424]: Updated "/home/core/.ssh/authorized_keys" Oct 2 21:21:53.287178 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 21:21:53.299156 env[1374]: time="2023-10-02T21:21:53.299091799Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 21:21:53.299156 env[1374]: time="2023-10-02T21:21:53.299138919Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 21:21:53.299156 env[1374]: time="2023-10-02T21:21:53.299152479Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 21:21:53.299321 env[1374]: time="2023-10-02T21:21:53.299188598Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.299321 env[1374]: time="2023-10-02T21:21:53.299203598Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.299321 env[1374]: time="2023-10-02T21:21:53.299216998Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.299321 env[1374]: time="2023-10-02T21:21:53.299231998Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.299704 env[1374]: time="2023-10-02T21:21:53.299681558Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.299753 env[1374]: time="2023-10-02T21:21:53.299703398Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.299753 env[1374]: time="2023-10-02T21:21:53.299718998Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.299753 env[1374]: time="2023-10-02T21:21:53.299731358Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.299753 env[1374]: time="2023-10-02T21:21:53.299744838Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 21:21:53.299904 env[1374]: time="2023-10-02T21:21:53.299875398Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 21:21:53.300017 env[1374]: time="2023-10-02T21:21:53.299973958Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 21:21:53.300283 env[1374]: time="2023-10-02T21:21:53.300240718Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 21:21:53.300283 env[1374]: time="2023-10-02T21:21:53.300270318Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300283 env[1374]: time="2023-10-02T21:21:53.300283998Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 21:21:53.300372 env[1374]: time="2023-10-02T21:21:53.300347118Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300372 env[1374]: time="2023-10-02T21:21:53.300361678Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300413 env[1374]: time="2023-10-02T21:21:53.300373318Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300413 env[1374]: time="2023-10-02T21:21:53.300387358Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300413 env[1374]: time="2023-10-02T21:21:53.300398878Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300413 env[1374]: time="2023-10-02T21:21:53.300410358Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300491 env[1374]: time="2023-10-02T21:21:53.300421718Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300491 env[1374]: time="2023-10-02T21:21:53.300433318Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300491 env[1374]: time="2023-10-02T21:21:53.300447278Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 21:21:53.300587 env[1374]: time="2023-10-02T21:21:53.300563078Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300618 env[1374]: time="2023-10-02T21:21:53.300588678Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300618 env[1374]: time="2023-10-02T21:21:53.300600998Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300618 env[1374]: time="2023-10-02T21:21:53.300612358Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 21:21:53.300684 env[1374]: time="2023-10-02T21:21:53.300627998Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 21:21:53.300684 env[1374]: time="2023-10-02T21:21:53.300638558Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 21:21:53.300684 env[1374]: time="2023-10-02T21:21:53.300662638Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 21:21:53.300748 env[1374]: time="2023-10-02T21:21:53.300698118Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 21:21:53.300985 env[1374]: time="2023-10-02T21:21:53.300901677Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.300986957Z" level=info msg="Connect containerd service" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.301032877Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.301895077Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.302182037Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.302218317Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.306678594Z" level=info msg="containerd successfully booted in 0.105439s" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.318529227Z" level=info msg="Start subscribing containerd event" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.318605667Z" level=info msg="Start recovering state" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.318687787Z" level=info msg="Start event monitor" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.318809907Z" level=info msg="Start snapshots syncer" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.318824387Z" level=info msg="Start cni network conf syncer for default" Oct 2 21:21:53.319528 env[1374]: time="2023-10-02T21:21:53.318835707Z" level=info msg="Start streaming server" Oct 2 21:21:53.302329 systemd[1]: Started containerd.service. Oct 2 21:21:53.323573 dbus-daemon[1349]: [system] SELinux support is enabled Oct 2 21:21:53.323757 systemd[1]: Started dbus.service. Oct 2 21:21:53.329472 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 21:21:53.330035 dbus-daemon[1349]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 21:21:53.329500 systemd[1]: Reached target system-config.target. Oct 2 21:21:53.338313 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 21:21:53.338343 systemd[1]: Reached target user-config.target. Oct 2 21:21:53.346479 systemd[1]: Started systemd-logind.service. Oct 2 21:21:53.360583 tar[1371]: ./vlan Oct 2 21:21:53.453539 tar[1371]: ./portmap Oct 2 21:21:53.523322 tar[1371]: ./host-local Oct 2 21:21:53.570351 tar[1371]: ./vrf Oct 2 21:21:53.628368 tar[1371]: ./bridge Oct 2 21:21:53.698453 tar[1371]: ./tuning Oct 2 21:21:53.702640 update_engine[1364]: I1002 21:21:53.688486 1364 main.cc:92] Flatcar Update Engine starting Oct 2 21:21:53.711319 systemd[1]: Finished prepare-critools.service. Oct 2 21:21:53.737766 tar[1371]: ./firewall Oct 2 21:21:53.755179 systemd[1]: Started update-engine.service. Oct 2 21:21:53.755471 update_engine[1364]: I1002 21:21:53.755224 1364 update_check_scheduler.cc:74] Next update check in 8m41s Oct 2 21:21:53.764186 systemd[1]: Started locksmithd.service. Oct 2 21:21:53.774399 tar[1371]: ./host-device Oct 2 21:21:53.805441 tar[1371]: ./sbr Oct 2 21:21:53.832820 tar[1371]: ./loopback Oct 2 21:21:53.860304 tar[1371]: ./dhcp Oct 2 21:21:53.934670 tar[1371]: ./ptp Oct 2 21:21:53.967082 tar[1371]: ./ipvlan Oct 2 21:21:53.998686 tar[1371]: ./bandwidth Oct 2 21:21:54.135254 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 21:21:55.070648 sshd_keygen[1365]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 21:21:55.097269 systemd[1]: Finished sshd-keygen.service. Oct 2 21:21:55.103193 systemd[1]: Starting issuegen.service... Oct 2 21:21:55.108828 systemd[1]: Started waagent.service. Oct 2 21:21:55.115322 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 21:21:55.115500 systemd[1]: Finished issuegen.service. Oct 2 21:21:55.121397 systemd[1]: Starting systemd-user-sessions.service... Oct 2 21:21:55.148575 systemd[1]: Finished systemd-user-sessions.service. Oct 2 21:21:55.155729 systemd[1]: Started getty@tty1.service. Oct 2 21:21:55.162087 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 21:21:55.167563 systemd[1]: Reached target getty.target. Oct 2 21:21:55.171774 systemd[1]: Reached target multi-user.target. Oct 2 21:21:55.177648 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 21:21:55.192862 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 21:21:55.193044 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 21:21:55.199288 systemd[1]: Startup finished in 752ms (kernel) + 19.288s (initrd) + 37.188s (userspace) = 57.229s. Oct 2 21:21:55.450226 locksmithd[1457]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 21:21:55.912586 login[1478]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 21:21:55.913245 login[1477]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:21:55.953832 systemd[1]: Created slice user-500.slice. Oct 2 21:21:55.955000 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 21:21:55.957945 systemd-logind[1361]: New session 1 of user core. Oct 2 21:21:55.995683 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 21:21:55.997222 systemd[1]: Starting user@500.service... Oct 2 21:21:56.035075 (systemd)[1481]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:21:56.275499 systemd[1481]: Queued start job for default target default.target. Oct 2 21:21:56.276024 systemd[1481]: Reached target paths.target. Oct 2 21:21:56.276043 systemd[1481]: Reached target sockets.target. Oct 2 21:21:56.276054 systemd[1481]: Reached target timers.target. Oct 2 21:21:56.276063 systemd[1481]: Reached target basic.target. Oct 2 21:21:56.276108 systemd[1481]: Reached target default.target. Oct 2 21:21:56.276130 systemd[1481]: Startup finished in 232ms. Oct 2 21:21:56.276175 systemd[1]: Started user@500.service. Oct 2 21:21:56.277038 systemd[1]: Started session-1.scope. Oct 2 21:21:56.914007 login[1478]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:21:56.917531 systemd-logind[1361]: New session 2 of user core. Oct 2 21:21:56.918363 systemd[1]: Started session-2.scope. Oct 2 21:22:02.165594 waagent[1472]: 2023-10-02T21:22:02.165481Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 21:22:02.187076 waagent[1472]: 2023-10-02T21:22:02.186989Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 21:22:02.191750 waagent[1472]: 2023-10-02T21:22:02.191688Z INFO Daemon Daemon Python: 3.9.16 Oct 2 21:22:02.196273 waagent[1472]: 2023-10-02T21:22:02.196113Z INFO Daemon Daemon Run daemon Oct 2 21:22:02.200868 waagent[1472]: 2023-10-02T21:22:02.200808Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 21:22:02.221754 waagent[1472]: 2023-10-02T21:22:02.221582Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:22:02.237836 waagent[1472]: 2023-10-02T21:22:02.237675Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:22:02.247634 waagent[1472]: 2023-10-02T21:22:02.247559Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:22:02.253082 waagent[1472]: 2023-10-02T21:22:02.253016Z INFO Daemon Daemon Using waagent for provisioning Oct 2 21:22:02.259170 waagent[1472]: 2023-10-02T21:22:02.259106Z INFO Daemon Daemon Activate resource disk Oct 2 21:22:02.264148 waagent[1472]: 2023-10-02T21:22:02.264090Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 21:22:02.279276 waagent[1472]: 2023-10-02T21:22:02.279208Z INFO Daemon Daemon Found device: None Oct 2 21:22:02.283975 waagent[1472]: 2023-10-02T21:22:02.283907Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 21:22:02.293068 waagent[1472]: 2023-10-02T21:22:02.293009Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 21:22:02.305424 waagent[1472]: 2023-10-02T21:22:02.305358Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:22:02.311677 waagent[1472]: 2023-10-02T21:22:02.311617Z INFO Daemon Daemon Running default provisioning handler Oct 2 21:22:02.328618 waagent[1472]: 2023-10-02T21:22:02.328457Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:22:02.344956 waagent[1472]: 2023-10-02T21:22:02.344746Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:22:02.355081 waagent[1472]: 2023-10-02T21:22:02.355005Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:22:02.360301 waagent[1472]: 2023-10-02T21:22:02.360229Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 21:22:02.385719 waagent[1472]: 2023-10-02T21:22:02.385594Z INFO Daemon Daemon Successfully mounted dvd Oct 2 21:22:02.601085 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 21:22:02.657593 waagent[1472]: 2023-10-02T21:22:02.657449Z INFO Daemon Daemon Detect protocol endpoint Oct 2 21:22:02.662747 waagent[1472]: 2023-10-02T21:22:02.662661Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:22:02.668774 waagent[1472]: 2023-10-02T21:22:02.668695Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 21:22:02.675663 waagent[1472]: 2023-10-02T21:22:02.675581Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 21:22:02.681356 waagent[1472]: 2023-10-02T21:22:02.681283Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 21:22:02.686872 waagent[1472]: 2023-10-02T21:22:02.686805Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 21:22:02.831647 waagent[1472]: 2023-10-02T21:22:02.831575Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 21:22:02.839223 waagent[1472]: 2023-10-02T21:22:02.839178Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 21:22:02.844500 waagent[1472]: 2023-10-02T21:22:02.844427Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 21:22:03.597443 waagent[1472]: 2023-10-02T21:22:03.597291Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 21:22:03.612425 waagent[1472]: 2023-10-02T21:22:03.612360Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 21:22:03.618285 waagent[1472]: 2023-10-02T21:22:03.618218Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 21:22:03.703939 waagent[1472]: 2023-10-02T21:22:03.703798Z INFO Daemon Daemon Found private key matching thumbprint 128E4EAE5080C4D10BEFF7D83A24B9ABB81C687E Oct 2 21:22:03.712151 waagent[1472]: 2023-10-02T21:22:03.712083Z INFO Daemon Daemon Certificate with thumbprint 2536379E4466DC0195463D03A1FE1DC5E2C41160 has no matching private key. Oct 2 21:22:03.723497 waagent[1472]: 2023-10-02T21:22:03.723419Z INFO Daemon Daemon Fetch goal state completed Oct 2 21:22:03.764702 waagent[1472]: 2023-10-02T21:22:03.764646Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 67999a0d-4d07-44b3-8097-51b5e223fc0f New eTag: 2446945891066027313] Oct 2 21:22:03.775277 waagent[1472]: 2023-10-02T21:22:03.775197Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:22:03.790815 waagent[1472]: 2023-10-02T21:22:03.790757Z INFO Daemon Daemon Starting provisioning Oct 2 21:22:03.796218 waagent[1472]: 2023-10-02T21:22:03.796140Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 21:22:03.801061 waagent[1472]: 2023-10-02T21:22:03.801000Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-32a653638a] Oct 2 21:22:03.931688 waagent[1472]: 2023-10-02T21:22:03.931543Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-32a653638a] Oct 2 21:22:03.938570 waagent[1472]: 2023-10-02T21:22:03.938479Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 21:22:03.945563 waagent[1472]: 2023-10-02T21:22:03.945485Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 21:22:03.966746 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 21:22:03.966914 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 21:22:03.967025 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 21:22:03.967264 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:22:03.972991 systemd-networkd[1246]: eth0: DHCPv6 lease lost Oct 2 21:22:03.974853 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:22:03.975057 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:22:03.977444 systemd[1]: Starting systemd-networkd.service... Oct 2 21:22:04.010218 systemd-networkd[1528]: enP51522s1: Link UP Oct 2 21:22:04.010229 systemd-networkd[1528]: enP51522s1: Gained carrier Oct 2 21:22:04.011097 systemd-networkd[1528]: eth0: Link UP Oct 2 21:22:04.011107 systemd-networkd[1528]: eth0: Gained carrier Oct 2 21:22:04.011405 systemd-networkd[1528]: lo: Link UP Oct 2 21:22:04.011414 systemd-networkd[1528]: lo: Gained carrier Oct 2 21:22:04.011634 systemd-networkd[1528]: eth0: Gained IPv6LL Oct 2 21:22:04.012689 systemd-networkd[1528]: Enumeration completed Oct 2 21:22:04.012805 systemd[1]: Started systemd-networkd.service. Oct 2 21:22:04.014583 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:22:04.016036 waagent[1472]: 2023-10-02T21:22:04.015594Z INFO Daemon Daemon Create user account if not exists Oct 2 21:22:04.022455 waagent[1472]: 2023-10-02T21:22:04.022366Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 21:22:04.029200 systemd-networkd[1528]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:22:04.029369 waagent[1472]: 2023-10-02T21:22:04.029263Z INFO Daemon Daemon Configure sudoer Oct 2 21:22:04.034772 waagent[1472]: 2023-10-02T21:22:04.034646Z INFO Daemon Daemon Configure sshd Oct 2 21:22:04.039136 waagent[1472]: 2023-10-02T21:22:04.039058Z INFO Daemon Daemon Deploy ssh public key. Oct 2 21:22:04.051053 systemd-networkd[1528]: eth0: DHCPv4 address 10.200.20.16/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:22:04.054267 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:22:04.111030 waagent[1472]: 2023-10-02T21:22:04.110867Z INFO Daemon Daemon Decode custom data Oct 2 21:22:04.115896 waagent[1472]: 2023-10-02T21:22:04.115816Z INFO Daemon Daemon Save custom data Oct 2 21:22:05.319855 waagent[1472]: 2023-10-02T21:22:05.319770Z INFO Daemon Daemon Provisioning complete Oct 2 21:22:05.338969 waagent[1472]: 2023-10-02T21:22:05.338886Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 21:22:05.345334 waagent[1472]: 2023-10-02T21:22:05.345263Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 21:22:05.356303 waagent[1472]: 2023-10-02T21:22:05.356234Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 21:22:05.659033 waagent[1537]: 2023-10-02T21:22:05.658936Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 21:22:05.660192 waagent[1537]: 2023-10-02T21:22:05.660129Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:05.660454 waagent[1537]: 2023-10-02T21:22:05.660408Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:05.672914 waagent[1537]: 2023-10-02T21:22:05.672838Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 21:22:05.673242 waagent[1537]: 2023-10-02T21:22:05.673193Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 21:22:05.751174 waagent[1537]: 2023-10-02T21:22:05.751038Z INFO ExtHandler ExtHandler Found private key matching thumbprint 128E4EAE5080C4D10BEFF7D83A24B9ABB81C687E Oct 2 21:22:05.751548 waagent[1537]: 2023-10-02T21:22:05.751497Z INFO ExtHandler ExtHandler Certificate with thumbprint 2536379E4466DC0195463D03A1FE1DC5E2C41160 has no matching private key. Oct 2 21:22:05.751852 waagent[1537]: 2023-10-02T21:22:05.751805Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 21:22:05.765330 waagent[1537]: 2023-10-02T21:22:05.765276Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 7f5383be-3c0b-49f0-9c49-41a7a4844be7 New eTag: 2446945891066027313] Oct 2 21:22:05.766099 waagent[1537]: 2023-10-02T21:22:05.766042Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:22:05.857821 waagent[1537]: 2023-10-02T21:22:05.857683Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:22:05.868291 waagent[1537]: 2023-10-02T21:22:05.868218Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1537 Oct 2 21:22:05.872140 waagent[1537]: 2023-10-02T21:22:05.872082Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:22:05.873594 waagent[1537]: 2023-10-02T21:22:05.873537Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:22:06.069777 waagent[1537]: 2023-10-02T21:22:06.069669Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:22:06.070349 waagent[1537]: 2023-10-02T21:22:06.070294Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:22:06.081099 waagent[1537]: 2023-10-02T21:22:06.081047Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:22:06.081718 waagent[1537]: 2023-10-02T21:22:06.081666Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:22:06.083011 waagent[1537]: 2023-10-02T21:22:06.082948Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 21:22:06.084451 waagent[1537]: 2023-10-02T21:22:06.084383Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:22:06.084810 waagent[1537]: 2023-10-02T21:22:06.084741Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:06.085290 waagent[1537]: 2023-10-02T21:22:06.085223Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:06.085857 waagent[1537]: 2023-10-02T21:22:06.085787Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:22:06.086562 waagent[1537]: 2023-10-02T21:22:06.086497Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:22:06.086862 waagent[1537]: 2023-10-02T21:22:06.086786Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:22:06.086862 waagent[1537]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:22:06.086862 waagent[1537]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:22:06.086862 waagent[1537]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:22:06.086862 waagent[1537]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:06.086862 waagent[1537]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:06.086862 waagent[1537]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:06.087169 waagent[1537]: 2023-10-02T21:22:06.087106Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:06.089510 waagent[1537]: 2023-10-02T21:22:06.089357Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:22:06.090018 waagent[1537]: 2023-10-02T21:22:06.089950Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:06.090330 waagent[1537]: 2023-10-02T21:22:06.090252Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:22:06.091274 waagent[1537]: 2023-10-02T21:22:06.091209Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:22:06.091953 waagent[1537]: 2023-10-02T21:22:06.091856Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:22:06.092170 waagent[1537]: 2023-10-02T21:22:06.092099Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:22:06.092403 waagent[1537]: 2023-10-02T21:22:06.092342Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:22:06.094241 waagent[1537]: 2023-10-02T21:22:06.094178Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:22:06.095466 waagent[1537]: 2023-10-02T21:22:06.095409Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:22:06.106566 waagent[1537]: 2023-10-02T21:22:06.106507Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 21:22:06.107342 waagent[1537]: 2023-10-02T21:22:06.107292Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:22:06.108412 waagent[1537]: 2023-10-02T21:22:06.108356Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 21:22:06.137308 waagent[1537]: 2023-10-02T21:22:06.137179Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1528' Oct 2 21:22:06.184909 waagent[1537]: 2023-10-02T21:22:06.184833Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 21:22:06.295719 waagent[1537]: 2023-10-02T21:22:06.295584Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:22:06.295719 waagent[1537]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:22:06.295719 waagent[1537]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:22:06.295719 waagent[1537]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b8:5f:75 brd ff:ff:ff:ff:ff:ff Oct 2 21:22:06.295719 waagent[1537]: 3: enP51522s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b8:5f:75 brd ff:ff:ff:ff:ff:ff\ altname enP51522p0s2 Oct 2 21:22:06.295719 waagent[1537]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:22:06.295719 waagent[1537]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:22:06.295719 waagent[1537]: 2: eth0 inet 10.200.20.16/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:22:06.295719 waagent[1537]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:22:06.295719 waagent[1537]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:22:06.295719 waagent[1537]: 2: eth0 inet6 fe80::222:48ff:feb8:5f75/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:22:06.369115 waagent[1537]: 2023-10-02T21:22:06.369003Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 21:22:07.361288 waagent[1472]: 2023-10-02T21:22:07.361157Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 21:22:07.364937 waagent[1472]: 2023-10-02T21:22:07.364871Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 21:22:08.572263 waagent[1569]: 2023-10-02T21:22:08.572162Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 21:22:08.574705 waagent[1569]: 2023-10-02T21:22:08.574632Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 21:22:08.574999 waagent[1569]: 2023-10-02T21:22:08.574948Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 21:22:08.584531 waagent[1569]: 2023-10-02T21:22:08.584409Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:22:08.585181 waagent[1569]: 2023-10-02T21:22:08.585125Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:08.585436 waagent[1569]: 2023-10-02T21:22:08.585387Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:08.598687 waagent[1569]: 2023-10-02T21:22:08.598606Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 21:22:08.610990 waagent[1569]: 2023-10-02T21:22:08.610911Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 21:22:08.612233 waagent[1569]: 2023-10-02T21:22:08.612174Z INFO ExtHandler Oct 2 21:22:08.612481 waagent[1569]: 2023-10-02T21:22:08.612431Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 1065f40d-b5a2-4a38-b8cf-9b52130e446d eTag: 2446945891066027313 source: Fabric] Oct 2 21:22:08.613332 waagent[1569]: 2023-10-02T21:22:08.613275Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 21:22:08.614647 waagent[1569]: 2023-10-02T21:22:08.614589Z INFO ExtHandler Oct 2 21:22:08.614878 waagent[1569]: 2023-10-02T21:22:08.614830Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 21:22:08.621482 waagent[1569]: 2023-10-02T21:22:08.621423Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 21:22:08.622214 waagent[1569]: 2023-10-02T21:22:08.622164Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:22:08.645516 waagent[1569]: 2023-10-02T21:22:08.645451Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 21:22:08.726968 waagent[1569]: 2023-10-02T21:22:08.726805Z INFO ExtHandler Downloaded certificate {'thumbprint': '2536379E4466DC0195463D03A1FE1DC5E2C41160', 'hasPrivateKey': False} Oct 2 21:22:08.728271 waagent[1569]: 2023-10-02T21:22:08.728210Z INFO ExtHandler Downloaded certificate {'thumbprint': '128E4EAE5080C4D10BEFF7D83A24B9ABB81C687E', 'hasPrivateKey': True} Oct 2 21:22:08.729460 waagent[1569]: 2023-10-02T21:22:08.729398Z INFO ExtHandler Fetch goal state completed Oct 2 21:22:08.752024 waagent[1569]: 2023-10-02T21:22:08.751941Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1569 Oct 2 21:22:08.755769 waagent[1569]: 2023-10-02T21:22:08.755692Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:22:08.757459 waagent[1569]: 2023-10-02T21:22:08.757398Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:22:08.763545 waagent[1569]: 2023-10-02T21:22:08.763489Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:22:08.764178 waagent[1569]: 2023-10-02T21:22:08.764119Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:22:08.775323 waagent[1569]: 2023-10-02T21:22:08.775268Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:22:08.776023 waagent[1569]: 2023-10-02T21:22:08.775964Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:22:08.783696 waagent[1569]: 2023-10-02T21:22:08.783597Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 21:22:08.787487 waagent[1569]: 2023-10-02T21:22:08.787430Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 21:22:08.789300 waagent[1569]: 2023-10-02T21:22:08.789230Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:22:08.789660 waagent[1569]: 2023-10-02T21:22:08.789589Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:08.790321 waagent[1569]: 2023-10-02T21:22:08.790251Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:08.790908 waagent[1569]: 2023-10-02T21:22:08.790832Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:22:08.791237 waagent[1569]: 2023-10-02T21:22:08.791176Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:22:08.791237 waagent[1569]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:22:08.791237 waagent[1569]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:22:08.791237 waagent[1569]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:22:08.791237 waagent[1569]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:08.791237 waagent[1569]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:08.791237 waagent[1569]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:08.793677 waagent[1569]: 2023-10-02T21:22:08.793571Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:22:08.793890 waagent[1569]: 2023-10-02T21:22:08.793819Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:08.794148 waagent[1569]: 2023-10-02T21:22:08.794084Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:08.795097 waagent[1569]: 2023-10-02T21:22:08.794991Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:22:08.795274 waagent[1569]: 2023-10-02T21:22:08.795198Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:22:08.795373 waagent[1569]: 2023-10-02T21:22:08.795328Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:22:08.796192 waagent[1569]: 2023-10-02T21:22:08.796117Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:22:08.797829 waagent[1569]: 2023-10-02T21:22:08.797637Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:22:08.801547 waagent[1569]: 2023-10-02T21:22:08.801430Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:22:08.803442 waagent[1569]: 2023-10-02T21:22:08.803257Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:22:08.803988 waagent[1569]: 2023-10-02T21:22:08.803889Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:22:08.817497 waagent[1569]: 2023-10-02T21:22:08.817413Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:22:08.817497 waagent[1569]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:22:08.817497 waagent[1569]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:22:08.817497 waagent[1569]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b8:5f:75 brd ff:ff:ff:ff:ff:ff Oct 2 21:22:08.817497 waagent[1569]: 3: enP51522s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b8:5f:75 brd ff:ff:ff:ff:ff:ff\ altname enP51522p0s2 Oct 2 21:22:08.817497 waagent[1569]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:22:08.817497 waagent[1569]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:22:08.817497 waagent[1569]: 2: eth0 inet 10.200.20.16/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:22:08.817497 waagent[1569]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:22:08.817497 waagent[1569]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:22:08.817497 waagent[1569]: 2: eth0 inet6 fe80::222:48ff:feb8:5f75/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:22:08.822486 waagent[1569]: 2023-10-02T21:22:08.822318Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 21:22:08.824187 waagent[1569]: 2023-10-02T21:22:08.824111Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 21:22:08.846154 waagent[1569]: 2023-10-02T21:22:08.846088Z INFO ExtHandler ExtHandler Oct 2 21:22:08.846319 waagent[1569]: 2023-10-02T21:22:08.846259Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: bc0db194-40d9-4af4-a9b3-84775616192b correlation cb8745e4-788a-4f05-882d-38a0ff8be154 created: 2023-10-02T21:20:12.757988Z] Oct 2 21:22:08.847229 waagent[1569]: 2023-10-02T21:22:08.847162Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 21:22:08.849145 waagent[1569]: 2023-10-02T21:22:08.849086Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 3 ms] Oct 2 21:22:08.870895 waagent[1569]: 2023-10-02T21:22:08.870822Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 21:22:08.906542 waagent[1569]: 2023-10-02T21:22:08.906457Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: EAFD0531-0798-4FA5-9FD6-AF8977001A51;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 21:22:09.294374 waagent[1569]: 2023-10-02T21:22:09.294259Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 21:22:09.294374 waagent[1569]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:09.294374 waagent[1569]: pkts bytes target prot opt in out source destination Oct 2 21:22:09.294374 waagent[1569]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:09.294374 waagent[1569]: pkts bytes target prot opt in out source destination Oct 2 21:22:09.294374 waagent[1569]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:09.294374 waagent[1569]: pkts bytes target prot opt in out source destination Oct 2 21:22:09.294374 waagent[1569]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:22:09.294374 waagent[1569]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:22:09.294374 waagent[1569]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:22:09.303684 waagent[1569]: 2023-10-02T21:22:09.303581Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 21:22:09.303684 waagent[1569]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:09.303684 waagent[1569]: pkts bytes target prot opt in out source destination Oct 2 21:22:09.303684 waagent[1569]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:09.303684 waagent[1569]: pkts bytes target prot opt in out source destination Oct 2 21:22:09.303684 waagent[1569]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:09.303684 waagent[1569]: pkts bytes target prot opt in out source destination Oct 2 21:22:09.303684 waagent[1569]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:22:09.303684 waagent[1569]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:22:09.303684 waagent[1569]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:22:09.304550 waagent[1569]: 2023-10-02T21:22:09.304502Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 21:22:17.547221 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 21:22:39.005865 update_engine[1364]: I1002 21:22:39.005517 1364 update_attempter.cc:505] Updating boot flags... Oct 2 21:22:49.543267 systemd[1]: Created slice system-sshd.slice. Oct 2 21:22:49.544545 systemd[1]: Started sshd@0-10.200.20.16:22-10.200.12.6:46448.service. Oct 2 21:22:50.242594 sshd[1686]: Accepted publickey for core from 10.200.12.6 port 46448 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:50.260388 sshd[1686]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:50.265014 systemd[1]: Started session-3.scope. Oct 2 21:22:50.265550 systemd-logind[1361]: New session 3 of user core. Oct 2 21:22:50.610743 systemd[1]: Started sshd@1-10.200.20.16:22-10.200.12.6:46452.service. Oct 2 21:22:51.025589 sshd[1691]: Accepted publickey for core from 10.200.12.6 port 46452 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:51.027235 sshd[1691]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:51.031561 systemd[1]: Started session-4.scope. Oct 2 21:22:51.031981 systemd-logind[1361]: New session 4 of user core. Oct 2 21:22:51.331552 sshd[1691]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:51.334796 systemd-logind[1361]: Session 4 logged out. Waiting for processes to exit. Oct 2 21:22:51.334798 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 21:22:51.335819 systemd[1]: sshd@1-10.200.20.16:22-10.200.12.6:46452.service: Deactivated successfully. Oct 2 21:22:51.336628 systemd-logind[1361]: Removed session 4. Oct 2 21:22:51.406954 systemd[1]: Started sshd@2-10.200.20.16:22-10.200.12.6:46458.service. Oct 2 21:22:51.858482 sshd[1697]: Accepted publickey for core from 10.200.12.6 port 46458 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:51.860020 sshd[1697]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:51.863826 systemd-logind[1361]: New session 5 of user core. Oct 2 21:22:51.864262 systemd[1]: Started session-5.scope. Oct 2 21:22:52.182313 sshd[1697]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:52.184775 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 21:22:52.185329 systemd[1]: sshd@2-10.200.20.16:22-10.200.12.6:46458.service: Deactivated successfully. Oct 2 21:22:52.186090 systemd-logind[1361]: Session 5 logged out. Waiting for processes to exit. Oct 2 21:22:52.186824 systemd-logind[1361]: Removed session 5. Oct 2 21:22:52.257596 systemd[1]: Started sshd@3-10.200.20.16:22-10.200.12.6:46468.service. Oct 2 21:22:52.711246 sshd[1703]: Accepted publickey for core from 10.200.12.6 port 46468 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:52.713064 sshd[1703]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:52.717071 systemd-logind[1361]: New session 6 of user core. Oct 2 21:22:52.717501 systemd[1]: Started session-6.scope. Oct 2 21:22:53.041793 sshd[1703]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:53.044597 systemd-logind[1361]: Session 6 logged out. Waiting for processes to exit. Oct 2 21:22:53.044675 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 21:22:53.045740 systemd[1]: sshd@3-10.200.20.16:22-10.200.12.6:46468.service: Deactivated successfully. Oct 2 21:22:53.046464 systemd-logind[1361]: Removed session 6. Oct 2 21:22:53.110672 systemd[1]: Started sshd@4-10.200.20.16:22-10.200.12.6:46472.service. Oct 2 21:22:53.525637 sshd[1709]: Accepted publickey for core from 10.200.12.6 port 46472 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:53.527170 sshd[1709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:53.530970 systemd-logind[1361]: New session 7 of user core. Oct 2 21:22:53.531393 systemd[1]: Started session-7.scope. Oct 2 21:22:54.111893 sudo[1712]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 21:22:54.112434 sudo[1712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:22:54.156154 dbus-daemon[1349]: avc: received setenforce notice (enforcing=1) Oct 2 21:22:54.157866 sudo[1712]: pam_unix(sudo:session): session closed for user root Oct 2 21:22:54.239590 sshd[1709]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:54.242643 systemd-logind[1361]: Session 7 logged out. Waiting for processes to exit. Oct 2 21:22:54.242759 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 21:22:54.243338 systemd[1]: sshd@4-10.200.20.16:22-10.200.12.6:46472.service: Deactivated successfully. Oct 2 21:22:54.244334 systemd-logind[1361]: Removed session 7. Oct 2 21:22:54.316268 systemd[1]: Started sshd@5-10.200.20.16:22-10.200.12.6:46488.service. Oct 2 21:22:54.774810 sshd[1716]: Accepted publickey for core from 10.200.12.6 port 46488 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:54.776415 sshd[1716]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:54.780337 systemd-logind[1361]: New session 8 of user core. Oct 2 21:22:54.780771 systemd[1]: Started session-8.scope. Oct 2 21:22:55.036549 sudo[1720]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 21:22:55.036755 sudo[1720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:22:55.040210 sudo[1720]: pam_unix(sudo:session): session closed for user root Oct 2 21:22:55.046585 sudo[1719]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 21:22:55.047163 sudo[1719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:22:55.058898 systemd[1]: Stopping audit-rules.service... Oct 2 21:22:55.060000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:22:55.065404 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:22:55.065476 kernel: audit: type=1305 audit(1696281775.060:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:22:55.060000 audit[1723]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe779bfd0 a2=420 a3=0 items=0 ppid=1 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:55.076937 auditctl[1723]: No rules Oct 2 21:22:55.077439 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 21:22:55.077603 systemd[1]: Stopped audit-rules.service. Oct 2 21:22:55.079758 systemd[1]: Starting audit-rules.service... Oct 2 21:22:55.100969 kernel: audit: type=1300 audit(1696281775.060:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe779bfd0 a2=420 a3=0 items=0 ppid=1 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:55.060000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:22:55.107891 kernel: audit: type=1327 audit(1696281775.060:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:22:55.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.125078 kernel: audit: type=1131 audit(1696281775.076:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.125462 augenrules[1740]: No rules Oct 2 21:22:55.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.126728 systemd[1]: Finished audit-rules.service. Oct 2 21:22:55.143745 sudo[1719]: pam_unix(sudo:session): session closed for user root Oct 2 21:22:55.142000 audit[1719]: USER_END pid=1719 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.165489 kernel: audit: type=1130 audit(1696281775.126:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.165555 kernel: audit: type=1106 audit(1696281775.142:166): pid=1719 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.165581 kernel: audit: type=1104 audit(1696281775.142:167): pid=1719 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.142000 audit[1719]: CRED_DISP pid=1719 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.215835 sshd[1716]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:55.216000 audit[1716]: USER_END pid=1716 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.241711 systemd[1]: sshd@5-10.200.20.16:22-10.200.12.6:46488.service: Deactivated successfully. Oct 2 21:22:55.216000 audit[1716]: CRED_DISP pid=1716 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.261221 kernel: audit: type=1106 audit(1696281775.216:168): pid=1716 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.261332 kernel: audit: type=1104 audit(1696281775.216:169): pid=1716 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.242511 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 21:22:55.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.16:22-10.200.12.6:46488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.262021 systemd-logind[1361]: Session 8 logged out. Waiting for processes to exit. Oct 2 21:22:55.279972 kernel: audit: type=1131 audit(1696281775.241:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.16:22-10.200.12.6:46488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.280523 systemd-logind[1361]: Removed session 8. Oct 2 21:22:55.285206 systemd[1]: Started sshd@6-10.200.20.16:22-10.200.12.6:46500.service. Oct 2 21:22:55.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.16:22-10.200.12.6:46500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.700000 audit[1746]: USER_ACCT pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.701356 sshd[1746]: Accepted publickey for core from 10.200.12.6 port 46500 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:55.701000 audit[1746]: CRED_ACQ pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.701000 audit[1746]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4802bb0 a2=3 a3=1 items=0 ppid=1 pid=1746 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:55.701000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:22:55.703168 sshd[1746]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:55.707510 systemd[1]: Started session-9.scope. Oct 2 21:22:55.707983 systemd-logind[1361]: New session 9 of user core. Oct 2 21:22:55.711000 audit[1746]: USER_START pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.714000 audit[1748]: CRED_ACQ pid=1748 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.941000 audit[1749]: USER_ACCT pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.943126 sudo[1749]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 21:22:55.942000 audit[1749]: CRED_REFR pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.943692 sudo[1749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:22:55.944000 audit[1749]: USER_START pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:56.670796 systemd[1]: Starting docker.service... Oct 2 21:22:56.718259 env[1764]: time="2023-10-02T21:22:56.718197423Z" level=info msg="Starting up" Oct 2 21:22:56.720078 env[1764]: time="2023-10-02T21:22:56.720052257Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:22:56.720188 env[1764]: time="2023-10-02T21:22:56.720175536Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:22:56.720254 env[1764]: time="2023-10-02T21:22:56.720239256Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:22:56.720303 env[1764]: time="2023-10-02T21:22:56.720290936Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:22:56.722850 env[1764]: time="2023-10-02T21:22:56.722823728Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:22:56.723480 env[1764]: time="2023-10-02T21:22:56.723461006Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:22:56.723589 env[1764]: time="2023-10-02T21:22:56.723572646Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:22:56.723642 env[1764]: time="2023-10-02T21:22:56.723629846Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:22:56.729514 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport370100269-merged.mount: Deactivated successfully. Oct 2 21:22:56.874749 env[1764]: time="2023-10-02T21:22:56.874714133Z" level=info msg="Loading containers: start." Oct 2 21:22:56.985000 audit[1791]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.985000 audit[1791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe834f090 a2=0 a3=1 items=0 ppid=1764 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.985000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 21:22:56.988000 audit[1793]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.988000 audit[1793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe0155910 a2=0 a3=1 items=0 ppid=1764 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.988000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 21:22:56.991000 audit[1795]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1795 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.991000 audit[1795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffcf4aede0 a2=0 a3=1 items=0 ppid=1764 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:22:56.994000 audit[1797]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.994000 audit[1797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe01e0340 a2=0 a3=1 items=0 ppid=1764 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.994000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:22:56.996000 audit[1799]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.996000 audit[1799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe3be8920 a2=0 a3=1 items=0 ppid=1764 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.996000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 21:22:56.999000 audit[1801]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1801 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.999000 audit[1801]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcb436aa0 a2=0 a3=1 items=0 ppid=1764 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.999000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 21:22:57.016000 audit[1803]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.016000 audit[1803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc3541300 a2=0 a3=1 items=0 ppid=1764 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.016000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 21:22:57.020000 audit[1805]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.020000 audit[1805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc72e4410 a2=0 a3=1 items=0 ppid=1764 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.020000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 21:22:57.023000 audit[1807]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1807 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.023000 audit[1807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffffe5d00b0 a2=0 a3=1 items=0 ppid=1764 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:57.042000 audit[1811]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.042000 audit[1811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe5f87520 a2=0 a3=1 items=0 ppid=1764 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.042000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:57.043000 audit[1812]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1812 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.043000 audit[1812]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc7fb9230 a2=0 a3=1 items=0 ppid=1764 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.043000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:57.111944 kernel: Initializing XFRM netlink socket Oct 2 21:22:57.136487 env[1764]: time="2023-10-02T21:22:57.136453325Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 21:22:57.234000 audit[1820]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.234000 audit[1820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc0b88d80 a2=0 a3=1 items=0 ppid=1764 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.234000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 21:22:57.268000 audit[1824]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.268000 audit[1824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc8265990 a2=0 a3=1 items=0 ppid=1764 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.268000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 21:22:57.273000 audit[1827]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1827 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.273000 audit[1827]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc325a660 a2=0 a3=1 items=0 ppid=1764 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.273000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 21:22:57.276000 audit[1829]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1829 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.276000 audit[1829]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff20e7180 a2=0 a3=1 items=0 ppid=1764 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.276000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 21:22:57.278000 audit[1831]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1831 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.278000 audit[1831]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffff0b3aa0 a2=0 a3=1 items=0 ppid=1764 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.278000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 21:22:57.281000 audit[1833]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1833 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.281000 audit[1833]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd6332ec0 a2=0 a3=1 items=0 ppid=1764 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.281000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 21:22:57.284000 audit[1835]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1835 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.284000 audit[1835]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc80cd1c0 a2=0 a3=1 items=0 ppid=1764 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.284000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 21:22:57.287000 audit[1837]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.287000 audit[1837]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc9c154b0 a2=0 a3=1 items=0 ppid=1764 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.287000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 21:22:57.290000 audit[1839]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1839 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.290000 audit[1839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffffa9c3630 a2=0 a3=1 items=0 ppid=1764 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.290000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:22:57.294000 audit[1841]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1841 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.294000 audit[1841]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffff1dfd460 a2=0 a3=1 items=0 ppid=1764 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.294000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:22:57.297000 audit[1843]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.297000 audit[1843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe514cff0 a2=0 a3=1 items=0 ppid=1764 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.297000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 21:22:57.298542 systemd-networkd[1528]: docker0: Link UP Oct 2 21:22:57.319000 audit[1847]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1847 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.319000 audit[1847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe61ea160 a2=0 a3=1 items=0 ppid=1764 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.319000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:57.321000 audit[1848]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1848 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.321000 audit[1848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff708c160 a2=0 a3=1 items=0 ppid=1764 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.321000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:57.322430 env[1764]: time="2023-10-02T21:22:57.322401798Z" level=info msg="Loading containers: done." Oct 2 21:22:57.334030 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3531770813-merged.mount: Deactivated successfully. Oct 2 21:22:57.386796 env[1764]: time="2023-10-02T21:22:57.386755122Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 21:22:57.387208 env[1764]: time="2023-10-02T21:22:57.387189720Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 21:22:57.387376 env[1764]: time="2023-10-02T21:22:57.387362360Z" level=info msg="Daemon has completed initialization" Oct 2 21:22:57.421601 systemd[1]: Started docker.service. Oct 2 21:22:57.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:57.427711 env[1764]: time="2023-10-02T21:22:57.427606397Z" level=info msg="API listen on /run/docker.sock" Oct 2 21:22:57.451172 systemd[1]: Reloading. Oct 2 21:22:57.516202 /usr/lib/systemd/system-generators/torcx-generator[1895]: time="2023-10-02T21:22:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:22:57.516230 /usr/lib/systemd/system-generators/torcx-generator[1895]: time="2023-10-02T21:22:57Z" level=info msg="torcx already run" Oct 2 21:22:57.639681 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:22:57.639700 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:22:57.654755 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit: BPF prog-id=32 op=LOAD Oct 2 21:22:57.720000 audit: BPF prog-id=21 op=UNLOAD Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit: BPF prog-id=33 op=LOAD Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit: BPF prog-id=34 op=LOAD Oct 2 21:22:57.720000 audit: BPF prog-id=22 op=UNLOAD Oct 2 21:22:57.720000 audit: BPF prog-id=23 op=UNLOAD Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit: BPF prog-id=35 op=LOAD Oct 2 21:22:57.721000 audit: BPF prog-id=31 op=UNLOAD Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.721000 audit: BPF prog-id=36 op=LOAD Oct 2 21:22:57.721000 audit: BPF prog-id=24 op=UNLOAD Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.723000 audit: BPF prog-id=37 op=LOAD Oct 2 21:22:57.723000 audit: BPF prog-id=25 op=UNLOAD Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit: BPF prog-id=38 op=LOAD Oct 2 21:22:57.724000 audit: BPF prog-id=26 op=UNLOAD Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit: BPF prog-id=39 op=LOAD Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.724000 audit: BPF prog-id=40 op=LOAD Oct 2 21:22:57.724000 audit: BPF prog-id=27 op=UNLOAD Oct 2 21:22:57.724000 audit: BPF prog-id=28 op=UNLOAD Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit: BPF prog-id=41 op=LOAD Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.725000 audit: BPF prog-id=42 op=LOAD Oct 2 21:22:57.725000 audit: BPF prog-id=18 op=UNLOAD Oct 2 21:22:57.725000 audit: BPF prog-id=19 op=UNLOAD Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit: BPF prog-id=43 op=LOAD Oct 2 21:22:57.727000 audit: BPF prog-id=15 op=UNLOAD Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit: BPF prog-id=44 op=LOAD Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.727000 audit: BPF prog-id=45 op=LOAD Oct 2 21:22:57.727000 audit: BPF prog-id=16 op=UNLOAD Oct 2 21:22:57.727000 audit: BPF prog-id=17 op=UNLOAD Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.728000 audit: BPF prog-id=46 op=LOAD Oct 2 21:22:57.728000 audit: BPF prog-id=29 op=UNLOAD Oct 2 21:22:57.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:57.735748 systemd[1]: Started kubelet.service. Oct 2 21:22:57.808961 kubelet[1954]: E1002 21:22:57.808790 1954 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:22:57.811870 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:22:57.812010 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:22:57.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:02.052603 env[1374]: time="2023-10-02T21:23:02.052559796Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 21:23:03.012136 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1314301621.mount: Deactivated successfully. Oct 2 21:23:06.497705 env[1374]: time="2023-10-02T21:23:06.497649122Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:06.504396 env[1374]: time="2023-10-02T21:23:06.504362186Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:06.507628 env[1374]: time="2023-10-02T21:23:06.507602098Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:06.511828 env[1374]: time="2023-10-02T21:23:06.511803248Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:06.512557 env[1374]: time="2023-10-02T21:23:06.512529406Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 21:23:06.525939 env[1374]: time="2023-10-02T21:23:06.525883453Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 21:23:07.889785 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 21:23:07.889993 systemd[1]: Stopped kubelet.service. Oct 2 21:23:07.901067 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 21:23:07.901177 kernel: audit: type=1130 audit(1696281787.889:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.891606 systemd[1]: Started kubelet.service. Oct 2 21:23:07.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.928088 kernel: audit: type=1131 audit(1696281787.889:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.928222 kernel: audit: type=1130 audit(1696281787.889:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.996557 kubelet[1977]: E1002 21:23:07.996498 1977 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:23:07.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:07.999606 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:23:07.999735 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:23:08.016946 kernel: audit: type=1131 audit(1696281787.998:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:09.875586 env[1374]: time="2023-10-02T21:23:09.875527375Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:09.881902 env[1374]: time="2023-10-02T21:23:09.881865880Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:09.887497 env[1374]: time="2023-10-02T21:23:09.887462028Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:09.893291 env[1374]: time="2023-10-02T21:23:09.893257095Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:09.894069 env[1374]: time="2023-10-02T21:23:09.894038693Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 21:23:09.908129 env[1374]: time="2023-10-02T21:23:09.908093821Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 21:23:12.358706 env[1374]: time="2023-10-02T21:23:12.358648274Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:12.365245 env[1374]: time="2023-10-02T21:23:12.365209660Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:12.370699 env[1374]: time="2023-10-02T21:23:12.370666649Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:12.375088 env[1374]: time="2023-10-02T21:23:12.375043360Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:12.375962 env[1374]: time="2023-10-02T21:23:12.375898238Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 21:23:12.389214 env[1374]: time="2023-10-02T21:23:12.389187970Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 21:23:13.534643 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3321289203.mount: Deactivated successfully. Oct 2 21:23:14.650274 env[1374]: time="2023-10-02T21:23:14.650226778Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:14.657091 env[1374]: time="2023-10-02T21:23:14.657055045Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:14.661072 env[1374]: time="2023-10-02T21:23:14.661046037Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:14.665590 env[1374]: time="2023-10-02T21:23:14.665566868Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:14.666234 env[1374]: time="2023-10-02T21:23:14.666207386Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 21:23:14.680134 env[1374]: time="2023-10-02T21:23:14.680098839Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 21:23:15.308812 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4255264475.mount: Deactivated successfully. Oct 2 21:23:15.334898 env[1374]: time="2023-10-02T21:23:15.334854103Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:15.344816 env[1374]: time="2023-10-02T21:23:15.344774364Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:15.350848 env[1374]: time="2023-10-02T21:23:15.350804432Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:15.359351 env[1374]: time="2023-10-02T21:23:15.359297896Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:15.359745 env[1374]: time="2023-10-02T21:23:15.359720855Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 21:23:15.374442 env[1374]: time="2023-10-02T21:23:15.374407266Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 21:23:16.288695 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1368924.mount: Deactivated successfully. Oct 2 21:23:18.139838 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 21:23:18.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:18.140034 systemd[1]: Stopped kubelet.service. Oct 2 21:23:18.159137 systemd[1]: Started kubelet.service. Oct 2 21:23:18.182205 kernel: audit: type=1130 audit(1696281798.139:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:18.182330 kernel: audit: type=1131 audit(1696281798.139:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:18.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:18.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:18.201031 kernel: audit: type=1130 audit(1696281798.158:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:18.284341 kubelet[2006]: E1002 21:23:18.284295 2006 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:23:18.286395 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:23:18.286533 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:23:18.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:18.304941 kernel: audit: type=1131 audit(1696281798.285:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:19.367020 env[1374]: time="2023-10-02T21:23:19.366974459Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:19.374666 env[1374]: time="2023-10-02T21:23:19.374636325Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:19.379138 env[1374]: time="2023-10-02T21:23:19.379112917Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:19.384555 env[1374]: time="2023-10-02T21:23:19.384531948Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:19.385123 env[1374]: time="2023-10-02T21:23:19.385098107Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 21:23:19.399364 env[1374]: time="2023-10-02T21:23:19.399338561Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 21:23:20.105994 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2862925223.mount: Deactivated successfully. Oct 2 21:23:20.544492 env[1374]: time="2023-10-02T21:23:20.544440737Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:20.550496 env[1374]: time="2023-10-02T21:23:20.550454206Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:20.555912 env[1374]: time="2023-10-02T21:23:20.555871637Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:20.559902 env[1374]: time="2023-10-02T21:23:20.559870350Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:20.560519 env[1374]: time="2023-10-02T21:23:20.560487748Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 21:23:25.367002 systemd[1]: Stopped kubelet.service. Oct 2 21:23:25.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:25.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:25.405259 kernel: audit: type=1130 audit(1696281805.366:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:25.405394 kernel: audit: type=1131 audit(1696281805.366:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:25.413042 systemd[1]: Reloading. Oct 2 21:23:25.502396 /usr/lib/systemd/system-generators/torcx-generator[2097]: time="2023-10-02T21:23:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:23:25.502424 /usr/lib/systemd/system-generators/torcx-generator[2097]: time="2023-10-02T21:23:25Z" level=info msg="torcx already run" Oct 2 21:23:25.618178 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:23:25.618871 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:23:25.634496 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.737184 kernel: audit: type=1400 audit(1696281805.701:389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.737285 kernel: audit: type=1400 audit(1696281805.701:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.737309 kernel: audit: type=1400 audit(1696281805.701:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755990 kernel: audit: type=1400 audit(1696281805.701:392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.791436 kernel: audit: type=1400 audit(1696281805.701:393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.791551 kernel: audit: type=1400 audit(1696281805.701:394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.825699 kernel: audit: type=1400 audit(1696281805.701:395): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.825821 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit: BPF prog-id=47 op=LOAD Oct 2 21:23:25.718000 audit: BPF prog-id=32 op=UNLOAD Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit: BPF prog-id=48 op=LOAD Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit: BPF prog-id=49 op=LOAD Oct 2 21:23:25.755000 audit: BPF prog-id=33 op=UNLOAD Oct 2 21:23:25.755000 audit: BPF prog-id=34 op=UNLOAD Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit: BPF prog-id=50 op=LOAD Oct 2 21:23:25.773000 audit: BPF prog-id=35 op=UNLOAD Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.790000 audit: BPF prog-id=51 op=LOAD Oct 2 21:23:25.790000 audit: BPF prog-id=36 op=UNLOAD Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.807000 audit: BPF prog-id=52 op=LOAD Oct 2 21:23:25.807000 audit: BPF prog-id=37 op=UNLOAD Oct 2 21:23:25.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit: BPF prog-id=53 op=LOAD Oct 2 21:23:25.830000 audit: BPF prog-id=38 op=UNLOAD Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit: BPF prog-id=54 op=LOAD Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit: BPF prog-id=55 op=LOAD Oct 2 21:23:25.830000 audit: BPF prog-id=39 op=UNLOAD Oct 2 21:23:25.830000 audit: BPF prog-id=40 op=UNLOAD Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit: BPF prog-id=56 op=LOAD Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.830000 audit: BPF prog-id=57 op=LOAD Oct 2 21:23:25.830000 audit: BPF prog-id=41 op=UNLOAD Oct 2 21:23:25.830000 audit: BPF prog-id=42 op=UNLOAD Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit: BPF prog-id=58 op=LOAD Oct 2 21:23:25.832000 audit: BPF prog-id=43 op=UNLOAD Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit: BPF prog-id=59 op=LOAD Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.832000 audit: BPF prog-id=60 op=LOAD Oct 2 21:23:25.832000 audit: BPF prog-id=44 op=UNLOAD Oct 2 21:23:25.832000 audit: BPF prog-id=45 op=UNLOAD Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:25.833000 audit: BPF prog-id=61 op=LOAD Oct 2 21:23:25.833000 audit: BPF prog-id=46 op=UNLOAD Oct 2 21:23:25.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:25.848961 systemd[1]: Started kubelet.service. Oct 2 21:23:25.927284 kubelet[2157]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:23:25.927624 kubelet[2157]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:23:25.927836 kubelet[2157]: I1002 21:23:25.927803 2157 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:23:25.929158 kubelet[2157]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:23:25.929239 kubelet[2157]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:23:26.885645 kubelet[2157]: I1002 21:23:26.885606 2157 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 21:23:26.885645 kubelet[2157]: I1002 21:23:26.885634 2157 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:23:26.885847 kubelet[2157]: I1002 21:23:26.885828 2157 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 21:23:26.889187 kubelet[2157]: E1002 21:23:26.889165 2157 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.16:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:26.889342 kubelet[2157]: I1002 21:23:26.889330 2157 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:23:26.891184 kubelet[2157]: W1002 21:23:26.891164 2157 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:23:26.891682 kubelet[2157]: I1002 21:23:26.891666 2157 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:23:26.891984 kubelet[2157]: I1002 21:23:26.891968 2157 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:23:26.892052 kubelet[2157]: I1002 21:23:26.892036 2157 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 21:23:26.892143 kubelet[2157]: I1002 21:23:26.892078 2157 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 21:23:26.892143 kubelet[2157]: I1002 21:23:26.892090 2157 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 21:23:26.892231 kubelet[2157]: I1002 21:23:26.892214 2157 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:23:26.895813 kubelet[2157]: I1002 21:23:26.895790 2157 kubelet.go:398] "Attempting to sync node with API server" Oct 2 21:23:26.895813 kubelet[2157]: I1002 21:23:26.895816 2157 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:23:26.895896 kubelet[2157]: I1002 21:23:26.895880 2157 kubelet.go:297] "Adding apiserver pod source" Oct 2 21:23:26.895896 kubelet[2157]: I1002 21:23:26.895892 2157 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:23:26.899567 kubelet[2157]: I1002 21:23:26.899548 2157 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:23:26.900178 kubelet[2157]: W1002 21:23:26.900160 2157 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 21:23:26.900682 kubelet[2157]: I1002 21:23:26.900663 2157 server.go:1186] "Started kubelet" Oct 2 21:23:26.900914 kubelet[2157]: W1002 21:23:26.900879 2157 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.16:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-32a653638a&limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:26.901042 kubelet[2157]: E1002 21:23:26.901029 2157 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.16:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-32a653638a&limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:26.901093 kubelet[2157]: W1002 21:23:26.900978 2157 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.16:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:26.901153 kubelet[2157]: E1002 21:23:26.901144 2157 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.16:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:26.901434 kubelet[2157]: I1002 21:23:26.901411 2157 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:23:26.902035 kubelet[2157]: I1002 21:23:26.901994 2157 server.go:451] "Adding debug handlers to kubelet server" Oct 2 21:23:26.902621 kubelet[2157]: E1002 21:23:26.902476 2157 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eb453d10", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 900641040, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 900641040, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.20.16:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.16:6443: connect: connection refused'(may retry after sleeping) Oct 2 21:23:26.905559 kubelet[2157]: E1002 21:23:26.905526 2157 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:23:26.905559 kubelet[2157]: E1002 21:23:26.905557 2157 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:23:26.904000 audit[2157]: AVC avc: denied { mac_admin } for pid=2157 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:26.904000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:26.904000 audit[2157]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000fc44b0 a1=4000765f80 a2=4000fc4480 a3=25 items=0 ppid=1 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.904000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:26.906321 kubelet[2157]: I1002 21:23:26.906305 2157 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:23:26.905000 audit[2157]: AVC avc: denied { mac_admin } for pid=2157 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:26.905000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:26.905000 audit[2157]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ae9500 a1=4000765f98 a2=4000fc4540 a3=25 items=0 ppid=1 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.905000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:26.906606 kubelet[2157]: I1002 21:23:26.906594 2157 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:23:26.906728 kubelet[2157]: I1002 21:23:26.906717 2157 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:23:26.910410 kubelet[2157]: E1002 21:23:26.910392 2157 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-32a653638a\" not found" Oct 2 21:23:26.910980 kubelet[2157]: I1002 21:23:26.910957 2157 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 21:23:26.911043 kubelet[2157]: I1002 21:23:26.911030 2157 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 21:23:26.911466 kubelet[2157]: W1002 21:23:26.911425 2157 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.16:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:26.911596 kubelet[2157]: E1002 21:23:26.911584 2157 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.16:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:26.911710 kubelet[2157]: E1002 21:23:26.911695 2157 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.20.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-32a653638a?timeout=10s": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:26.916000 audit[2168]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:26.916000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd934c860 a2=0 a3=1 items=0 ppid=2157 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:23:26.919000 audit[2169]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:26.919000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe21f4b20 a2=0 a3=1 items=0 ppid=2157 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.919000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:23:26.924000 audit[2171]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:26.924000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff072b430 a2=0 a3=1 items=0 ppid=2157 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.924000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:23:26.927000 audit[2173]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:26.927000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe7da4430 a2=0 a3=1 items=0 ppid=2157 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.927000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:23:26.958507 kubelet[2157]: I1002 21:23:26.958483 2157 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:23:26.958850 kubelet[2157]: I1002 21:23:26.958837 2157 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:23:26.958914 kubelet[2157]: I1002 21:23:26.958905 2157 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:23:26.967397 kubelet[2157]: I1002 21:23:26.967372 2157 policy_none.go:49] "None policy: Start" Oct 2 21:23:26.968205 kubelet[2157]: I1002 21:23:26.968192 2157 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:23:26.968327 kubelet[2157]: I1002 21:23:26.968316 2157 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:23:26.978198 systemd[1]: Created slice kubepods.slice. Oct 2 21:23:26.978000 audit[2179]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:26.978000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffcffe8e40 a2=0 a3=1 items=0 ppid=2157 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 21:23:26.983005 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 21:23:26.984000 audit[2181]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:26.984000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdccacdf0 a2=0 a3=1 items=0 ppid=2157 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.984000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 21:23:26.986486 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 21:23:26.993600 kubelet[2157]: I1002 21:23:26.993581 2157 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:23:26.992000 audit[2157]: AVC avc: denied { mac_admin } for pid=2157 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:26.992000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:26.992000 audit[2157]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a78c30 a1=4000a5b878 a2=4000a78c00 a3=25 items=0 ppid=1 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:26.992000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:26.994514 kubelet[2157]: I1002 21:23:26.994490 2157 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:23:26.994862 kubelet[2157]: I1002 21:23:26.994847 2157 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:23:26.995867 kubelet[2157]: E1002 21:23:26.995758 2157 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-32a653638a\" not found" Oct 2 21:23:27.012678 kubelet[2157]: I1002 21:23:27.012621 2157 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.011000 audit[2184]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.011000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd8ca00a0 a2=0 a3=1 items=0 ppid=2157 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.013150 kubelet[2157]: E1002 21:23:27.013056 2157 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.16:6443/api/v1/nodes\": dial tcp 10.200.20.16:6443: connect: connection refused" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.011000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 21:23:27.056000 audit[2187]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.056000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffc19344a0 a2=0 a3=1 items=0 ppid=2157 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.056000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 21:23:27.058000 audit[2188]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.058000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff6349100 a2=0 a3=1 items=0 ppid=2157 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.058000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 21:23:27.059000 audit[2189]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.059000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd144440 a2=0 a3=1 items=0 ppid=2157 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:23:27.063000 audit[2191]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.063000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc532ef80 a2=0 a3=1 items=0 ppid=2157 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 21:23:27.066000 audit[2193]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.066000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffcc2cd420 a2=0 a3=1 items=0 ppid=2157 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:23:27.070000 audit[2195]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.070000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffefc2ef70 a2=0 a3=1 items=0 ppid=2157 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.070000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 21:23:27.073000 audit[2197]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.073000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffc1682a20 a2=0 a3=1 items=0 ppid=2157 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.073000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 21:23:27.077000 audit[2199]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.077000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffffe791210 a2=0 a3=1 items=0 ppid=2157 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 21:23:27.078253 kubelet[2157]: I1002 21:23:27.078233 2157 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 21:23:27.078000 audit[2200]: NETFILTER_CFG table=mangle:44 family=10 entries=2 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.078000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff7a95400 a2=0 a3=1 items=0 ppid=2157 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.078000 audit[2201]: NETFILTER_CFG table=mangle:45 family=2 entries=1 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.078000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe13e4520 a2=0 a3=1 items=0 ppid=2157 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:23:27.078000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:23:27.080000 audit[2202]: NETFILTER_CFG table=nat:46 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.080000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee6ad8b0 a2=0 a3=1 items=0 ppid=2157 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.080000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:23:27.081000 audit[2203]: NETFILTER_CFG table=nat:47 family=10 entries=2 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.081000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffcd6640b0 a2=0 a3=1 items=0 ppid=2157 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.081000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 21:23:27.082000 audit[2204]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:27.082000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe87824c0 a2=0 a3=1 items=0 ppid=2157 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.082000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:23:27.084000 audit[2206]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.084000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffec609ec0 a2=0 a3=1 items=0 ppid=2157 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.084000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 21:23:27.086000 audit[2207]: NETFILTER_CFG table=filter:50 family=10 entries=2 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.086000 audit[2207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffe5565540 a2=0 a3=1 items=0 ppid=2157 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.086000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:23:27.089000 audit[2209]: NETFILTER_CFG table=filter:51 family=10 entries=1 op=nft_register_rule pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.089000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffe1e6c2e0 a2=0 a3=1 items=0 ppid=2157 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.089000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 21:23:27.091000 audit[2210]: NETFILTER_CFG table=nat:52 family=10 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.091000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffec4cae50 a2=0 a3=1 items=0 ppid=2157 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.091000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 21:23:27.093000 audit[2211]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.093000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffdf8dfb0 a2=0 a3=1 items=0 ppid=2157 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.093000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:23:27.096000 audit[2213]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.096000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff2446970 a2=0 a3=1 items=0 ppid=2157 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 21:23:27.099000 audit[2215]: NETFILTER_CFG table=nat:55 family=10 entries=2 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.099000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffcc027eb0 a2=0 a3=1 items=0 ppid=2157 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.099000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:23:27.103000 audit[2217]: NETFILTER_CFG table=nat:56 family=10 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.103000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffe4f20f50 a2=0 a3=1 items=0 ppid=2157 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.103000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 21:23:27.106000 audit[2219]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.106000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffd182f1e0 a2=0 a3=1 items=0 ppid=2157 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.106000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 21:23:27.112568 kubelet[2157]: E1002 21:23:27.112533 2157 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.20.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-32a653638a?timeout=10s": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:27.127000 audit[2221]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.127000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=fffffa04aad0 a2=0 a3=1 items=0 ppid=2157 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.127000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 21:23:27.128437 kubelet[2157]: I1002 21:23:27.128383 2157 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 21:23:27.128437 kubelet[2157]: I1002 21:23:27.128416 2157 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 21:23:27.128498 kubelet[2157]: I1002 21:23:27.128448 2157 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 21:23:27.128498 kubelet[2157]: E1002 21:23:27.128488 2157 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 21:23:27.129114 kubelet[2157]: W1002 21:23:27.129077 2157 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.16:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:27.129114 kubelet[2157]: E1002 21:23:27.129109 2157 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.16:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:27.129000 audit[2222]: NETFILTER_CFG table=mangle:59 family=10 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.129000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd06756b0 a2=0 a3=1 items=0 ppid=2157 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.129000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:23:27.131000 audit[2223]: NETFILTER_CFG table=nat:60 family=10 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.131000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0a9d1b0 a2=0 a3=1 items=0 ppid=2157 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.131000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:23:27.132000 audit[2224]: NETFILTER_CFG table=filter:61 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:27.132000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd8618c80 a2=0 a3=1 items=0 ppid=2157 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:27.132000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:23:27.215052 kubelet[2157]: I1002 21:23:27.215019 2157 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.215426 kubelet[2157]: E1002 21:23:27.215403 2157 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.16:6443/api/v1/nodes\": dial tcp 10.200.20.16:6443: connect: connection refused" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.229578 kubelet[2157]: I1002 21:23:27.229552 2157 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:27.231032 kubelet[2157]: I1002 21:23:27.231013 2157 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:27.232431 kubelet[2157]: I1002 21:23:27.232415 2157 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:27.233573 kubelet[2157]: I1002 21:23:27.233478 2157 status_manager.go:698] "Failed to get status for pod" podUID=f92e7f0206c32066a78bcb11a38cf62b pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" err="Get \"https://10.200.20.16:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-32a653638a\": dial tcp 10.200.20.16:6443: connect: connection refused" Oct 2 21:23:27.237777 systemd[1]: Created slice kubepods-burstable-podf92e7f0206c32066a78bcb11a38cf62b.slice. Oct 2 21:23:27.239000 kubelet[2157]: I1002 21:23:27.238976 2157 status_manager.go:698] "Failed to get status for pod" podUID=faea0fea1d262012824b61d5d959fb8d pod="kube-system/kube-scheduler-ci-3510.3.0-a-32a653638a" err="Get \"https://10.200.20.16:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-32a653638a\": dial tcp 10.200.20.16:6443: connect: connection refused" Oct 2 21:23:27.240120 kubelet[2157]: I1002 21:23:27.240107 2157 status_manager.go:698] "Failed to get status for pod" podUID=33372a52998fd38705f5084e69052a7b pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" err="Get \"https://10.200.20.16:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-32a653638a\": dial tcp 10.200.20.16:6443: connect: connection refused" Oct 2 21:23:27.249599 systemd[1]: Created slice kubepods-burstable-podfaea0fea1d262012824b61d5d959fb8d.slice. Oct 2 21:23:27.253608 systemd[1]: Created slice kubepods-burstable-pod33372a52998fd38705f5084e69052a7b.slice. Oct 2 21:23:27.313128 kubelet[2157]: I1002 21:23:27.313107 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.313300 kubelet[2157]: I1002 21:23:27.313289 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f92e7f0206c32066a78bcb11a38cf62b-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-32a653638a\" (UID: \"f92e7f0206c32066a78bcb11a38cf62b\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.313419 kubelet[2157]: I1002 21:23:27.313408 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f92e7f0206c32066a78bcb11a38cf62b-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-32a653638a\" (UID: \"f92e7f0206c32066a78bcb11a38cf62b\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.313525 kubelet[2157]: I1002 21:23:27.313514 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.313633 kubelet[2157]: I1002 21:23:27.313623 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.313792 kubelet[2157]: I1002 21:23:27.313781 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f92e7f0206c32066a78bcb11a38cf62b-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-32a653638a\" (UID: \"f92e7f0206c32066a78bcb11a38cf62b\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.313903 kubelet[2157]: I1002 21:23:27.313894 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.314011 kubelet[2157]: I1002 21:23:27.314001 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.314106 kubelet[2157]: I1002 21:23:27.314097 2157 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/faea0fea1d262012824b61d5d959fb8d-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-32a653638a\" (UID: \"faea0fea1d262012824b61d5d959fb8d\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.513085 kubelet[2157]: E1002 21:23:27.512994 2157 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.20.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-32a653638a?timeout=10s": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:27.548218 env[1374]: time="2023-10-02T21:23:27.547972822Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-32a653638a,Uid:f92e7f0206c32066a78bcb11a38cf62b,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:27.553257 env[1374]: time="2023-10-02T21:23:27.553222814Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-32a653638a,Uid:faea0fea1d262012824b61d5d959fb8d,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:27.556708 env[1374]: time="2023-10-02T21:23:27.556608609Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-32a653638a,Uid:33372a52998fd38705f5084e69052a7b,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:27.617550 kubelet[2157]: I1002 21:23:27.617500 2157 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.617897 kubelet[2157]: E1002 21:23:27.617878 2157 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.16:6443/api/v1/nodes\": dial tcp 10.200.20.16:6443: connect: connection refused" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:27.943497 kubelet[2157]: W1002 21:23:27.943421 2157 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.16:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:27.943497 kubelet[2157]: E1002 21:23:27.943463 2157 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.16:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.264403 kubelet[2157]: W1002 21:23:28.264228 2157 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.16:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.264403 kubelet[2157]: E1002 21:23:28.264285 2157 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.16:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.313907 kubelet[2157]: E1002 21:23:28.313869 2157 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.20.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-32a653638a?timeout=10s": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.381379 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount918826607.mount: Deactivated successfully. Oct 2 21:23:28.416990 env[1374]: time="2023-10-02T21:23:28.416938125Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.420243 kubelet[2157]: I1002 21:23:28.419857 2157 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:28.420243 kubelet[2157]: E1002 21:23:28.420201 2157 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.16:6443/api/v1/nodes\": dial tcp 10.200.20.16:6443: connect: connection refused" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:28.421098 env[1374]: time="2023-10-02T21:23:28.421060799Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.435552 env[1374]: time="2023-10-02T21:23:28.435508857Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.438995 env[1374]: time="2023-10-02T21:23:28.438962052Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.444765 kubelet[2157]: W1002 21:23:28.444678 2157 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.16:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-32a653638a&limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.444765 kubelet[2157]: E1002 21:23:28.444733 2157 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.16:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-32a653638a&limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.447318 env[1374]: time="2023-10-02T21:23:28.447291000Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.450970 env[1374]: time="2023-10-02T21:23:28.450946195Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.457224 env[1374]: time="2023-10-02T21:23:28.457196825Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.460333 env[1374]: time="2023-10-02T21:23:28.460309661Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.462956 env[1374]: time="2023-10-02T21:23:28.462910177Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.466554 env[1374]: time="2023-10-02T21:23:28.466515092Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.472762 env[1374]: time="2023-10-02T21:23:28.472737362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.476303 kubelet[2157]: W1002 21:23:28.476255 2157 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.16:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.476303 kubelet[2157]: E1002 21:23:28.476288 2157 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.16:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.484754 env[1374]: time="2023-10-02T21:23:28.484716625Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:28.561520 env[1374]: time="2023-10-02T21:23:28.561355032Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:28.561520 env[1374]: time="2023-10-02T21:23:28.561397232Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:28.561520 env[1374]: time="2023-10-02T21:23:28.561407872Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:28.562406 env[1374]: time="2023-10-02T21:23:28.562340750Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ca19e67d6b4cdc1776b452e52866a07a2ad34d365387f51376c84fa276640329 pid=2233 runtime=io.containerd.runc.v2 Oct 2 21:23:28.573119 env[1374]: time="2023-10-02T21:23:28.573050694Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:28.573235 env[1374]: time="2023-10-02T21:23:28.573127774Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:28.573235 env[1374]: time="2023-10-02T21:23:28.573153734Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:28.573329 env[1374]: time="2023-10-02T21:23:28.573295774Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/68140449a20610047f7b2f6499ecb422b30c5df3f6980b6f824c6cfb96b2d9b6 pid=2248 runtime=io.containerd.runc.v2 Oct 2 21:23:28.581967 env[1374]: time="2023-10-02T21:23:28.580104044Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:28.581967 env[1374]: time="2023-10-02T21:23:28.580140444Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:28.581967 env[1374]: time="2023-10-02T21:23:28.580149884Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:28.581967 env[1374]: time="2023-10-02T21:23:28.580260124Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e3823db3747554a27251334d544e2c482669b893c1d5a15ed43747bb3c42be02 pid=2266 runtime=io.containerd.runc.v2 Oct 2 21:23:28.597356 systemd[1]: Started cri-containerd-e3823db3747554a27251334d544e2c482669b893c1d5a15ed43747bb3c42be02.scope. Oct 2 21:23:28.611090 systemd[1]: Started cri-containerd-ca19e67d6b4cdc1776b452e52866a07a2ad34d365387f51376c84fa276640329.scope. Oct 2 21:23:28.619615 systemd[1]: Started cri-containerd-68140449a20610047f7b2f6499ecb422b30c5df3f6980b6f824c6cfb96b2d9b6.scope. Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit: BPF prog-id=62 op=LOAD Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2266 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533383233646233373437353534613237323531333334643534346532 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2266 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533383233646233373437353534613237323531333334643534346532 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit: BPF prog-id=63 op=LOAD Oct 2 21:23:28.630000 audit[2278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2266 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533383233646233373437353534613237323531333334643534346532 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.630000 audit: BPF prog-id=64 op=LOAD Oct 2 21:23:28.630000 audit[2278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2266 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533383233646233373437353534613237323531333334643534346532 Oct 2 21:23:28.630000 audit: BPF prog-id=64 op=UNLOAD Oct 2 21:23:28.630000 audit: BPF prog-id=63 op=UNLOAD Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { perfmon } for pid=2278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit[2278]: AVC avc: denied { bpf } for pid=2278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.631000 audit: BPF prog-id=65 op=LOAD Oct 2 21:23:28.631000 audit[2278]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2266 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533383233646233373437353534613237323531333334643534346532 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.636000 audit: BPF prog-id=66 op=LOAD Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2248 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638313430343439613230363130303437663762326636343939656362 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2248 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638313430343439613230363130303437663762326636343939656362 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit: BPF prog-id=67 op=LOAD Oct 2 21:23:28.637000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2248 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638313430343439613230363130303437663762326636343939656362 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit: BPF prog-id=68 op=LOAD Oct 2 21:23:28.637000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2248 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638313430343439613230363130303437663762326636343939656362 Oct 2 21:23:28.637000 audit: BPF prog-id=68 op=UNLOAD Oct 2 21:23:28.637000 audit: BPF prog-id=67 op=UNLOAD Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.637000 audit: BPF prog-id=69 op=LOAD Oct 2 21:23:28.637000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2248 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638313430343439613230363130303437663762326636343939656362 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit: BPF prog-id=70 op=LOAD Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2233 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361313965363764366234636463313737366234353265353238363661 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2233 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361313965363764366234636463313737366234353265353238363661 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.658000 audit: BPF prog-id=71 op=LOAD Oct 2 21:23:28.658000 audit[2253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2233 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361313965363764366234636463313737366234353265353238363661 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit: BPF prog-id=72 op=LOAD Oct 2 21:23:28.659000 audit[2253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2233 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361313965363764366234636463313737366234353265353238363661 Oct 2 21:23:28.659000 audit: BPF prog-id=72 op=UNLOAD Oct 2 21:23:28.659000 audit: BPF prog-id=71 op=UNLOAD Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.659000 audit: BPF prog-id=73 op=LOAD Oct 2 21:23:28.659000 audit[2253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2233 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361313965363764366234636463313737366234353265353238363661 Oct 2 21:23:28.665189 env[1374]: time="2023-10-02T21:23:28.665138718Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-32a653638a,Uid:f92e7f0206c32066a78bcb11a38cf62b,Namespace:kube-system,Attempt:0,} returns sandbox id \"e3823db3747554a27251334d544e2c482669b893c1d5a15ed43747bb3c42be02\"" Oct 2 21:23:28.669393 env[1374]: time="2023-10-02T21:23:28.669360312Z" level=info msg="CreateContainer within sandbox \"e3823db3747554a27251334d544e2c482669b893c1d5a15ed43747bb3c42be02\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 21:23:28.677205 env[1374]: time="2023-10-02T21:23:28.677176581Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-32a653638a,Uid:33372a52998fd38705f5084e69052a7b,Namespace:kube-system,Attempt:0,} returns sandbox id \"68140449a20610047f7b2f6499ecb422b30c5df3f6980b6f824c6cfb96b2d9b6\"" Oct 2 21:23:28.679648 env[1374]: time="2023-10-02T21:23:28.679622817Z" level=info msg="CreateContainer within sandbox \"68140449a20610047f7b2f6499ecb422b30c5df3f6980b6f824c6cfb96b2d9b6\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 21:23:28.699540 env[1374]: time="2023-10-02T21:23:28.699498108Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-32a653638a,Uid:faea0fea1d262012824b61d5d959fb8d,Namespace:kube-system,Attempt:0,} returns sandbox id \"ca19e67d6b4cdc1776b452e52866a07a2ad34d365387f51376c84fa276640329\"" Oct 2 21:23:28.702654 env[1374]: time="2023-10-02T21:23:28.702618063Z" level=info msg="CreateContainer within sandbox \"ca19e67d6b4cdc1776b452e52866a07a2ad34d365387f51376c84fa276640329\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 21:23:28.746738 env[1374]: time="2023-10-02T21:23:28.746691398Z" level=info msg="CreateContainer within sandbox \"e3823db3747554a27251334d544e2c482669b893c1d5a15ed43747bb3c42be02\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"6e8f46bc6233da900aed421542415b0ea02d3c9b637d5ca4057c1ff5bd5704de\"" Oct 2 21:23:28.747476 env[1374]: time="2023-10-02T21:23:28.747451557Z" level=info msg="StartContainer for \"6e8f46bc6233da900aed421542415b0ea02d3c9b637d5ca4057c1ff5bd5704de\"" Oct 2 21:23:28.750508 env[1374]: time="2023-10-02T21:23:28.750452992Z" level=info msg="CreateContainer within sandbox \"68140449a20610047f7b2f6499ecb422b30c5df3f6980b6f824c6cfb96b2d9b6\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6\"" Oct 2 21:23:28.751003 env[1374]: time="2023-10-02T21:23:28.750973832Z" level=info msg="StartContainer for \"df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6\"" Oct 2 21:23:28.759310 env[1374]: time="2023-10-02T21:23:28.759280139Z" level=info msg="CreateContainer within sandbox \"ca19e67d6b4cdc1776b452e52866a07a2ad34d365387f51376c84fa276640329\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c\"" Oct 2 21:23:28.759902 env[1374]: time="2023-10-02T21:23:28.759881019Z" level=info msg="StartContainer for \"f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c\"" Oct 2 21:23:28.776192 systemd[1]: Started cri-containerd-df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6.scope. Oct 2 21:23:28.788735 systemd[1]: Started cri-containerd-6e8f46bc6233da900aed421542415b0ea02d3c9b637d5ca4057c1ff5bd5704de.scope. Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.805000 audit: BPF prog-id=74 op=LOAD Oct 2 21:23:28.806000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.806000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2248 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466383338333136396631393763663738373466333138623638313433 Oct 2 21:23:28.806000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.806000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2248 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466383338333136396631393763663738373466333138623638313433 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit: BPF prog-id=75 op=LOAD Oct 2 21:23:28.807000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2248 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466383338333136396631393763663738373466333138623638313433 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.807000 audit: BPF prog-id=76 op=LOAD Oct 2 21:23:28.807000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2248 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466383338333136396631393763663738373466333138623638313433 Oct 2 21:23:28.808000 audit: BPF prog-id=76 op=UNLOAD Oct 2 21:23:28.808000 audit: BPF prog-id=75 op=UNLOAD Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.808000 audit: BPF prog-id=77 op=LOAD Oct 2 21:23:28.808000 audit[2372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2248 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466383338333136396631393763663738373466333138623638313433 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.814000 audit: BPF prog-id=78 op=LOAD Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2266 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386634366263363233336461393030616564343231353432343135 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2266 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386634366263363233336461393030616564343231353432343135 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.824083 systemd[1]: Started cri-containerd-f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c.scope. Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.820000 audit: BPF prog-id=79 op=LOAD Oct 2 21:23:28.820000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2266 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386634366263363233336461393030616564343231353432343135 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit: BPF prog-id=80 op=LOAD Oct 2 21:23:28.825000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2266 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.825000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386634366263363233336461393030616564343231353432343135 Oct 2 21:23:28.825000 audit: BPF prog-id=80 op=UNLOAD Oct 2 21:23:28.825000 audit: BPF prog-id=79 op=UNLOAD Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { perfmon } for pid=2370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit[2370]: AVC avc: denied { bpf } for pid=2370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.825000 audit: BPF prog-id=81 op=LOAD Oct 2 21:23:28.825000 audit[2370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2266 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.825000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665386634366263363233336461393030616564343231353432343135 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.861000 audit: BPF prog-id=82 op=LOAD Oct 2 21:23:28.862000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.862000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2233 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323434376163643362636531613839363561643465303537646530 Oct 2 21:23:28.862000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.862000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2233 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323434376163643362636531613839363561643465303537646530 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit: BPF prog-id=83 op=LOAD Oct 2 21:23:28.863000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2233 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323434376163643362636531613839363561643465303537646530 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.863000 audit: BPF prog-id=84 op=LOAD Oct 2 21:23:28.863000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2233 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323434376163643362636531613839363561643465303537646530 Oct 2 21:23:28.866000 audit: BPF prog-id=84 op=UNLOAD Oct 2 21:23:28.866000 audit: BPF prog-id=83 op=UNLOAD Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.866000 audit: BPF prog-id=85 op=LOAD Oct 2 21:23:28.866000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2233 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:28.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323434376163643362636531613839363561643465303537646530 Oct 2 21:23:28.882350 env[1374]: time="2023-10-02T21:23:28.882292238Z" level=info msg="StartContainer for \"6e8f46bc6233da900aed421542415b0ea02d3c9b637d5ca4057c1ff5bd5704de\" returns successfully" Oct 2 21:23:28.883986 env[1374]: time="2023-10-02T21:23:28.883938835Z" level=info msg="StartContainer for \"df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6\" returns successfully" Oct 2 21:23:28.896200 kubelet[2157]: E1002 21:23:28.896169 2157 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.16:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.16:6443: connect: connection refused Oct 2 21:23:28.943344 env[1374]: time="2023-10-02T21:23:28.943291588Z" level=info msg="StartContainer for \"f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c\" returns successfully" Oct 2 21:23:30.022601 kubelet[2157]: I1002 21:23:30.022568 2157 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:31.679000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.685882 kernel: kauditd_printk_skb: 620 callbacks suppressed Oct 2 21:23:31.686005 kernel: audit: type=1400 audit(1696281811.679:705): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.679000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000051e00 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:31.740050 kernel: audit: type=1300 audit(1696281811.679:705): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000051e00 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:31.679000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:31.764444 kernel: audit: type=1327 audit(1696281811.679:705): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:31.764585 kernel: audit: type=1400 audit(1696281811.679:706): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.679000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.679000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400031a460 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:31.814002 kernel: audit: type=1300 audit(1696281811.679:706): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400031a460 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:31.679000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:31.837855 kernel: audit: type=1327 audit(1696281811.679:706): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:31.865000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.865000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4007334000 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:23:31.933616 kernel: audit: type=1400 audit(1696281811.865:707): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.933742 kernel: audit: type=1300 audit(1696281811.865:707): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4007334000 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:23:31.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:31.967740 kernel: audit: type=1327 audit(1696281811.865:707): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:31.865000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.990011 kernel: audit: type=1400 audit(1696281811.865:708): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.865000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4001940140 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:23:31.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:31.866000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.866000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4007334120 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:23:31.866000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:31.880000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.880000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b6058c0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:23:31.880000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:31.887000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.887000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=40029b78c0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:23:31.887000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:31.887000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:31.887000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=400b677e60 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:23:31.887000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:32.181441 kubelet[2157]: E1002 21:23:32.181414 2157 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-32a653638a\" not found" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:32.248559 kubelet[2157]: I1002 21:23:32.248450 2157 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:32.356391 kubelet[2157]: E1002 21:23:32.356289 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eb453d10", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 900641040, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 900641040, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:32.546089 kubelet[2157]: E1002 21:23:32.545914 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eb900b31", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 905543473, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 905543473, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:32.600182 kubelet[2157]: E1002 21:23:32.600057 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eeae7068", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-32a653638a status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957867112, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957867112, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:32.692147 kubelet[2157]: E1002 21:23:32.692056 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eeae85f8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-32a653638a status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957872632, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957872632, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:32.735578 kubelet[2157]: E1002 21:23:32.735549 2157 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-32a653638a\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" Oct 2 21:23:32.748075 kubelet[2157]: E1002 21:23:32.747962 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eeae9318", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-32a653638a status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957875992, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957875992, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:32.801221 kubelet[2157]: E1002 21:23:32.801057 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750f0f12d5e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 995795294, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 995795294, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:32.857203 kubelet[2157]: E1002 21:23:32.857114 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eeae7068", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-32a653638a status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957867112, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 27, 12553188, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:32.903911 kubelet[2157]: I1002 21:23:32.903862 2157 apiserver.go:52] "Watching apiserver" Oct 2 21:23:32.911785 kubelet[2157]: I1002 21:23:32.911745 2157 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 21:23:32.912430 kubelet[2157]: E1002 21:23:32.912332 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eeae85f8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-32a653638a status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957872632, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 27, 12581428, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:32.947477 kubelet[2157]: I1002 21:23:32.947445 2157 reconciler.go:41] "Reconciler: start to sync state" Oct 2 21:23:32.969481 kubelet[2157]: E1002 21:23:32.969383 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eeae9318", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-32a653638a status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957875992, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 27, 12584548, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:33.029688 kubelet[2157]: E1002 21:23:33.029574 2157 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-32a653638a.178a6750eeae7068", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-32a653638a", UID:"ci-3510.3.0-a-32a653638a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-32a653638a status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-32a653638a"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 26, 957867112, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 27, 214985843, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:23:34.466043 systemd[1]: Reloading. Oct 2 21:23:34.574757 /usr/lib/systemd/system-generators/torcx-generator[2483]: time="2023-10-02T21:23:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:23:34.574784 /usr/lib/systemd/system-generators/torcx-generator[2483]: time="2023-10-02T21:23:34Z" level=info msg="torcx already run" Oct 2 21:23:34.688913 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:23:34.688953 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:23:34.703959 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit: BPF prog-id=86 op=LOAD Oct 2 21:23:34.795000 audit: BPF prog-id=47 op=UNLOAD Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit: BPF prog-id=87 op=LOAD Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.796000 audit: BPF prog-id=88 op=LOAD Oct 2 21:23:34.796000 audit: BPF prog-id=48 op=UNLOAD Oct 2 21:23:34.796000 audit: BPF prog-id=49 op=UNLOAD Oct 2 21:23:34.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit: BPF prog-id=89 op=LOAD Oct 2 21:23:34.797000 audit: BPF prog-id=50 op=UNLOAD Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.798000 audit: BPF prog-id=90 op=LOAD Oct 2 21:23:34.798000 audit: BPF prog-id=82 op=UNLOAD Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.799000 audit: BPF prog-id=91 op=LOAD Oct 2 21:23:34.799000 audit: BPF prog-id=51 op=UNLOAD Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.801000 audit: BPF prog-id=92 op=LOAD Oct 2 21:23:34.801000 audit: BPF prog-id=52 op=UNLOAD Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.802000 audit: BPF prog-id=93 op=LOAD Oct 2 21:23:34.802000 audit: BPF prog-id=62 op=UNLOAD Oct 2 21:23:34.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit: BPF prog-id=94 op=LOAD Oct 2 21:23:34.804000 audit: BPF prog-id=53 op=UNLOAD Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit: BPF prog-id=95 op=LOAD Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.805000 audit: BPF prog-id=96 op=LOAD Oct 2 21:23:34.805000 audit: BPF prog-id=54 op=UNLOAD Oct 2 21:23:34.805000 audit: BPF prog-id=55 op=UNLOAD Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.806000 audit: BPF prog-id=97 op=LOAD Oct 2 21:23:34.806000 audit: BPF prog-id=66 op=UNLOAD Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.807000 audit: BPF prog-id=98 op=LOAD Oct 2 21:23:34.807000 audit: BPF prog-id=78 op=UNLOAD Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.808000 audit: BPF prog-id=99 op=LOAD Oct 2 21:23:34.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.811000 audit: BPF prog-id=100 op=LOAD Oct 2 21:23:34.811000 audit: BPF prog-id=56 op=UNLOAD Oct 2 21:23:34.811000 audit: BPF prog-id=57 op=UNLOAD Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.813000 audit: BPF prog-id=101 op=LOAD Oct 2 21:23:34.813000 audit: BPF prog-id=70 op=UNLOAD Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit: BPF prog-id=102 op=LOAD Oct 2 21:23:34.815000 audit: BPF prog-id=58 op=UNLOAD Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit: BPF prog-id=103 op=LOAD Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.816000 audit: BPF prog-id=104 op=LOAD Oct 2 21:23:34.816000 audit: BPF prog-id=59 op=UNLOAD Oct 2 21:23:34.816000 audit: BPF prog-id=60 op=UNLOAD Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.817000 audit: BPF prog-id=105 op=LOAD Oct 2 21:23:34.817000 audit: BPF prog-id=61 op=UNLOAD Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.818000 audit: BPF prog-id=106 op=LOAD Oct 2 21:23:34.818000 audit: BPF prog-id=74 op=UNLOAD Oct 2 21:23:34.836761 systemd[1]: Stopping kubelet.service... Oct 2 21:23:34.859271 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 21:23:34.859485 systemd[1]: Stopped kubelet.service. Oct 2 21:23:34.859561 systemd[1]: kubelet.service: Consumed 1.395s CPU time. Oct 2 21:23:34.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:34.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:34.861968 systemd[1]: Started kubelet.service. Oct 2 21:23:34.944321 kubelet[2543]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:23:34.944650 kubelet[2543]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:23:34.944839 kubelet[2543]: I1002 21:23:34.944809 2543 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:23:34.946224 kubelet[2543]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:23:34.946321 kubelet[2543]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:23:34.951042 kubelet[2543]: I1002 21:23:34.951023 2543 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 21:23:34.951147 kubelet[2543]: I1002 21:23:34.951137 2543 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:23:34.951400 kubelet[2543]: I1002 21:23:34.951387 2543 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 21:23:34.952727 kubelet[2543]: I1002 21:23:34.952709 2543 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 21:23:34.954221 kubelet[2543]: I1002 21:23:34.954177 2543 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:23:34.956960 kubelet[2543]: W1002 21:23:34.956945 2543 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:23:34.959273 kubelet[2543]: I1002 21:23:34.959240 2543 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:23:34.959684 kubelet[2543]: I1002 21:23:34.959669 2543 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:23:34.959839 kubelet[2543]: I1002 21:23:34.959822 2543 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 21:23:34.960005 kubelet[2543]: I1002 21:23:34.959992 2543 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 21:23:34.960080 kubelet[2543]: I1002 21:23:34.960071 2543 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 21:23:34.960163 kubelet[2543]: I1002 21:23:34.960154 2543 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:23:34.963782 kubelet[2543]: I1002 21:23:34.963766 2543 kubelet.go:398] "Attempting to sync node with API server" Oct 2 21:23:34.964395 kubelet[2543]: I1002 21:23:34.964380 2543 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:23:34.964580 kubelet[2543]: I1002 21:23:34.964567 2543 kubelet.go:297] "Adding apiserver pod source" Oct 2 21:23:34.964644 kubelet[2543]: I1002 21:23:34.964636 2543 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:23:34.975395 kubelet[2543]: I1002 21:23:34.975374 2543 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:23:34.976203 kubelet[2543]: I1002 21:23:34.976186 2543 server.go:1186] "Started kubelet" Oct 2 21:23:34.977000 audit[2543]: AVC avc: denied { mac_admin } for pid=2543 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.977000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:34.977000 audit[2543]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b5a900 a1=40009759b0 a2=4000b5a8d0 a3=25 items=0 ppid=1 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:34.977000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:34.978389 kubelet[2543]: I1002 21:23:34.978376 2543 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:23:34.977000 audit[2543]: AVC avc: denied { mac_admin } for pid=2543 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:34.977000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:34.977000 audit[2543]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009837a0 a1=40009759c8 a2=4000b5a990 a3=25 items=0 ppid=1 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:34.977000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:34.978668 kubelet[2543]: I1002 21:23:34.978656 2543 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:23:34.978736 kubelet[2543]: I1002 21:23:34.978728 2543 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:23:34.984606 kubelet[2543]: E1002 21:23:34.984587 2543 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:23:34.984726 kubelet[2543]: E1002 21:23:34.984715 2543 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:23:34.986138 kubelet[2543]: I1002 21:23:34.986118 2543 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:23:34.988092 kubelet[2543]: I1002 21:23:34.988071 2543 server.go:451] "Adding debug handlers to kubelet server" Oct 2 21:23:34.989071 kubelet[2543]: I1002 21:23:34.989053 2543 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 21:23:34.989579 kubelet[2543]: I1002 21:23:34.989559 2543 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 21:23:34.998000 audit[2558]: USER_ACCT pid=2558 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:34.999160 sudo[2558]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 21:23:34.998000 audit[2558]: CRED_REFR pid=2558 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:34.999360 sudo[2558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 21:23:35.002000 audit[2558]: USER_START pid=2558 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:35.098014 kubelet[2543]: I1002 21:23:35.097874 2543 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.098727 kubelet[2543]: I1002 21:23:35.098704 2543 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:23:35.098812 kubelet[2543]: I1002 21:23:35.098803 2543 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:23:35.098890 kubelet[2543]: I1002 21:23:35.098880 2543 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:23:35.099100 kubelet[2543]: I1002 21:23:35.099089 2543 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 21:23:35.099196 kubelet[2543]: I1002 21:23:35.099173 2543 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 21:23:35.099269 kubelet[2543]: I1002 21:23:35.099259 2543 policy_none.go:49] "None policy: Start" Oct 2 21:23:35.099990 kubelet[2543]: I1002 21:23:35.099976 2543 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:23:35.100105 kubelet[2543]: I1002 21:23:35.100095 2543 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:23:35.100424 kubelet[2543]: I1002 21:23:35.100412 2543 state_mem.go:75] "Updated machine memory state" Oct 2 21:23:35.109867 kubelet[2543]: I1002 21:23:35.109830 2543 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.110067 kubelet[2543]: I1002 21:23:35.109916 2543 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.110998 kubelet[2543]: I1002 21:23:35.110983 2543 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:23:35.110000 audit[2543]: AVC avc: denied { mac_admin } for pid=2543 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:35.110000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:35.110000 audit[2543]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40012b6450 a1=40012a9ab8 a2=40012b6420 a3=25 items=0 ppid=1 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:35.110000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:35.114443 kubelet[2543]: I1002 21:23:35.114428 2543 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:23:35.116320 kubelet[2543]: I1002 21:23:35.116295 2543 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:23:35.164072 kubelet[2543]: I1002 21:23:35.164048 2543 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 21:23:35.215413 kubelet[2543]: I1002 21:23:35.215388 2543 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 21:23:35.215650 kubelet[2543]: I1002 21:23:35.215640 2543 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 21:23:35.215872 kubelet[2543]: I1002 21:23:35.215860 2543 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 21:23:35.216098 kubelet[2543]: E1002 21:23:35.216088 2543 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 21:23:35.317016 kubelet[2543]: I1002 21:23:35.316982 2543 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:35.317221 kubelet[2543]: I1002 21:23:35.317209 2543 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:35.317301 kubelet[2543]: I1002 21:23:35.317292 2543 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:35.326997 kubelet[2543]: E1002 21:23:35.326970 2543 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.393886 kubelet[2543]: I1002 21:23:35.393865 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.394095 kubelet[2543]: I1002 21:23:35.394084 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.394214 kubelet[2543]: I1002 21:23:35.394205 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/faea0fea1d262012824b61d5d959fb8d-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-32a653638a\" (UID: \"faea0fea1d262012824b61d5d959fb8d\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.394314 kubelet[2543]: I1002 21:23:35.394305 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f92e7f0206c32066a78bcb11a38cf62b-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-32a653638a\" (UID: \"f92e7f0206c32066a78bcb11a38cf62b\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.394430 kubelet[2543]: I1002 21:23:35.394421 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.394535 kubelet[2543]: I1002 21:23:35.394526 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.394647 kubelet[2543]: I1002 21:23:35.394631 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/33372a52998fd38705f5084e69052a7b-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" (UID: \"33372a52998fd38705f5084e69052a7b\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.394744 kubelet[2543]: I1002 21:23:35.394735 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f92e7f0206c32066a78bcb11a38cf62b-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-32a653638a\" (UID: \"f92e7f0206c32066a78bcb11a38cf62b\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.394840 kubelet[2543]: I1002 21:23:35.394831 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f92e7f0206c32066a78bcb11a38cf62b-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-32a653638a\" (UID: \"f92e7f0206c32066a78bcb11a38cf62b\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" Oct 2 21:23:35.542052 sudo[2558]: pam_unix(sudo:session): session closed for user root Oct 2 21:23:35.541000 audit[2558]: USER_END pid=2558 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:35.541000 audit[2558]: CRED_DISP pid=2558 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:35.970158 kubelet[2543]: I1002 21:23:35.970108 2543 apiserver.go:52] "Watching apiserver" Oct 2 21:23:35.989823 kubelet[2543]: I1002 21:23:35.989788 2543 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 21:23:35.999047 kubelet[2543]: I1002 21:23:35.999020 2543 reconciler.go:41] "Reconciler: start to sync state" Oct 2 21:23:36.372250 kubelet[2543]: E1002 21:23:36.372149 2543 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-32a653638a\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" Oct 2 21:23:36.573414 kubelet[2543]: E1002 21:23:36.573379 2543 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-32a653638a\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" Oct 2 21:23:36.771157 kubelet[2543]: E1002 21:23:36.771122 2543 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-32a653638a\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-32a653638a" Oct 2 21:23:37.059372 sudo[1749]: pam_unix(sudo:session): session closed for user root Oct 2 21:23:37.064852 kernel: kauditd_printk_skb: 277 callbacks suppressed Oct 2 21:23:37.064973 kernel: audit: type=1106 audit(1696281817.058:967): pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.058000 audit[1749]: USER_END pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.060000 audit[1749]: CRED_DISP pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.105914 kernel: audit: type=1104 audit(1696281817.060:968): pid=1749 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.158611 sshd[1746]: pam_unix(sshd:session): session closed for user core Oct 2 21:23:37.158000 audit[1746]: USER_END pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:23:37.162387 systemd-logind[1361]: Session 9 logged out. Waiting for processes to exit. Oct 2 21:23:37.163758 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 21:23:37.163981 systemd[1]: session-9.scope: Consumed 6.411s CPU time. Oct 2 21:23:37.165418 systemd-logind[1361]: Removed session 9. Oct 2 21:23:37.166022 systemd[1]: sshd@6-10.200.20.16:22-10.200.12.6:46500.service: Deactivated successfully. Oct 2 21:23:37.159000 audit[1746]: CRED_DISP pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:23:37.210537 kernel: audit: type=1106 audit(1696281817.158:969): pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:23:37.210671 kernel: audit: type=1104 audit(1696281817.159:970): pid=1746 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:23:37.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.16:22-10.200.12.6:46500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.232968 kernel: audit: type=1131 audit(1696281817.164:971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.16:22-10.200.12.6:46500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.370287 kubelet[2543]: I1002 21:23:37.369817 2543 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-32a653638a" podStartSLOduration=3.369767334 pod.CreationTimestamp="2023-10-02 21:23:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:23:36.983307975 +0000 UTC m=+2.111991177" watchObservedRunningTime="2023-10-02 21:23:37.369767334 +0000 UTC m=+2.498450536" Oct 2 21:23:37.370737 kubelet[2543]: I1002 21:23:37.370721 2543 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-32a653638a" podStartSLOduration=2.370692293 pod.CreationTimestamp="2023-10-02 21:23:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:23:37.369726774 +0000 UTC m=+2.498409976" watchObservedRunningTime="2023-10-02 21:23:37.370692293 +0000 UTC m=+2.499375495" Oct 2 21:23:39.449863 kubelet[2543]: I1002 21:23:39.449834 2543 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-32a653638a" podStartSLOduration=4.44980235 pod.CreationTimestamp="2023-10-02 21:23:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:23:37.769828037 +0000 UTC m=+2.898511239" watchObservedRunningTime="2023-10-02 21:23:39.44980235 +0000 UTC m=+4.578485512" Oct 2 21:23:47.350000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:47.350000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001330040 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:47.401231 kernel: audit: type=1400 audit(1696281827.350:972): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:47.401376 kernel: audit: type=1300 audit(1696281827.350:972): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001330040 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:47.401410 kernel: audit: type=1327 audit(1696281827.350:972): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:47.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:47.425115 kernel: audit: type=1400 audit(1696281827.350:973): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:47.350000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:47.350000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001387100 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:47.476160 kernel: audit: type=1300 audit(1696281827.350:973): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001387100 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:47.476292 kernel: audit: type=1327 audit(1696281827.350:973): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:47.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:47.350000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:47.520270 kernel: audit: type=1400 audit(1696281827.350:974): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:47.350000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001387140 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:47.549079 kernel: audit: type=1300 audit(1696281827.350:974): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001387140 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:47.549201 kernel: audit: type=1327 audit(1696281827.350:974): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:47.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:47.350000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:47.594216 kernel: audit: type=1400 audit(1696281827.350:975): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:47.350000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001387180 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:47.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:47.519000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 21:23:47.519000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400138e440 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:23:47.519000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:49.797237 kubelet[2543]: I1002 21:23:49.797200 2543 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 21:23:49.797985 env[1374]: time="2023-10-02T21:23:49.797873813Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 21:23:49.798223 kubelet[2543]: I1002 21:23:49.798106 2543 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 21:23:50.677689 kubelet[2543]: I1002 21:23:50.677660 2543 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:50.682180 systemd[1]: Created slice kubepods-besteffort-pod45a7d12a_d55f_48e5_bd93_925520bdf598.slice. Oct 2 21:23:50.691455 kubelet[2543]: I1002 21:23:50.691431 2543 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:50.695755 systemd[1]: Created slice kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice. Oct 2 21:23:50.765188 kubelet[2543]: I1002 21:23:50.765159 2543 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:23:50.769996 systemd[1]: Created slice kubepods-besteffort-pod4f830f7b_778c_4f25_af7e_053949493398.slice. Oct 2 21:23:50.786848 kubelet[2543]: I1002 21:23:50.786819 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/45a7d12a-d55f-48e5-bd93-925520bdf598-kube-proxy\") pod \"kube-proxy-6m9ks\" (UID: \"45a7d12a-d55f-48e5-bd93-925520bdf598\") " pod="kube-system/kube-proxy-6m9ks" Oct 2 21:23:50.787063 kubelet[2543]: I1002 21:23:50.787052 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/45a7d12a-d55f-48e5-bd93-925520bdf598-lib-modules\") pod \"kube-proxy-6m9ks\" (UID: \"45a7d12a-d55f-48e5-bd93-925520bdf598\") " pod="kube-system/kube-proxy-6m9ks" Oct 2 21:23:50.787141 kubelet[2543]: I1002 21:23:50.787132 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p8lx5\" (UniqueName: \"kubernetes.io/projected/45a7d12a-d55f-48e5-bd93-925520bdf598-kube-api-access-p8lx5\") pod \"kube-proxy-6m9ks\" (UID: \"45a7d12a-d55f-48e5-bd93-925520bdf598\") " pod="kube-system/kube-proxy-6m9ks" Oct 2 21:23:50.787217 kubelet[2543]: I1002 21:23:50.787208 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/45a7d12a-d55f-48e5-bd93-925520bdf598-xtables-lock\") pod \"kube-proxy-6m9ks\" (UID: \"45a7d12a-d55f-48e5-bd93-925520bdf598\") " pod="kube-system/kube-proxy-6m9ks" Oct 2 21:23:50.888244 kubelet[2543]: I1002 21:23:50.888215 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-config-path\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.888629 kubelet[2543]: I1002 21:23:50.888618 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-host-proc-sys-kernel\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.888803 kubelet[2543]: I1002 21:23:50.888793 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wmp4p\" (UniqueName: \"kubernetes.io/projected/00cbbd64-54be-4d64-a931-b251fa39fdf6-kube-api-access-wmp4p\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.888961 kubelet[2543]: I1002 21:23:50.888916 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fdm74\" (UniqueName: \"kubernetes.io/projected/4f830f7b-778c-4f25-af7e-053949493398-kube-api-access-fdm74\") pod \"cilium-operator-f59cbd8c6-dzb2k\" (UID: \"4f830f7b-778c-4f25-af7e-053949493398\") " pod="kube-system/cilium-operator-f59cbd8c6-dzb2k" Oct 2 21:23:50.889064 kubelet[2543]: I1002 21:23:50.889055 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-lib-modules\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.889217 kubelet[2543]: I1002 21:23:50.889207 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/00cbbd64-54be-4d64-a931-b251fa39fdf6-clustermesh-secrets\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.889366 kubelet[2543]: I1002 21:23:50.889356 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-hostproc\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.890149 kubelet[2543]: I1002 21:23:50.890135 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cni-path\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.890366 kubelet[2543]: I1002 21:23:50.890355 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-etc-cni-netd\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.890480 kubelet[2543]: I1002 21:23:50.890470 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f830f7b-778c-4f25-af7e-053949493398-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-dzb2k\" (UID: \"4f830f7b-778c-4f25-af7e-053949493398\") " pod="kube-system/cilium-operator-f59cbd8c6-dzb2k" Oct 2 21:23:50.890595 kubelet[2543]: I1002 21:23:50.890585 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-run\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.890723 kubelet[2543]: I1002 21:23:50.890707 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-bpf-maps\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.890836 kubelet[2543]: I1002 21:23:50.890827 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-cgroup\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.890961 kubelet[2543]: I1002 21:23:50.890951 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-host-proc-sys-net\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.891082 kubelet[2543]: I1002 21:23:50.891072 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-xtables-lock\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:50.891200 kubelet[2543]: I1002 21:23:50.891190 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/00cbbd64-54be-4d64-a931-b251fa39fdf6-hubble-tls\") pod \"cilium-ntdsz\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " pod="kube-system/cilium-ntdsz" Oct 2 21:23:51.289764 env[1374]: time="2023-10-02T21:23:51.289722795Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-6m9ks,Uid:45a7d12a-d55f-48e5-bd93-925520bdf598,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:51.300569 env[1374]: time="2023-10-02T21:23:51.300525584Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-ntdsz,Uid:00cbbd64-54be-4d64-a931-b251fa39fdf6,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:51.356989 env[1374]: time="2023-10-02T21:23:51.356885049Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:51.356989 env[1374]: time="2023-10-02T21:23:51.356931649Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:51.356989 env[1374]: time="2023-10-02T21:23:51.356942409Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:51.357414 env[1374]: time="2023-10-02T21:23:51.357356768Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d39fdda7beb033ca73e911fff92b7a584d9792b89a918f73957ac7dd225cf031 pid=2642 runtime=io.containerd.runc.v2 Oct 2 21:23:51.363135 env[1374]: time="2023-10-02T21:23:51.363067522Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:51.363258 env[1374]: time="2023-10-02T21:23:51.363138162Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:51.363258 env[1374]: time="2023-10-02T21:23:51.363163842Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:51.364429 env[1374]: time="2023-10-02T21:23:51.363326042Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683 pid=2655 runtime=io.containerd.runc.v2 Oct 2 21:23:51.376213 systemd[1]: Started cri-containerd-d39fdda7beb033ca73e911fff92b7a584d9792b89a918f73957ac7dd225cf031.scope. Oct 2 21:23:51.387396 systemd[1]: Started cri-containerd-4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683.scope. Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit: BPF prog-id=107 op=LOAD Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2642 pid=2662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396664646137626562303333636137336539313166666639326237 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2642 pid=2662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396664646137626562303333636137336539313166666639326237 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit: BPF prog-id=108 op=LOAD Oct 2 21:23:51.399000 audit[2662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2642 pid=2662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396664646137626562303333636137336539313166666639326237 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit: BPF prog-id=109 op=LOAD Oct 2 21:23:51.399000 audit[2662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2642 pid=2662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396664646137626562303333636137336539313166666639326237 Oct 2 21:23:51.399000 audit: BPF prog-id=109 op=UNLOAD Oct 2 21:23:51.399000 audit: BPF prog-id=108 op=UNLOAD Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { perfmon } for pid=2662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit[2662]: AVC avc: denied { bpf } for pid=2662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.399000 audit: BPF prog-id=110 op=LOAD Oct 2 21:23:51.399000 audit[2662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2642 pid=2662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433396664646137626562303333636137336539313166666639326237 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.411000 audit: BPF prog-id=111 op=LOAD Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2655 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363165386265353566316538396238653136326663333631346163 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2655 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363165386265353566316538396238653136326663333631346163 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit: BPF prog-id=112 op=LOAD Oct 2 21:23:51.412000 audit[2669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2655 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363165386265353566316538396238653136326663333631346163 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit: BPF prog-id=113 op=LOAD Oct 2 21:23:51.412000 audit[2669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2655 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363165386265353566316538396238653136326663333631346163 Oct 2 21:23:51.412000 audit: BPF prog-id=113 op=UNLOAD Oct 2 21:23:51.412000 audit: BPF prog-id=112 op=UNLOAD Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { perfmon } for pid=2669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit[2669]: AVC avc: denied { bpf } for pid=2669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.412000 audit: BPF prog-id=114 op=LOAD Oct 2 21:23:51.412000 audit[2669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2655 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431363165386265353566316538396238653136326663333631346163 Oct 2 21:23:51.427284 env[1374]: time="2023-10-02T21:23:51.427230619Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-6m9ks,Uid:45a7d12a-d55f-48e5-bd93-925520bdf598,Namespace:kube-system,Attempt:0,} returns sandbox id \"d39fdda7beb033ca73e911fff92b7a584d9792b89a918f73957ac7dd225cf031\"" Oct 2 21:23:51.432160 env[1374]: time="2023-10-02T21:23:51.432100134Z" level=info msg="CreateContainer within sandbox \"d39fdda7beb033ca73e911fff92b7a584d9792b89a918f73957ac7dd225cf031\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 21:23:51.441035 env[1374]: time="2023-10-02T21:23:51.440981445Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-ntdsz,Uid:00cbbd64-54be-4d64-a931-b251fa39fdf6,Namespace:kube-system,Attempt:0,} returns sandbox id \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\"" Oct 2 21:23:51.444523 env[1374]: time="2023-10-02T21:23:51.444476562Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 21:23:51.470442 env[1374]: time="2023-10-02T21:23:51.470401056Z" level=info msg="CreateContainer within sandbox \"d39fdda7beb033ca73e911fff92b7a584d9792b89a918f73957ac7dd225cf031\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"93799855df934aaf8d29a16245d29e0fbf4dfdc08e58ef2f9d626b9f3fb08ed3\"" Oct 2 21:23:51.471261 env[1374]: time="2023-10-02T21:23:51.471235975Z" level=info msg="StartContainer for \"93799855df934aaf8d29a16245d29e0fbf4dfdc08e58ef2f9d626b9f3fb08ed3\"" Oct 2 21:23:51.494617 systemd[1]: Started cri-containerd-93799855df934aaf8d29a16245d29e0fbf4dfdc08e58ef2f9d626b9f3fb08ed3.scope. Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2642 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933373939383535646639333461616638643239613136323435643239 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit: BPF prog-id=115 op=LOAD Oct 2 21:23:51.517000 audit[2723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2642 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933373939383535646639333461616638643239613136323435643239 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit: BPF prog-id=116 op=LOAD Oct 2 21:23:51.517000 audit[2723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2642 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933373939383535646639333461616638643239613136323435643239 Oct 2 21:23:51.517000 audit: BPF prog-id=116 op=UNLOAD Oct 2 21:23:51.517000 audit: BPF prog-id=115 op=UNLOAD Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit[2723]: AVC avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.517000 audit: BPF prog-id=117 op=LOAD Oct 2 21:23:51.517000 audit[2723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2642 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933373939383535646639333461616638643239613136323435643239 Oct 2 21:23:51.542321 env[1374]: time="2023-10-02T21:23:51.542123985Z" level=info msg="StartContainer for \"93799855df934aaf8d29a16245d29e0fbf4dfdc08e58ef2f9d626b9f3fb08ed3\" returns successfully" Oct 2 21:23:51.612000 audit[2773]: NETFILTER_CFG table=mangle:62 family=2 entries=1 op=nft_register_chain pid=2773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.612000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc37d0cf0 a2=0 a3=ffffa699a6c0 items=0 ppid=2734 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.612000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:23:51.618000 audit[2774]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_chain pid=2774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.618000 audit[2774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd088b2f0 a2=0 a3=ffff988ba6c0 items=0 ppid=2734 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.618000 audit[2775]: NETFILTER_CFG table=mangle:64 family=10 entries=1 op=nft_register_chain pid=2775 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.618000 audit[2775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffca540460 a2=0 a3=ffffaa13b6c0 items=0 ppid=2734 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.618000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:23:51.618000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:23:51.621000 audit[2776]: NETFILTER_CFG table=nat:65 family=10 entries=1 op=nft_register_chain pid=2776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.621000 audit[2776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5f5ace0 a2=0 a3=ffffa54fc6c0 items=0 ppid=2734 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.621000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:23:51.621000 audit[2777]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_chain pid=2777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.621000 audit[2777]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe5f40590 a2=0 a3=ffff8bced6c0 items=0 ppid=2734 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.621000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:23:51.623000 audit[2778]: NETFILTER_CFG table=filter:67 family=10 entries=1 op=nft_register_chain pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.623000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffec8f6e10 a2=0 a3=ffff937816c0 items=0 ppid=2734 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.623000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:23:51.674008 env[1374]: time="2023-10-02T21:23:51.673962455Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-dzb2k,Uid:4f830f7b-778c-4f25-af7e-053949493398,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:51.718000 audit[2792]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.718000 audit[2792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdf5aff80 a2=0 a3=ffff863af6c0 items=0 ppid=2734 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.718000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:23:51.722293 env[1374]: time="2023-10-02T21:23:51.722213967Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:51.722293 env[1374]: time="2023-10-02T21:23:51.722259527Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:51.722465 env[1374]: time="2023-10-02T21:23:51.722270007Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:51.722697 env[1374]: time="2023-10-02T21:23:51.722628646Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1 pid=2787 runtime=io.containerd.runc.v2 Oct 2 21:23:51.729000 audit[2799]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.729000 audit[2799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd4738e10 a2=0 a3=ffff9afb66c0 items=0 ppid=2734 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.729000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 21:23:51.739000 audit[2808]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.739000 audit[2808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe01c2040 a2=0 a3=ffff989cf6c0 items=0 ppid=2734 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.739000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 21:23:51.746249 systemd[1]: Started cri-containerd-5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1.scope. Oct 2 21:23:51.750000 audit[2811]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_chain pid=2811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.750000 audit[2811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc66e1ef0 a2=0 a3=ffffb7a016c0 items=0 ppid=2734 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.750000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:23:51.756000 audit[2815]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2815 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.756000 audit[2815]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd8d53780 a2=0 a3=ffff888c06c0 items=0 ppid=2734 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:23:51.758000 audit[2816]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.758000 audit[2816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff19a5180 a2=0 a3=ffff7f8246c0 items=0 ppid=2734 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.758000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:23:51.765000 audit[2825]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.765000 audit[2825]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd42b95c0 a2=0 a3=ffff872036c0 items=0 ppid=2734 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.765000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.770000 audit: BPF prog-id=118 op=LOAD Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2787 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535373261656461633037353565303738626433616262646334663662 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2787 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535373261656461633037353565303738626433616262646334663662 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.771000 audit: BPF prog-id=119 op=LOAD Oct 2 21:23:51.771000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2787 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535373261656461633037353565303738626433616262646334663662 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit: BPF prog-id=120 op=LOAD Oct 2 21:23:51.772000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2787 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535373261656461633037353565303738626433616262646334663662 Oct 2 21:23:51.772000 audit: BPF prog-id=120 op=UNLOAD Oct 2 21:23:51.772000 audit: BPF prog-id=119 op=UNLOAD Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { perfmon } for pid=2800 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit[2800]: AVC avc: denied { bpf } for pid=2800 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.772000 audit: BPF prog-id=121 op=LOAD Oct 2 21:23:51.772000 audit[2800]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2787 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535373261656461633037353565303738626433616262646334663662 Oct 2 21:23:51.776000 audit[2828]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2828 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.776000 audit[2828]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff737d460 a2=0 a3=ffff91c586c0 items=0 ppid=2734 pid=2828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.776000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 21:23:51.778000 audit[2829]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_chain pid=2829 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.778000 audit[2829]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb9e7080 a2=0 a3=ffffafb5f6c0 items=0 ppid=2734 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.778000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:23:51.785000 audit[2831]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2831 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.785000 audit[2831]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffce48dd00 a2=0 a3=ffff8727b6c0 items=0 ppid=2734 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.785000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:23:51.789000 audit[2834]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_chain pid=2834 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.789000 audit[2834]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffddfcd4f0 a2=0 a3=ffffaed616c0 items=0 ppid=2734 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.789000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:23:51.796705 env[1374]: time="2023-10-02T21:23:51.796598893Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-dzb2k,Uid:4f830f7b-778c-4f25-af7e-053949493398,Namespace:kube-system,Attempt:0,} returns sandbox id \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\"" Oct 2 21:23:51.797000 audit[2840]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_rule pid=2840 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.797000 audit[2840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe36b6b40 a2=0 a3=ffffb58016c0 items=0 ppid=2734 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.797000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:23:51.805000 audit[2843]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.805000 audit[2843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffeebe5c0 a2=0 a3=ffffb89d86c0 items=0 ppid=2734 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.805000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:23:51.811000 audit[2846]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.811000 audit[2846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdf5d8fd0 a2=0 a3=ffff99d626c0 items=0 ppid=2734 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.811000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:23:51.813000 audit[2847]: NETFILTER_CFG table=nat:82 family=2 entries=1 op=nft_register_chain pid=2847 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.813000 audit[2847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff55505b0 a2=0 a3=ffff934b76c0 items=0 ppid=2734 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.813000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:23:51.817000 audit[2849]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_rule pid=2849 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.817000 audit[2849]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd22b82a0 a2=0 a3=ffffb69d66c0 items=0 ppid=2734 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.817000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:23:51.825000 audit[2852]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2852 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.825000 audit[2852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe9788180 a2=0 a3=ffff7f9f16c0 items=0 ppid=2734 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.825000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:23:51.889000 audit[2856]: NETFILTER_CFG table=filter:85 family=2 entries=6 op=nft_register_rule pid=2856 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:23:51.889000 audit[2856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=fffff397e050 a2=0 a3=ffffb12d06c0 items=0 ppid=2734 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.889000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:23:51.918000 audit[2856]: NETFILTER_CFG table=nat:86 family=2 entries=17 op=nft_register_chain pid=2856 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:23:51.918000 audit[2856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff397e050 a2=0 a3=ffffb12d06c0 items=0 ppid=2734 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.918000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:23:51.920000 audit[2860]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2860 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.920000 audit[2860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffeac9e90 a2=0 a3=ffff885446c0 items=0 ppid=2734 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.920000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:23:51.925000 audit[2862]: NETFILTER_CFG table=filter:88 family=10 entries=2 op=nft_register_chain pid=2862 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.925000 audit[2862]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffeb971a30 a2=0 a3=ffffb25316c0 items=0 ppid=2734 pid=2862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.925000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 21:23:51.933000 audit[2865]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2865 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.933000 audit[2865]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe84940c0 a2=0 a3=ffffb01e66c0 items=0 ppid=2734 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.933000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 21:23:51.935000 audit[2866]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_chain pid=2866 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.935000 audit[2866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc26cc8b0 a2=0 a3=ffffa5cdd6c0 items=0 ppid=2734 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:23:51.940000 audit[2868]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_rule pid=2868 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.940000 audit[2868]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff71f2780 a2=0 a3=ffffaa5ca6c0 items=0 ppid=2734 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.940000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:23:51.943000 audit[2869]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2869 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.943000 audit[2869]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf5e35c0 a2=0 a3=ffff8d8c46c0 items=0 ppid=2734 pid=2869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.943000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:23:51.948000 audit[2871]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2871 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.948000 audit[2871]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff71d8200 a2=0 a3=ffff85dae6c0 items=0 ppid=2734 pid=2871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.948000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 21:23:51.955000 audit[2874]: NETFILTER_CFG table=filter:94 family=10 entries=2 op=nft_register_chain pid=2874 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.955000 audit[2874]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd7c0c0e0 a2=0 a3=ffff93b506c0 items=0 ppid=2734 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.955000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:23:51.956000 audit[2875]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_chain pid=2875 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.956000 audit[2875]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffff03980 a2=0 a3=ffffb8cc86c0 items=0 ppid=2734 pid=2875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.956000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:23:51.960000 audit[2877]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2877 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.960000 audit[2877]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd66b4010 a2=0 a3=ffff8ab886c0 items=0 ppid=2734 pid=2877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.960000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:23:51.961000 audit[2878]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_chain pid=2878 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.961000 audit[2878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7e40f40 a2=0 a3=ffff9c13c6c0 items=0 ppid=2734 pid=2878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.961000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:23:51.965000 audit[2880]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_rule pid=2880 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.965000 audit[2880]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff70deec0 a2=0 a3=ffffa5dfd6c0 items=0 ppid=2734 pid=2880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.965000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:23:51.970000 audit[2883]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2883 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.970000 audit[2883]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdc6d3bd0 a2=0 a3=ffff89a526c0 items=0 ppid=2734 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.970000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:23:51.975000 audit[2886]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2886 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.975000 audit[2886]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd64f2ef0 a2=0 a3=ffffbdb586c0 items=0 ppid=2734 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.975000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 21:23:51.976000 audit[2887]: NETFILTER_CFG table=nat:101 family=10 entries=1 op=nft_register_chain pid=2887 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.976000 audit[2887]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff57ce350 a2=0 a3=ffffb820b6c0 items=0 ppid=2734 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.976000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:23:51.980000 audit[2889]: NETFILTER_CFG table=nat:102 family=10 entries=2 op=nft_register_chain pid=2889 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.980000 audit[2889]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffef5c9aa0 a2=0 a3=ffff959a46c0 items=0 ppid=2734 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.980000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:23:51.985000 audit[2892]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2892 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.985000 audit[2892]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd785d030 a2=0 a3=ffffb625d6c0 items=0 ppid=2734 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.985000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:23:51.992000 audit[2896]: NETFILTER_CFG table=filter:104 family=10 entries=3 op=nft_register_rule pid=2896 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:23:51.992000 audit[2896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffdb853ba0 a2=0 a3=ffffb783c6c0 items=0 ppid=2734 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.992000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:23:51.993000 audit[2896]: NETFILTER_CFG table=nat:105 family=10 entries=10 op=nft_register_chain pid=2896 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:23:51.993000 audit[2896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffdb853ba0 a2=0 a3=ffffb783c6c0 items=0 ppid=2734 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.993000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:23:52.263701 kubelet[2543]: I1002 21:23:52.263653 2543 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-6m9ks" podStartSLOduration=2.263620874 pod.CreationTimestamp="2023-10-02 21:23:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:23:52.263458874 +0000 UTC m=+17.392142076" watchObservedRunningTime="2023-10-02 21:23:52.263620874 +0000 UTC m=+17.392304076" Oct 2 21:23:56.106669 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount706754467.mount: Deactivated successfully. Oct 2 21:23:58.287727 env[1374]: time="2023-10-02T21:23:58.287646252Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:58.294997 env[1374]: time="2023-10-02T21:23:58.294956846Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:58.300332 env[1374]: time="2023-10-02T21:23:58.300301761Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:58.300825 env[1374]: time="2023-10-02T21:23:58.300797961Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 21:23:58.302832 env[1374]: time="2023-10-02T21:23:58.302270919Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 21:23:58.303626 env[1374]: time="2023-10-02T21:23:58.303203398Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:23:58.334264 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3880593775.mount: Deactivated successfully. Oct 2 21:23:58.339621 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4228912011.mount: Deactivated successfully. Oct 2 21:23:58.352460 env[1374]: time="2023-10-02T21:23:58.352411114Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\"" Oct 2 21:23:58.353257 env[1374]: time="2023-10-02T21:23:58.353230193Z" level=info msg="StartContainer for \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\"" Oct 2 21:23:58.375858 systemd[1]: Started cri-containerd-47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b.scope. Oct 2 21:23:58.392194 systemd[1]: cri-containerd-47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b.scope: Deactivated successfully. Oct 2 21:23:59.330878 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b-rootfs.mount: Deactivated successfully. Oct 2 21:24:00.081335 env[1374]: time="2023-10-02T21:24:00.081281531Z" level=info msg="shim disconnected" id=47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b Oct 2 21:24:00.081666 env[1374]: time="2023-10-02T21:24:00.081346691Z" level=warning msg="cleaning up after shim disconnected" id=47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b namespace=k8s.io Oct 2 21:24:00.081666 env[1374]: time="2023-10-02T21:24:00.081357011Z" level=info msg="cleaning up dead shim" Oct 2 21:24:00.103528 env[1374]: time="2023-10-02T21:24:00.103463791Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:24:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2922 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:24:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:24:00.103839 env[1374]: time="2023-10-02T21:24:00.103735471Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 21:24:00.107031 env[1374]: time="2023-10-02T21:24:00.106983428Z" level=error msg="Failed to pipe stderr of container \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\"" error="reading from a closed fifo" Oct 2 21:24:00.107173 env[1374]: time="2023-10-02T21:24:00.107150708Z" level=error msg="Failed to pipe stdout of container \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\"" error="reading from a closed fifo" Oct 2 21:24:00.111625 env[1374]: time="2023-10-02T21:24:00.111571384Z" level=error msg="StartContainer for \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:24:00.111854 kubelet[2543]: E1002 21:24:00.111834 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b" Oct 2 21:24:00.112153 kubelet[2543]: E1002 21:24:00.111966 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:24:00.112153 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:24:00.112153 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:24:00.112153 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wmp4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:24:00.112394 kubelet[2543]: E1002 21:24:00.112002 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:00.281957 env[1374]: time="2023-10-02T21:24:00.281103475Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:24:00.306584 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2015095572.mount: Deactivated successfully. Oct 2 21:24:00.315473 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount307570333.mount: Deactivated successfully. Oct 2 21:24:00.327618 env[1374]: time="2023-10-02T21:24:00.327564675Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\"" Oct 2 21:24:00.328096 env[1374]: time="2023-10-02T21:24:00.328065594Z" level=info msg="StartContainer for \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\"" Oct 2 21:24:00.354656 systemd[1]: run-containerd-runc-k8s.io-a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981-runc.wT7zfR.mount: Deactivated successfully. Oct 2 21:24:00.358119 systemd[1]: Started cri-containerd-a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981.scope. Oct 2 21:24:00.371863 systemd[1]: cri-containerd-a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981.scope: Deactivated successfully. Oct 2 21:24:00.375954 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981-rootfs.mount: Deactivated successfully. Oct 2 21:24:00.390042 env[1374]: time="2023-10-02T21:24:00.389981300Z" level=info msg="shim disconnected" id=a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981 Oct 2 21:24:00.390042 env[1374]: time="2023-10-02T21:24:00.390036380Z" level=warning msg="cleaning up after shim disconnected" id=a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981 namespace=k8s.io Oct 2 21:24:00.390042 env[1374]: time="2023-10-02T21:24:00.390046100Z" level=info msg="cleaning up dead shim" Oct 2 21:24:00.403770 env[1374]: time="2023-10-02T21:24:00.403713568Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:24:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2961 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:24:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:24:00.404038 env[1374]: time="2023-10-02T21:24:00.403978648Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 21:24:00.405024 env[1374]: time="2023-10-02T21:24:00.404985367Z" level=error msg="Failed to pipe stdout of container \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\"" error="reading from a closed fifo" Oct 2 21:24:00.406182 env[1374]: time="2023-10-02T21:24:00.406154486Z" level=error msg="Failed to pipe stderr of container \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\"" error="reading from a closed fifo" Oct 2 21:24:00.410259 env[1374]: time="2023-10-02T21:24:00.410177282Z" level=error msg="StartContainer for \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:24:00.410661 kubelet[2543]: E1002 21:24:00.410480 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981" Oct 2 21:24:00.410661 kubelet[2543]: E1002 21:24:00.410595 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:24:00.410661 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:24:00.410661 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:24:00.410847 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wmp4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:24:00.411196 kubelet[2543]: E1002 21:24:00.410630 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:01.271338 kubelet[2543]: I1002 21:24:01.270972 2543 scope.go:115] "RemoveContainer" containerID="47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b" Oct 2 21:24:01.271338 kubelet[2543]: I1002 21:24:01.271299 2543 scope.go:115] "RemoveContainer" containerID="47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b" Oct 2 21:24:01.273864 env[1374]: time="2023-10-02T21:24:01.273829327Z" level=info msg="RemoveContainer for \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\"" Oct 2 21:24:01.285970 env[1374]: time="2023-10-02T21:24:01.285913596Z" level=info msg="RemoveContainer for \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\"" Oct 2 21:24:01.286079 env[1374]: time="2023-10-02T21:24:01.286009476Z" level=error msg="RemoveContainer for \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\" failed" error="rpc error: code = NotFound desc = get container info: container \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\" in namespace \"k8s.io\": not found" Oct 2 21:24:01.286775 env[1374]: time="2023-10-02T21:24:01.286743116Z" level=info msg="RemoveContainer for \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\" returns successfully" Oct 2 21:24:01.287084 kubelet[2543]: E1002 21:24:01.287005 2543 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b\" in namespace \"k8s.io\": not found" containerID="47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b" Oct 2 21:24:01.287084 kubelet[2543]: E1002 21:24:01.287049 2543 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b" in namespace "k8s.io": not found; Skipping pod "cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)" Oct 2 21:24:01.287325 kubelet[2543]: E1002 21:24:01.287307 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:01.729156 env[1374]: time="2023-10-02T21:24:01.729121052Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:24:01.735726 env[1374]: time="2023-10-02T21:24:01.735688646Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:24:01.738916 env[1374]: time="2023-10-02T21:24:01.738881203Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:24:01.739204 env[1374]: time="2023-10-02T21:24:01.739172963Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 21:24:01.741600 env[1374]: time="2023-10-02T21:24:01.741564761Z" level=info msg="CreateContainer within sandbox \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 21:24:01.764463 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1825611788.mount: Deactivated successfully. Oct 2 21:24:01.777054 env[1374]: time="2023-10-02T21:24:01.777011610Z" level=info msg="CreateContainer within sandbox \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\"" Oct 2 21:24:01.777840 env[1374]: time="2023-10-02T21:24:01.777814050Z" level=info msg="StartContainer for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\"" Oct 2 21:24:01.797109 systemd[1]: Started cri-containerd-a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8.scope. Oct 2 21:24:01.820947 kernel: kauditd_printk_skb: 351 callbacks suppressed Oct 2 21:24:01.821086 kernel: audit: type=1400 audit(1696281841.813:1081): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.855439 kernel: audit: type=1400 audit(1696281841.813:1082): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.893458 kernel: audit: type=1400 audit(1696281841.813:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.893546 kernel: audit: type=1400 audit(1696281841.813:1084): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.912942 kernel: audit: type=1400 audit(1696281841.813:1085): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.932951 kernel: audit: type=1400 audit(1696281841.813:1086): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.939031 env[1374]: time="2023-10-02T21:24:01.938984470Z" level=info msg="StartContainer for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" returns successfully" Oct 2 21:24:01.951912 kernel: audit: type=1400 audit(1696281841.813:1087): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.969991 kernel: audit: type=1400 audit(1696281841.813:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.988162 kernel: audit: type=1400 audit(1696281841.813:1089): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:02.005667 kernel: audit: type=1400 audit(1696281841.818:1090): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.818000 audit: BPF prog-id=122 op=LOAD Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2787 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:24:01.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137303934623663396135373162376666643366393765316661323231 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2787 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:24:01.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137303934623663396135373162376666643366393765316661323231 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.836000 audit: BPF prog-id=123 op=LOAD Oct 2 21:24:01.836000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2787 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:24:01.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137303934623663396135373162376666643366393765316661323231 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit: BPF prog-id=124 op=LOAD Oct 2 21:24:01.854000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2787 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:24:01.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137303934623663396135373162376666643366393765316661323231 Oct 2 21:24:01.854000 audit: BPF prog-id=124 op=UNLOAD Oct 2 21:24:01.854000 audit: BPF prog-id=123 op=UNLOAD Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:24:01.854000 audit: BPF prog-id=125 op=LOAD Oct 2 21:24:01.854000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2787 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:24:01.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137303934623663396135373162376666643366393765316661323231 Oct 2 21:24:01.980000 audit[2994]: AVC avc: denied { map_create } for pid=2994 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c760,c935 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c760,c935 tclass=bpf permissive=0 Oct 2 21:24:01.980000 audit[2994]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400055b768 a2=48 a3=0 items=0 ppid=2787 pid=2994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c760,c935 key=(null) Oct 2 21:24:01.980000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 21:24:02.276896 kubelet[2543]: E1002 21:24:02.275579 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:02.348419 kubelet[2543]: I1002 21:24:02.348388 2543 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-dzb2k" podStartSLOduration=-9.223372024506433e+09 pod.CreationTimestamp="2023-10-02 21:23:50 +0000 UTC" firstStartedPulling="2023-10-02 21:23:51.79984309 +0000 UTC m=+16.928526292" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:24:02.308745552 +0000 UTC m=+27.437428754" watchObservedRunningTime="2023-10-02 21:24:02.348342358 +0000 UTC m=+27.477025560" Oct 2 21:24:03.186487 kubelet[2543]: W1002 21:24:03.186447 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice/cri-containerd-47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b.scope WatchSource:0}: container "47af065451e9f80ccf6cf20848b796150a66db7bb6e547b6abb3f70f436afe5b" in namespace "k8s.io": not found Oct 2 21:24:06.292307 kubelet[2543]: W1002 21:24:06.292258 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice/cri-containerd-a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981.scope WatchSource:0}: task a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981 not found: not found Oct 2 21:24:16.219038 env[1374]: time="2023-10-02T21:24:16.218977497Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:24:16.238516 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2795081640.mount: Deactivated successfully. Oct 2 21:24:16.249769 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3675320517.mount: Deactivated successfully. Oct 2 21:24:16.262281 env[1374]: time="2023-10-02T21:24:16.262235065Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\"" Oct 2 21:24:16.263347 env[1374]: time="2023-10-02T21:24:16.263306545Z" level=info msg="StartContainer for \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\"" Oct 2 21:24:16.286412 systemd[1]: Started cri-containerd-dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b.scope. Oct 2 21:24:16.301518 systemd[1]: cri-containerd-dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b.scope: Deactivated successfully. Oct 2 21:24:16.642563 env[1374]: time="2023-10-02T21:24:16.642521103Z" level=info msg="shim disconnected" id=dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b Oct 2 21:24:16.642829 env[1374]: time="2023-10-02T21:24:16.642812223Z" level=warning msg="cleaning up after shim disconnected" id=dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b namespace=k8s.io Oct 2 21:24:16.642913 env[1374]: time="2023-10-02T21:24:16.642900023Z" level=info msg="cleaning up dead shim" Oct 2 21:24:16.654875 env[1374]: time="2023-10-02T21:24:16.654832214Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:24:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3039 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:24:16Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:24:16.655329 env[1374]: time="2023-10-02T21:24:16.655276253Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 21:24:16.657501 env[1374]: time="2023-10-02T21:24:16.655555933Z" level=error msg="Failed to pipe stderr of container \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\"" error="reading from a closed fifo" Oct 2 21:24:16.657606 env[1374]: time="2023-10-02T21:24:16.657451772Z" level=error msg="Failed to pipe stdout of container \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\"" error="reading from a closed fifo" Oct 2 21:24:16.663593 env[1374]: time="2023-10-02T21:24:16.663520767Z" level=error msg="StartContainer for \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:24:16.664109 kubelet[2543]: E1002 21:24:16.663913 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b" Oct 2 21:24:16.664109 kubelet[2543]: E1002 21:24:16.664055 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:24:16.664109 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:24:16.664109 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:24:16.665105 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wmp4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:24:16.665179 kubelet[2543]: E1002 21:24:16.664091 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:17.235750 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b-rootfs.mount: Deactivated successfully. Oct 2 21:24:17.301464 kubelet[2543]: I1002 21:24:17.301433 2543 scope.go:115] "RemoveContainer" containerID="a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981" Oct 2 21:24:17.301805 kubelet[2543]: I1002 21:24:17.301781 2543 scope.go:115] "RemoveContainer" containerID="a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981" Oct 2 21:24:17.306147 env[1374]: time="2023-10-02T21:24:17.306105732Z" level=info msg="RemoveContainer for \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\"" Oct 2 21:24:17.307051 env[1374]: time="2023-10-02T21:24:17.307008291Z" level=info msg="RemoveContainer for \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\"" Oct 2 21:24:17.307282 env[1374]: time="2023-10-02T21:24:17.307251651Z" level=error msg="RemoveContainer for \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\" failed" error="failed to set removing state for container \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\": container is already in removing state" Oct 2 21:24:17.307505 kubelet[2543]: E1002 21:24:17.307488 2543 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\": container is already in removing state" containerID="a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981" Oct 2 21:24:17.307630 kubelet[2543]: I1002 21:24:17.307621 2543 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981} err="rpc error: code = Unknown desc = failed to set removing state for container \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\": container is already in removing state" Oct 2 21:24:17.321158 env[1374]: time="2023-10-02T21:24:17.321108081Z" level=info msg="RemoveContainer for \"a18b3af7dd9b9ab5add14dc5ddb6035dd4a7ee4c10cad37e11aad9afe9a25981\" returns successfully" Oct 2 21:24:17.321841 kubelet[2543]: E1002 21:24:17.321821 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:19.747536 kubelet[2543]: W1002 21:24:19.747492 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice/cri-containerd-dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b.scope WatchSource:0}: task dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b not found: not found Oct 2 21:24:30.217716 kubelet[2543]: E1002 21:24:30.217638 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:31.680000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.686544 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 21:24:31.686640 kernel: audit: type=1400 audit(1696281871.680:1100): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.680000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.731374 kernel: audit: type=1400 audit(1696281871.680:1101): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.731481 kernel: audit: type=1300 audit(1696281871.680:1101): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40025769c0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:31.680000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40025769c0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:31.680000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:31.785900 kernel: audit: type=1327 audit(1696281871.680:1101): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:31.786043 kernel: audit: type=1300 audit(1696281871.680:1100): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002680500 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:31.680000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002680500 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:31.680000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:31.841337 kernel: audit: type=1327 audit(1696281871.680:1100): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:31.867000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.867000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4004b7c840 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:24:31.921482 kernel: audit: type=1400 audit(1696281871.867:1102): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.921617 kernel: audit: type=1300 audit(1696281871.867:1102): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4004b7c840 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:24:31.921656 kernel: audit: type=1400 audit(1696281871.867:1103): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.867000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.867000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40029b6de0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:24:31.973238 kernel: audit: type=1300 audit(1696281871.867:1103): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40029b6de0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:24:31.867000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:31.867000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.867000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4004810a80 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:24:31.867000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:31.867000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:31.880000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.880000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4004b7c870 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:24:31.880000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:31.888000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.888000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400f8c2e80 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:24:31.888000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:31.888000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:31.888000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4004b7c9c0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:24:31.888000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:42.218887 env[1374]: time="2023-10-02T21:24:42.218639051Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:24:42.248008 env[1374]: time="2023-10-02T21:24:42.247954753Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\"" Oct 2 21:24:42.250698 env[1374]: time="2023-10-02T21:24:42.248426393Z" level=info msg="StartContainer for \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\"" Oct 2 21:24:42.273836 systemd[1]: Started cri-containerd-2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a.scope. Oct 2 21:24:42.286046 systemd[1]: cri-containerd-2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a.scope: Deactivated successfully. Oct 2 21:24:42.291640 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a-rootfs.mount: Deactivated successfully. Oct 2 21:24:42.333322 env[1374]: time="2023-10-02T21:24:42.333262580Z" level=info msg="shim disconnected" id=2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a Oct 2 21:24:42.333322 env[1374]: time="2023-10-02T21:24:42.333316419Z" level=warning msg="cleaning up after shim disconnected" id=2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a namespace=k8s.io Oct 2 21:24:42.333322 env[1374]: time="2023-10-02T21:24:42.333327059Z" level=info msg="cleaning up dead shim" Oct 2 21:24:42.345741 env[1374]: time="2023-10-02T21:24:42.345699292Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:24:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3084 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:24:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:24:42.345999 env[1374]: time="2023-10-02T21:24:42.345948932Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:24:42.346193 env[1374]: time="2023-10-02T21:24:42.346164371Z" level=error msg="Failed to pipe stderr of container \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\"" error="reading from a closed fifo" Oct 2 21:24:42.346998 env[1374]: time="2023-10-02T21:24:42.346970531Z" level=error msg="Failed to pipe stdout of container \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\"" error="reading from a closed fifo" Oct 2 21:24:42.351218 env[1374]: time="2023-10-02T21:24:42.351175888Z" level=error msg="StartContainer for \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:24:42.351445 kubelet[2543]: E1002 21:24:42.351422 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a" Oct 2 21:24:42.351711 kubelet[2543]: E1002 21:24:42.351533 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:24:42.351711 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:24:42.351711 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:24:42.351711 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wmp4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:24:42.351829 kubelet[2543]: E1002 21:24:42.351818 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:43.347274 kubelet[2543]: I1002 21:24:43.347241 2543 scope.go:115] "RemoveContainer" containerID="dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b" Oct 2 21:24:43.347609 kubelet[2543]: I1002 21:24:43.347586 2543 scope.go:115] "RemoveContainer" containerID="dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b" Oct 2 21:24:43.348601 env[1374]: time="2023-10-02T21:24:43.348559263Z" level=info msg="RemoveContainer for \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\"" Oct 2 21:24:43.349075 env[1374]: time="2023-10-02T21:24:43.349044463Z" level=info msg="RemoveContainer for \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\"" Oct 2 21:24:43.349154 env[1374]: time="2023-10-02T21:24:43.349113943Z" level=error msg="RemoveContainer for \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\" failed" error="failed to set removing state for container \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\": container is already in removing state" Oct 2 21:24:43.349778 kubelet[2543]: E1002 21:24:43.349275 2543 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\": container is already in removing state" containerID="dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b" Oct 2 21:24:43.349778 kubelet[2543]: E1002 21:24:43.349305 2543 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b": container is already in removing state; Skipping pod "cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)" Oct 2 21:24:43.349778 kubelet[2543]: E1002 21:24:43.349549 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:24:43.362753 env[1374]: time="2023-10-02T21:24:43.362717134Z" level=info msg="RemoveContainer for \"dc8218fcc15cd54ce7eadad4be772b6838e8a0c6564d156a6647da6b86f3474b\" returns successfully" Oct 2 21:24:45.438366 kubelet[2543]: W1002 21:24:45.438330 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice/cri-containerd-2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a.scope WatchSource:0}: task 2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a not found: not found Oct 2 21:24:47.351000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:47.357194 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:24:47.357316 kernel: audit: type=1400 audit(1696281887.351:1108): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:47.351000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002571680 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:47.406932 kernel: audit: type=1300 audit(1696281887.351:1108): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002571680 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:47.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:47.430731 kernel: audit: type=1327 audit(1696281887.351:1108): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:47.430844 kernel: audit: type=1400 audit(1696281887.358:1109): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:47.358000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:47.358000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027aa700 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:47.480452 kernel: audit: type=1300 audit(1696281887.358:1109): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027aa700 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:47.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:47.503590 kernel: audit: type=1327 audit(1696281887.358:1109): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:47.503682 kernel: audit: type=1400 audit(1696281887.358:1110): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:47.358000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:47.358000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027aa720 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:47.553549 kernel: audit: type=1300 audit(1696281887.358:1110): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027aa720 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:47.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:47.576952 kernel: audit: type=1327 audit(1696281887.358:1110): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:47.577040 kernel: audit: type=1400 audit(1696281887.358:1111): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:47.358000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:47.358000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027aa740 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:24:47.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:56.217435 kubelet[2543]: E1002 21:24:56.217391 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:25:08.217521 kubelet[2543]: E1002 21:25:08.217492 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:25:23.219825 env[1374]: time="2023-10-02T21:25:23.219762904Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 21:25:23.255338 env[1374]: time="2023-10-02T21:25:23.255288100Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\"" Oct 2 21:25:23.256071 env[1374]: time="2023-10-02T21:25:23.256039503Z" level=info msg="StartContainer for \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\"" Oct 2 21:25:23.279646 systemd[1]: Started cri-containerd-7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d.scope. Oct 2 21:25:23.294518 systemd[1]: cri-containerd-7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d.scope: Deactivated successfully. Oct 2 21:25:23.298411 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d-rootfs.mount: Deactivated successfully. Oct 2 21:25:23.317897 env[1374]: time="2023-10-02T21:25:23.317852964Z" level=info msg="shim disconnected" id=7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d Oct 2 21:25:23.318214 env[1374]: time="2023-10-02T21:25:23.318186104Z" level=warning msg="cleaning up after shim disconnected" id=7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d namespace=k8s.io Oct 2 21:25:23.318279 env[1374]: time="2023-10-02T21:25:23.318267028Z" level=info msg="cleaning up dead shim" Oct 2 21:25:23.337683 env[1374]: time="2023-10-02T21:25:23.337616377Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:25:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3126 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:25:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:25:23.338272 env[1374]: time="2023-10-02T21:25:23.338197770Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:25:23.340478 env[1374]: time="2023-10-02T21:25:23.340414097Z" level=error msg="Failed to pipe stdout of container \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\"" error="reading from a closed fifo" Oct 2 21:25:23.340718 env[1374]: time="2023-10-02T21:25:23.340691833Z" level=error msg="Failed to pipe stderr of container \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\"" error="reading from a closed fifo" Oct 2 21:25:23.345600 env[1374]: time="2023-10-02T21:25:23.345533831Z" level=error msg="StartContainer for \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:25:23.345828 kubelet[2543]: E1002 21:25:23.345798 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d" Oct 2 21:25:23.346150 kubelet[2543]: E1002 21:25:23.345909 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:25:23.346150 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:25:23.346150 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:25:23.346150 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wmp4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:25:23.346267 kubelet[2543]: E1002 21:25:23.345998 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:25:23.406306 kubelet[2543]: I1002 21:25:23.406281 2543 scope.go:115] "RemoveContainer" containerID="2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a" Oct 2 21:25:23.406828 kubelet[2543]: I1002 21:25:23.406801 2543 scope.go:115] "RemoveContainer" containerID="2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a" Oct 2 21:25:23.409715 env[1374]: time="2023-10-02T21:25:23.409675706Z" level=info msg="RemoveContainer for \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\"" Oct 2 21:25:23.410264 env[1374]: time="2023-10-02T21:25:23.410235298Z" level=info msg="RemoveContainer for \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\"" Oct 2 21:25:23.410356 env[1374]: time="2023-10-02T21:25:23.410323623Z" level=error msg="RemoveContainer for \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\" failed" error="failed to set removing state for container \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\": container is already in removing state" Oct 2 21:25:23.410527 kubelet[2543]: E1002 21:25:23.410500 2543 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\": container is already in removing state" containerID="2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a" Oct 2 21:25:23.410631 kubelet[2543]: E1002 21:25:23.410621 2543 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a": container is already in removing state; Skipping pod "cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)" Oct 2 21:25:23.411017 kubelet[2543]: E1002 21:25:23.410992 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:25:23.420662 env[1374]: time="2023-10-02T21:25:23.420609332Z" level=info msg="RemoveContainer for \"2c6a48aa816e06675798f0087daee049007e9986032066a4b733853bf77f918a\" returns successfully" Oct 2 21:25:26.422358 kubelet[2543]: W1002 21:25:26.422311 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice/cri-containerd-7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d.scope WatchSource:0}: task 7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d not found: not found Oct 2 21:25:31.682000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.689083 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:25:31.689162 kernel: audit: type=1400 audit(1696281931.682:1112): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.682000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010ebb00 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:31.741870 kernel: audit: type=1300 audit(1696281931.682:1112): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010ebb00 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:31.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:31.767164 kernel: audit: type=1327 audit(1696281931.682:1112): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:31.682000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.789497 kernel: audit: type=1400 audit(1696281931.682:1113): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.682000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001145fe0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:31.820964 kernel: audit: type=1300 audit(1696281931.682:1113): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001145fe0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:31.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:31.845606 kernel: audit: type=1327 audit(1696281931.682:1113): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:31.867000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.867000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008cd1b30 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:25:31.922155 kernel: audit: type=1400 audit(1696281931.867:1114): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.922289 kernel: audit: type=1300 audit(1696281931.867:1114): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008cd1b30 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:25:31.922330 kernel: audit: type=1327 audit(1696281931.867:1114): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:31.867000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:31.868000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.966842 kernel: audit: type=1400 audit(1696281931.868:1115): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.868000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002aabf80 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:25:31.868000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:31.868000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.868000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008db3e90 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:25:31.868000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:31.894000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.894000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008db3fb0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:25:31.894000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:31.894000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.894000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002b64160 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:25:31.894000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:31.895000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:31.895000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008ec20f0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:25:31.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:35.065821 kubelet[2543]: E1002 21:25:35.065787 2543 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 21:25:35.143406 kubelet[2543]: E1002 21:25:35.143360 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:25:38.216885 kubelet[2543]: E1002 21:25:38.216850 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:25:40.144518 kubelet[2543]: E1002 21:25:40.144495 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:25:45.145641 kubelet[2543]: E1002 21:25:45.145610 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:25:47.353000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:47.359733 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:25:47.359810 kernel: audit: type=1400 audit(1696281947.353:1120): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:47.353000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011bbf40 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:47.409930 kernel: audit: type=1300 audit(1696281947.353:1120): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011bbf40 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:47.353000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:47.434018 kernel: audit: type=1327 audit(1696281947.353:1120): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:47.434118 kernel: audit: type=1400 audit(1696281947.358:1121): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:47.358000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:47.358000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009dc1c0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:47.484513 kernel: audit: type=1300 audit(1696281947.358:1121): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009dc1c0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:47.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:47.508194 kernel: audit: type=1327 audit(1696281947.358:1121): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:47.508295 kernel: audit: type=1400 audit(1696281947.358:1122): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:47.358000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:47.358000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009dc1e0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:47.558027 kernel: audit: type=1300 audit(1696281947.358:1122): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009dc1e0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:47.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:47.581387 kernel: audit: type=1327 audit(1696281947.358:1122): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:47.581479 kernel: audit: type=1400 audit(1696281947.358:1123): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:47.358000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:47.358000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009dc200 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:25:47.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:50.147134 kubelet[2543]: E1002 21:25:50.147101 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:25:52.217120 kubelet[2543]: E1002 21:25:52.216910 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:25:55.148414 kubelet[2543]: E1002 21:25:55.148388 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:00.150204 kubelet[2543]: E1002 21:26:00.150168 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:05.151512 kubelet[2543]: E1002 21:26:05.151486 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:07.217394 kubelet[2543]: E1002 21:26:07.217365 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:26:10.152639 kubelet[2543]: E1002 21:26:10.152607 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:12.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.16:22-10.200.12.6:60546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:12.846847 systemd[1]: Started sshd@7-10.200.20.16:22-10.200.12.6:60546.service. Oct 2 21:26:12.852803 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:26:12.852980 kernel: audit: type=1130 audit(1696281972.846:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.16:22-10.200.12.6:60546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:13.309000 audit[3147]: USER_ACCT pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.310315 sshd[3147]: Accepted publickey for core from 10.200.12.6 port 60546 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:13.338946 kernel: audit: type=1101 audit(1696281973.309:1125): pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.337530 sshd[3147]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:13.336000 audit[3147]: CRED_ACQ pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.380880 kernel: audit: type=1103 audit(1696281973.336:1126): pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.381049 kernel: audit: type=1006 audit(1696281973.336:1127): pid=3147 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 21:26:13.336000 audit[3147]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdc6a9d0 a2=3 a3=1 items=0 ppid=1 pid=3147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:13.407512 systemd-logind[1361]: New session 10 of user core. Oct 2 21:26:13.336000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:13.408719 systemd[1]: Started session-10.scope. Oct 2 21:26:13.409043 kernel: audit: type=1300 audit(1696281973.336:1127): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdc6a9d0 a2=3 a3=1 items=0 ppid=1 pid=3147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:13.418940 kernel: audit: type=1327 audit(1696281973.336:1127): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:13.419000 audit[3147]: USER_START pid=3147 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.423000 audit[3149]: CRED_ACQ pid=3149 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.473476 kernel: audit: type=1105 audit(1696281973.419:1128): pid=3147 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.473561 kernel: audit: type=1103 audit(1696281973.423:1129): pid=3149 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.783152 sshd[3147]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:13.783000 audit[3147]: USER_END pid=3147 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.786747 systemd-logind[1361]: Session 10 logged out. Waiting for processes to exit. Oct 2 21:26:13.787954 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 21:26:13.789040 systemd-logind[1361]: Removed session 10. Oct 2 21:26:13.789644 systemd[1]: sshd@7-10.200.20.16:22-10.200.12.6:60546.service: Deactivated successfully. Oct 2 21:26:13.784000 audit[3147]: CRED_DISP pid=3147 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.830887 kernel: audit: type=1106 audit(1696281973.783:1130): pid=3147 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.831030 kernel: audit: type=1104 audit(1696281973.784:1131): pid=3147 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:13.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.16:22-10.200.12.6:60546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:15.153375 kubelet[2543]: E1002 21:26:15.153352 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:20.155413 kubelet[2543]: E1002 21:26:20.155378 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:21.219123 kubelet[2543]: E1002 21:26:21.219068 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:26:23.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.16:22-10.200.12.6:58224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:23.859223 systemd[1]: Started sshd@8-10.200.20.16:22-10.200.12.6:58224.service. Oct 2 21:26:23.864196 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:26:23.864321 kernel: audit: type=1130 audit(1696281983.858:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.16:22-10.200.12.6:58224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:24.317000 audit[3162]: USER_ACCT pid=3162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.318487 sshd[3162]: Accepted publickey for core from 10.200.12.6 port 58224 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:24.325942 sshd[3162]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:24.319000 audit[3162]: CRED_ACQ pid=3162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.364977 kernel: audit: type=1101 audit(1696281984.317:1134): pid=3162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.365077 kernel: audit: type=1103 audit(1696281984.319:1135): pid=3162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.379488 kernel: audit: type=1006 audit(1696281984.319:1136): pid=3162 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 21:26:24.319000 audit[3162]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff57b9420 a2=3 a3=1 items=0 ppid=1 pid=3162 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:24.404119 kernel: audit: type=1300 audit(1696281984.319:1136): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff57b9420 a2=3 a3=1 items=0 ppid=1 pid=3162 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:24.319000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:24.404862 systemd-logind[1361]: New session 11 of user core. Oct 2 21:26:24.406357 systemd[1]: Started session-11.scope. Oct 2 21:26:24.412020 kernel: audit: type=1327 audit(1696281984.319:1136): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:24.413000 audit[3162]: USER_START pid=3162 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.413000 audit[3164]: CRED_ACQ pid=3164 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.462642 kernel: audit: type=1105 audit(1696281984.413:1137): pid=3162 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.462740 kernel: audit: type=1103 audit(1696281984.413:1138): pid=3164 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.743891 sshd[3162]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:24.743000 audit[3162]: USER_END pid=3162 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.747824 systemd-logind[1361]: Session 11 logged out. Waiting for processes to exit. Oct 2 21:26:24.749062 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 21:26:24.750364 systemd-logind[1361]: Removed session 11. Oct 2 21:26:24.751117 systemd[1]: sshd@8-10.200.20.16:22-10.200.12.6:58224.service: Deactivated successfully. Oct 2 21:26:24.745000 audit[3162]: CRED_DISP pid=3162 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.791760 kernel: audit: type=1106 audit(1696281984.743:1139): pid=3162 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.791869 kernel: audit: type=1104 audit(1696281984.745:1140): pid=3162 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:24.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.16:22-10.200.12.6:58224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:25.156417 kubelet[2543]: E1002 21:26:25.156351 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:30.157076 kubelet[2543]: E1002 21:26:30.157035 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:31.682000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.688288 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:26:31.688388 kernel: audit: type=1400 audit(1696281991.682:1142): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.682000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c39bf0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:26:31.741419 kernel: audit: type=1300 audit(1696281991.682:1142): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001c39bf0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:26:31.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:31.765336 kernel: audit: type=1327 audit(1696281991.682:1142): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:31.765483 kernel: audit: type=1400 audit(1696281991.682:1143): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.682000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.682000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027ab300 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:26:31.815679 kernel: audit: type=1300 audit(1696281991.682:1143): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027ab300 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:26:31.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:31.839462 kernel: audit: type=1327 audit(1696281991.682:1143): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:31.868000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.868000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400b369170 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:26:31.921733 kernel: audit: type=1400 audit(1696281991.868:1145): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.921877 kernel: audit: type=1300 audit(1696281991.868:1145): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400b369170 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:26:31.921908 kernel: audit: type=1400 audit(1696281991.868:1144): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.868000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.868000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b6f3bf0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:26:31.971823 kernel: audit: type=1300 audit(1696281991.868:1144): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b6f3bf0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:26:31.868000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:31.868000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.868000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=40029fa4e0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:26:31.868000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:31.868000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:31.895000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.895000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b6f3d70 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:26:31.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:31.895000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.895000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400b6f3e60 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:26:31.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:31.895000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:31.895000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40029fa600 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:26:31.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:34.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.16:22-10.200.12.6:47320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:34.828575 systemd[1]: Started sshd@9-10.200.20.16:22-10.200.12.6:47320.service. Oct 2 21:26:35.158028 kubelet[2543]: E1002 21:26:35.158002 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:35.217180 kubelet[2543]: E1002 21:26:35.217143 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:26:35.284000 audit[3175]: USER_ACCT pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:35.285417 sshd[3175]: Accepted publickey for core from 10.200.12.6 port 47320 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:35.286000 audit[3175]: CRED_ACQ pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:35.286000 audit[3175]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff98db240 a2=3 a3=1 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:35.286000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:35.287316 sshd[3175]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:35.292038 systemd[1]: Started session-12.scope. Oct 2 21:26:35.293195 systemd-logind[1361]: New session 12 of user core. Oct 2 21:26:35.296000 audit[3175]: USER_START pid=3175 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:35.299000 audit[3181]: CRED_ACQ pid=3181 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:35.680356 sshd[3175]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:35.680000 audit[3175]: USER_END pid=3175 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:35.680000 audit[3175]: CRED_DISP pid=3175 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:35.683533 systemd-logind[1361]: Session 12 logged out. Waiting for processes to exit. Oct 2 21:26:35.684138 systemd[1]: sshd@9-10.200.20.16:22-10.200.12.6:47320.service: Deactivated successfully. Oct 2 21:26:35.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.16:22-10.200.12.6:47320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:35.684848 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 21:26:35.685889 systemd-logind[1361]: Removed session 12. Oct 2 21:26:40.159097 kubelet[2543]: E1002 21:26:40.159019 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:45.160204 kubelet[2543]: E1002 21:26:45.160167 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:45.765642 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:26:45.765759 kernel: audit: type=1130 audit(1696282005.750:1159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.16:22-10.200.12.6:36464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:45.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.16:22-10.200.12.6:36464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:45.751495 systemd[1]: Started sshd@10-10.200.20.16:22-10.200.12.6:36464.service. Oct 2 21:26:46.175000 audit[3195]: USER_ACCT pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.176353 sshd[3195]: Accepted publickey for core from 10.200.12.6 port 36464 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:46.199000 audit[3195]: CRED_ACQ pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.200671 sshd[3195]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:46.221443 kernel: audit: type=1101 audit(1696282006.175:1160): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.221536 kernel: audit: type=1103 audit(1696282006.199:1161): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.227123 systemd[1]: Started session-13.scope. Oct 2 21:26:46.228693 systemd-logind[1361]: New session 13 of user core. Oct 2 21:26:46.235877 kernel: audit: type=1006 audit(1696282006.199:1162): pid=3195 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 21:26:46.199000 audit[3195]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff22fabd0 a2=3 a3=1 items=0 ppid=1 pid=3195 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:46.259950 kernel: audit: type=1300 audit(1696282006.199:1162): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff22fabd0 a2=3 a3=1 items=0 ppid=1 pid=3195 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:46.199000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:46.267999 kernel: audit: type=1327 audit(1696282006.199:1162): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:46.268098 kernel: audit: type=1105 audit(1696282006.235:1163): pid=3195 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.235000 audit[3195]: USER_START pid=3195 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.239000 audit[3197]: CRED_ACQ pid=3197 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.313621 kernel: audit: type=1103 audit(1696282006.239:1164): pid=3197 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.573470 sshd[3195]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:46.573000 audit[3195]: USER_END pid=3195 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.578041 systemd-logind[1361]: Session 13 logged out. Waiting for processes to exit. Oct 2 21:26:46.579257 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 21:26:46.580178 systemd[1]: sshd@10-10.200.20.16:22-10.200.12.6:36464.service: Deactivated successfully. Oct 2 21:26:46.581892 systemd-logind[1361]: Removed session 13. Oct 2 21:26:46.573000 audit[3195]: CRED_DISP pid=3195 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.622729 kernel: audit: type=1106 audit(1696282006.573:1165): pid=3195 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.622896 kernel: audit: type=1104 audit(1696282006.573:1166): pid=3195 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:46.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.16:22-10.200.12.6:36464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:47.355000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:47.355000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002842c80 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:26:47.355000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:47.358000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:47.358000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400288afe0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:26:47.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:47.359000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:47.359000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400288b100 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:26:47.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:47.359000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:47.359000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002842ca0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:26:47.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:48.219387 env[1374]: time="2023-10-02T21:26:48.219328185Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 21:26:48.253322 env[1374]: time="2023-10-02T21:26:48.253252419Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa\"" Oct 2 21:26:48.253975 env[1374]: time="2023-10-02T21:26:48.253913394Z" level=info msg="StartContainer for \"338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa\"" Oct 2 21:26:48.278744 systemd[1]: Started cri-containerd-338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa.scope. Oct 2 21:26:48.296674 systemd[1]: cri-containerd-338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa.scope: Deactivated successfully. Oct 2 21:26:48.357886 env[1374]: time="2023-10-02T21:26:48.357840385Z" level=info msg="shim disconnected" id=338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa Oct 2 21:26:48.358158 env[1374]: time="2023-10-02T21:26:48.358138351Z" level=warning msg="cleaning up after shim disconnected" id=338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa namespace=k8s.io Oct 2 21:26:48.358221 env[1374]: time="2023-10-02T21:26:48.358208833Z" level=info msg="cleaning up dead shim" Oct 2 21:26:48.371523 env[1374]: time="2023-10-02T21:26:48.371479808Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:26:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3231 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:26:48Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:26:48.371917 env[1374]: time="2023-10-02T21:26:48.371864297Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:26:48.375045 env[1374]: time="2023-10-02T21:26:48.375007886Z" level=error msg="Failed to pipe stderr of container \"338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa\"" error="reading from a closed fifo" Oct 2 21:26:48.375140 env[1374]: time="2023-10-02T21:26:48.375015527Z" level=error msg="Failed to pipe stdout of container \"338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa\"" error="reading from a closed fifo" Oct 2 21:26:48.379241 env[1374]: time="2023-10-02T21:26:48.379187699Z" level=error msg="StartContainer for \"338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:26:48.379607 kubelet[2543]: E1002 21:26:48.379438 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa" Oct 2 21:26:48.379607 kubelet[2543]: E1002 21:26:48.379549 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:26:48.379607 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:26:48.379607 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:26:48.380145 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wmp4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:26:48.380212 kubelet[2543]: E1002 21:26:48.379584 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:26:48.574140 kubelet[2543]: I1002 21:26:48.573526 2543 scope.go:115] "RemoveContainer" containerID="7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d" Oct 2 21:26:48.574140 kubelet[2543]: I1002 21:26:48.573852 2543 scope.go:115] "RemoveContainer" containerID="7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d" Oct 2 21:26:48.575363 env[1374]: time="2023-10-02T21:26:48.575291420Z" level=info msg="RemoveContainer for \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\"" Oct 2 21:26:48.575591 env[1374]: time="2023-10-02T21:26:48.575568226Z" level=info msg="RemoveContainer for \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\"" Oct 2 21:26:48.575774 env[1374]: time="2023-10-02T21:26:48.575724669Z" level=error msg="RemoveContainer for \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\" failed" error="failed to set removing state for container \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\": container is already in removing state" Oct 2 21:26:48.576454 kubelet[2543]: E1002 21:26:48.576043 2543 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\": container is already in removing state" containerID="7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d" Oct 2 21:26:48.576454 kubelet[2543]: E1002 21:26:48.576071 2543 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d": container is already in removing state; Skipping pod "cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)" Oct 2 21:26:48.576454 kubelet[2543]: E1002 21:26:48.576308 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:26:48.586499 env[1374]: time="2023-10-02T21:26:48.586115420Z" level=info msg="RemoveContainer for \"7cfcfd163c94517e77c5321404b699704d168e78a1e1de40003a2cfa132dc91d\" returns successfully" Oct 2 21:26:49.237774 systemd[1]: run-containerd-runc-k8s.io-338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa-runc.ORZ4L4.mount: Deactivated successfully. Oct 2 21:26:49.237872 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa-rootfs.mount: Deactivated successfully. Oct 2 21:26:50.161690 kubelet[2543]: E1002 21:26:50.161663 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:51.461834 kubelet[2543]: W1002 21:26:51.461798 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice/cri-containerd-338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa.scope WatchSource:0}: task 338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa not found: not found Oct 2 21:26:55.163525 kubelet[2543]: E1002 21:26:55.163495 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:56.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.16:22-10.200.12.6:45092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:56.644613 systemd[1]: Started sshd@11-10.200.20.16:22-10.200.12.6:45092.service. Oct 2 21:26:56.650032 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:26:56.650162 kernel: audit: type=1130 audit(1696282016.643:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.16:22-10.200.12.6:45092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:57.063000 audit[3247]: USER_ACCT pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.064576 sshd[3247]: Accepted publickey for core from 10.200.12.6 port 45092 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:57.089956 kernel: audit: type=1101 audit(1696282017.063:1173): pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.089000 audit[3247]: CRED_ACQ pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.090777 sshd[3247]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:57.126202 kernel: audit: type=1103 audit(1696282017.089:1174): pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.126344 kernel: audit: type=1006 audit(1696282017.089:1175): pid=3247 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 21:26:57.089000 audit[3247]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff79b8470 a2=3 a3=1 items=0 ppid=1 pid=3247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:57.089000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:57.160735 kernel: audit: type=1300 audit(1696282017.089:1175): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff79b8470 a2=3 a3=1 items=0 ppid=1 pid=3247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:57.160814 kernel: audit: type=1327 audit(1696282017.089:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:57.154070 systemd[1]: Started session-14.scope. Oct 2 21:26:57.160344 systemd-logind[1361]: New session 14 of user core. Oct 2 21:26:57.164000 audit[3247]: USER_START pid=3247 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.169000 audit[3249]: CRED_ACQ pid=3249 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.221095 kernel: audit: type=1105 audit(1696282017.164:1176): pid=3247 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.221229 kernel: audit: type=1103 audit(1696282017.169:1177): pid=3249 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.479145 sshd[3247]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:57.479000 audit[3247]: USER_END pid=3247 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.482641 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 21:26:57.483504 systemd[1]: sshd@11-10.200.20.16:22-10.200.12.6:45092.service: Deactivated successfully. Oct 2 21:26:57.480000 audit[3247]: CRED_DISP pid=3247 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.505989 kernel: audit: type=1106 audit(1696282017.479:1178): pid=3247 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.506278 systemd-logind[1361]: Session 14 logged out. Waiting for processes to exit. Oct 2 21:26:57.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.16:22-10.200.12.6:45092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:57.527997 kernel: audit: type=1104 audit(1696282017.480:1179): pid=3247 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:57.528475 systemd-logind[1361]: Removed session 14. Oct 2 21:27:00.164710 kubelet[2543]: E1002 21:27:00.164677 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:00.217791 kubelet[2543]: E1002 21:27:00.217582 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:27:05.166163 kubelet[2543]: E1002 21:27:05.166126 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:07.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.16:22-10.200.12.6:54842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:07.557172 systemd[1]: Started sshd@12-10.200.20.16:22-10.200.12.6:54842.service. Oct 2 21:27:07.562004 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:27:07.562097 kernel: audit: type=1130 audit(1696282027.556:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.16:22-10.200.12.6:54842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:08.010000 audit[3260]: USER_ACCT pid=3260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.011409 sshd[3260]: Accepted publickey for core from 10.200.12.6 port 54842 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:08.034949 kernel: audit: type=1101 audit(1696282028.010:1182): pid=3260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.035545 sshd[3260]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:08.034000 audit[3260]: CRED_ACQ pid=3260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.071981 kernel: audit: type=1103 audit(1696282028.034:1183): pid=3260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.072177 kernel: audit: type=1006 audit(1696282028.034:1184): pid=3260 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 21:27:08.072219 kernel: audit: type=1300 audit(1696282028.034:1184): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce3bd4c0 a2=3 a3=1 items=0 ppid=1 pid=3260 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:08.034000 audit[3260]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce3bd4c0 a2=3 a3=1 items=0 ppid=1 pid=3260 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:08.100385 kernel: audit: type=1327 audit(1696282028.034:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:08.034000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:08.107407 systemd[1]: Started session-15.scope. Oct 2 21:27:08.107710 systemd-logind[1361]: New session 15 of user core. Oct 2 21:27:08.114000 audit[3260]: USER_START pid=3260 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.114000 audit[3262]: CRED_ACQ pid=3262 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.164496 kernel: audit: type=1105 audit(1696282028.114:1185): pid=3260 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.164596 kernel: audit: type=1103 audit(1696282028.114:1186): pid=3262 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.444123 sshd[3260]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:08.444000 audit[3260]: USER_END pid=3260 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.447789 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 21:27:08.448648 systemd[1]: sshd@12-10.200.20.16:22-10.200.12.6:54842.service: Deactivated successfully. Oct 2 21:27:08.445000 audit[3260]: CRED_DISP pid=3260 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.491773 kernel: audit: type=1106 audit(1696282028.444:1187): pid=3260 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.491902 kernel: audit: type=1104 audit(1696282028.445:1188): pid=3260 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:08.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.16:22-10.200.12.6:54842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:08.492108 systemd-logind[1361]: Session 15 logged out. Waiting for processes to exit. Oct 2 21:27:08.493297 systemd-logind[1361]: Removed session 15. Oct 2 21:27:10.166995 kubelet[2543]: E1002 21:27:10.166948 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:13.217811 kubelet[2543]: E1002 21:27:13.217766 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:27:15.168098 kubelet[2543]: E1002 21:27:15.168064 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:18.514256 systemd[1]: Started sshd@13-10.200.20.16:22-10.200.12.6:44134.service. Oct 2 21:27:18.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.16:22-10.200.12.6:44134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:18.524944 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:27:18.525056 kernel: audit: type=1130 audit(1696282038.513:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.16:22-10.200.12.6:44134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:18.933000 audit[3276]: USER_ACCT pid=3276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:18.934792 sshd[3276]: Accepted publickey for core from 10.200.12.6 port 44134 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:18.937003 sshd[3276]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:18.935000 audit[3276]: CRED_ACQ pid=3276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:18.980959 kernel: audit: type=1101 audit(1696282038.933:1191): pid=3276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:18.981036 kernel: audit: type=1103 audit(1696282038.935:1192): pid=3276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:18.994776 kernel: audit: type=1006 audit(1696282038.935:1193): pid=3276 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 21:27:18.935000 audit[3276]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce4c9d00 a2=3 a3=1 items=0 ppid=1 pid=3276 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:19.017748 kernel: audit: type=1300 audit(1696282038.935:1193): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce4c9d00 a2=3 a3=1 items=0 ppid=1 pid=3276 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:18.935000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:19.025681 kernel: audit: type=1327 audit(1696282038.935:1193): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:19.026069 systemd-logind[1361]: New session 16 of user core. Oct 2 21:27:19.026951 systemd[1]: Started session-16.scope. Oct 2 21:27:19.030000 audit[3276]: USER_START pid=3276 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:19.033000 audit[3278]: CRED_ACQ pid=3278 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:19.078416 kernel: audit: type=1105 audit(1696282039.030:1194): pid=3276 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:19.078552 kernel: audit: type=1103 audit(1696282039.033:1195): pid=3278 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:19.351503 sshd[3276]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:19.352000 audit[3276]: USER_END pid=3276 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:19.358032 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 21:27:19.358844 systemd[1]: sshd@13-10.200.20.16:22-10.200.12.6:44134.service: Deactivated successfully. Oct 2 21:27:19.380005 kernel: audit: type=1106 audit(1696282039.352:1196): pid=3276 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:19.380105 kernel: audit: type=1104 audit(1696282039.352:1197): pid=3276 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:19.352000 audit[3276]: CRED_DISP pid=3276 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:19.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.16:22-10.200.12.6:44134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:19.401308 systemd-logind[1361]: Session 16 logged out. Waiting for processes to exit. Oct 2 21:27:19.402019 systemd-logind[1361]: Removed session 16. Oct 2 21:27:20.169692 kubelet[2543]: E1002 21:27:20.169659 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:25.171214 kubelet[2543]: E1002 21:27:25.171181 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:26.217215 kubelet[2543]: E1002 21:27:26.217177 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:27:29.424304 systemd[1]: Started sshd@14-10.200.20.16:22-10.200.12.6:34200.service. Oct 2 21:27:29.451062 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:27:29.451108 kernel: audit: type=1130 audit(1696282049.423:1199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.16:22-10.200.12.6:34200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:29.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.16:22-10.200.12.6:34200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:29.842000 audit[3290]: USER_ACCT pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:29.843876 sshd[3290]: Accepted publickey for core from 10.200.12.6 port 34200 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:29.867000 audit[3290]: CRED_ACQ pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:29.868687 sshd[3290]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:29.890978 kernel: audit: type=1101 audit(1696282049.842:1200): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:29.891053 kernel: audit: type=1103 audit(1696282049.867:1201): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:29.905896 kernel: audit: type=1006 audit(1696282049.867:1202): pid=3290 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 21:27:29.867000 audit[3290]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5babf80 a2=3 a3=1 items=0 ppid=1 pid=3290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:29.930439 kernel: audit: type=1300 audit(1696282049.867:1202): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5babf80 a2=3 a3=1 items=0 ppid=1 pid=3290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:29.867000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:29.938941 kernel: audit: type=1327 audit(1696282049.867:1202): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:29.941868 systemd[1]: Started session-17.scope. Oct 2 21:27:29.942610 systemd-logind[1361]: New session 17 of user core. Oct 2 21:27:29.945000 audit[3290]: USER_START pid=3290 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:29.972000 audit[3292]: CRED_ACQ pid=3292 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:29.994680 kernel: audit: type=1105 audit(1696282049.945:1203): pid=3290 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:29.994811 kernel: audit: type=1103 audit(1696282049.972:1204): pid=3292 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:30.172425 kubelet[2543]: E1002 21:27:30.172387 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:30.286169 sshd[3290]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:30.286000 audit[3290]: USER_END pid=3290 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:30.290121 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 21:27:30.291034 systemd[1]: sshd@14-10.200.20.16:22-10.200.12.6:34200.service: Deactivated successfully. Oct 2 21:27:30.287000 audit[3290]: CRED_DISP pid=3290 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:30.339965 kernel: audit: type=1106 audit(1696282050.286:1205): pid=3290 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:30.340082 kernel: audit: type=1104 audit(1696282050.287:1206): pid=3290 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:30.340073 systemd-logind[1361]: Session 17 logged out. Waiting for processes to exit. Oct 2 21:27:30.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.16:22-10.200.12.6:34200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:30.341112 systemd-logind[1361]: Removed session 17. Oct 2 21:27:31.682000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:31.682000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c80d80 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:31.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:31.682000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:31.682000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40011ba000 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:31.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:31.869000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:31.869000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400c279650 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:27:31.869000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:31.869000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:31.869000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400b499470 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:27:31.869000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:31.869000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:31.869000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40047bc4a0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:27:31.869000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:31.895000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:31.895000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400c279830 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:27:31.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:31.895000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:31.895000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40047bc4e0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:27:31.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:31.895000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:31.895000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400b499500 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:27:31.895000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:35.173895 kubelet[2543]: E1002 21:27:35.173871 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:38.217493 kubelet[2543]: E1002 21:27:38.217452 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:27:40.175581 kubelet[2543]: E1002 21:27:40.175555 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:40.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.16:22-10.200.12.6:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:40.358572 systemd[1]: Started sshd@15-10.200.20.16:22-10.200.12.6:60550.service. Oct 2 21:27:40.363854 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:27:40.363954 kernel: audit: type=1130 audit(1696282060.357:1216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.16:22-10.200.12.6:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:40.786000 audit[3305]: USER_ACCT pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:40.787880 sshd[3305]: Accepted publickey for core from 10.200.12.6 port 60550 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:40.810947 kernel: audit: type=1101 audit(1696282060.786:1217): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:40.811000 audit[3305]: CRED_ACQ pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:40.812623 sshd[3305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:40.817723 systemd[1]: Started session-18.scope. Oct 2 21:27:40.819659 systemd-logind[1361]: New session 18 of user core. Oct 2 21:27:40.847749 kernel: audit: type=1103 audit(1696282060.811:1218): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:40.847995 kernel: audit: type=1006 audit(1696282060.811:1219): pid=3305 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 21:27:40.848042 kernel: audit: type=1300 audit(1696282060.811:1219): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdedd7ba0 a2=3 a3=1 items=0 ppid=1 pid=3305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:40.811000 audit[3305]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdedd7ba0 a2=3 a3=1 items=0 ppid=1 pid=3305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:40.872113 kernel: audit: type=1327 audit(1696282060.811:1219): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:40.811000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:40.823000 audit[3305]: USER_START pid=3305 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:40.903916 kernel: audit: type=1105 audit(1696282060.823:1220): pid=3305 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:40.828000 audit[3307]: CRED_ACQ pid=3307 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:40.924112 kernel: audit: type=1103 audit(1696282060.828:1221): pid=3307 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:41.184906 sshd[3305]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:41.185000 audit[3305]: USER_END pid=3305 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:41.188540 systemd-logind[1361]: Session 18 logged out. Waiting for processes to exit. Oct 2 21:27:41.189840 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 21:27:41.191228 systemd-logind[1361]: Removed session 18. Oct 2 21:27:41.191943 systemd[1]: sshd@15-10.200.20.16:22-10.200.12.6:60550.service: Deactivated successfully. Oct 2 21:27:41.185000 audit[3305]: CRED_DISP pid=3305 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:41.234854 kernel: audit: type=1106 audit(1696282061.185:1222): pid=3305 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:41.234995 kernel: audit: type=1104 audit(1696282061.185:1223): pid=3305 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:41.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.16:22-10.200.12.6:60550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:45.177072 kubelet[2543]: E1002 21:27:45.177043 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:47.362012 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:27:47.362145 kernel: audit: type=1400 audit(1696282067.355:1225): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:47.355000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:47.355000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011bb260 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:47.411868 kernel: audit: type=1300 audit(1696282067.355:1225): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011bb260 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:47.355000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:47.436934 kernel: audit: type=1327 audit(1696282067.355:1225): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:47.437019 kernel: audit: type=1400 audit(1696282067.359:1226): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:47.359000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:47.359000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009ddf00 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:47.487512 kernel: audit: type=1300 audit(1696282067.359:1226): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009ddf00 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:47.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:47.511359 kernel: audit: type=1327 audit(1696282067.359:1226): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:47.511489 kernel: audit: type=1400 audit(1696282067.359:1227): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:47.359000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:47.359000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009ddf20 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:47.563835 kernel: audit: type=1300 audit(1696282067.359:1227): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009ddf20 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:47.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:47.587983 kernel: audit: type=1327 audit(1696282067.359:1227): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:47.588056 kernel: audit: type=1400 audit(1696282067.360:1228): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:47.360000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:47.360000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011bb380 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:27:47.360000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:50.177632 kubelet[2543]: E1002 21:27:50.177607 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:51.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.16:22-10.200.12.6:60400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:51.262257 systemd[1]: Started sshd@16-10.200.20.16:22-10.200.12.6:60400.service. Oct 2 21:27:51.718000 audit[3318]: USER_ACCT pid=3318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:51.719472 sshd[3318]: Accepted publickey for core from 10.200.12.6 port 60400 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:51.719000 audit[3318]: CRED_ACQ pid=3318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:51.719000 audit[3318]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee18bca0 a2=3 a3=1 items=0 ppid=1 pid=3318 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:51.719000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:51.721190 sshd[3318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:51.726577 systemd[1]: Started session-19.scope. Oct 2 21:27:51.727754 systemd-logind[1361]: New session 19 of user core. Oct 2 21:27:51.731000 audit[3318]: USER_START pid=3318 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:51.734000 audit[3322]: CRED_ACQ pid=3322 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.120126 sshd[3318]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:52.120000 audit[3318]: USER_END pid=3318 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.121000 audit[3318]: CRED_DISP pid=3318 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.124810 systemd[1]: sshd@16-10.200.20.16:22-10.200.12.6:60400.service: Deactivated successfully. Oct 2 21:27:52.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.16:22-10.200.12.6:60400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:52.125725 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 21:27:52.126407 systemd-logind[1361]: Session 19 logged out. Waiting for processes to exit. Oct 2 21:27:52.127327 systemd-logind[1361]: Removed session 19. Oct 2 21:27:52.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.16:22-10.200.12.6:60416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:52.189897 systemd[1]: Started sshd@17-10.200.20.16:22-10.200.12.6:60416.service. Oct 2 21:27:52.605000 audit[3332]: USER_ACCT pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.607005 sshd[3332]: Accepted publickey for core from 10.200.12.6 port 60416 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:52.609076 sshd[3332]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:52.611475 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:27:52.611601 kernel: audit: type=1101 audit(1696282072.605:1239): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.616453 systemd[1]: Started session-20.scope. Oct 2 21:27:52.618033 systemd-logind[1361]: New session 20 of user core. Oct 2 21:27:52.605000 audit[3332]: CRED_ACQ pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.658003 kernel: audit: type=1103 audit(1696282072.605:1240): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.671819 kernel: audit: type=1006 audit(1696282072.605:1241): pid=3332 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 21:27:52.605000 audit[3332]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3e443b0 a2=3 a3=1 items=0 ppid=1 pid=3332 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:52.695817 kernel: audit: type=1300 audit(1696282072.605:1241): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3e443b0 a2=3 a3=1 items=0 ppid=1 pid=3332 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:52.605000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:52.703833 kernel: audit: type=1327 audit(1696282072.605:1241): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:52.703994 kernel: audit: type=1105 audit(1696282072.634:1242): pid=3332 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.634000 audit[3332]: USER_START pid=3332 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.640000 audit[3334]: CRED_ACQ pid=3334 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:52.751772 kernel: audit: type=1103 audit(1696282072.640:1243): pid=3334 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:53.217546 kubelet[2543]: E1002 21:27:53.217518 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:27:53.704459 sshd[3332]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:53.704000 audit[3332]: USER_END pid=3332 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:53.711553 systemd-logind[1361]: Session 20 logged out. Waiting for processes to exit. Oct 2 21:27:53.712377 systemd[1]: sshd@17-10.200.20.16:22-10.200.12.6:60416.service: Deactivated successfully. Oct 2 21:27:53.713121 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 21:27:53.714344 systemd-logind[1361]: Removed session 20. Oct 2 21:27:53.704000 audit[3332]: CRED_DISP pid=3332 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:53.752124 kernel: audit: type=1106 audit(1696282073.704:1244): pid=3332 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:53.752283 kernel: audit: type=1104 audit(1696282073.704:1245): pid=3332 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:53.752319 kernel: audit: type=1131 audit(1696282073.709:1246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.16:22-10.200.12.6:60416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:53.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.16:22-10.200.12.6:60416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:53.780574 systemd[1]: Started sshd@18-10.200.20.16:22-10.200.12.6:60426.service. Oct 2 21:27:53.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.16:22-10.200.12.6:60426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:54.234000 audit[3341]: USER_ACCT pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:54.235771 sshd[3341]: Accepted publickey for core from 10.200.12.6 port 60426 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:54.236000 audit[3341]: CRED_ACQ pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:54.236000 audit[3341]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5cb2ab0 a2=3 a3=1 items=0 ppid=1 pid=3341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:54.236000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:54.237903 sshd[3341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:54.242087 systemd-logind[1361]: New session 21 of user core. Oct 2 21:27:54.242580 systemd[1]: Started session-21.scope. Oct 2 21:27:54.246000 audit[3341]: USER_START pid=3341 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:54.248000 audit[3343]: CRED_ACQ pid=3343 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:54.629174 sshd[3341]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:54.629000 audit[3341]: USER_END pid=3341 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:54.630000 audit[3341]: CRED_DISP pid=3341 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:54.633055 systemd[1]: sshd@18-10.200.20.16:22-10.200.12.6:60426.service: Deactivated successfully. Oct 2 21:27:54.633800 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 21:27:54.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.16:22-10.200.12.6:60426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:54.634771 systemd-logind[1361]: Session 21 logged out. Waiting for processes to exit. Oct 2 21:27:54.635546 systemd-logind[1361]: Removed session 21. Oct 2 21:27:55.179500 kubelet[2543]: E1002 21:27:55.179470 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:00.180830 kubelet[2543]: E1002 21:28:00.180799 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:04.726656 kernel: kauditd_printk_skb: 11 callbacks suppressed Oct 2 21:28:04.726782 kernel: audit: type=1130 audit(1696282084.699:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.16:22-10.200.12.6:49080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:04.699000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.16:22-10.200.12.6:49080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:04.699954 systemd[1]: Started sshd@19-10.200.20.16:22-10.200.12.6:49080.service. Oct 2 21:28:05.115000 audit[3352]: USER_ACCT pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.117214 sshd[3352]: Accepted publickey for core from 10.200.12.6 port 49080 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:05.119701 sshd[3352]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:05.118000 audit[3352]: CRED_ACQ pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.163567 kernel: audit: type=1101 audit(1696282085.115:1257): pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.163759 kernel: audit: type=1103 audit(1696282085.118:1258): pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.163941 kernel: audit: type=1006 audit(1696282085.118:1259): pid=3352 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 21:28:05.168197 systemd[1]: Started session-22.scope. Oct 2 21:28:05.169597 systemd-logind[1361]: New session 22 of user core. Oct 2 21:28:05.118000 audit[3352]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1a87dd0 a2=3 a3=1 items=0 ppid=1 pid=3352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:05.184791 kubelet[2543]: E1002 21:28:05.184774 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:05.203434 kernel: audit: type=1300 audit(1696282085.118:1259): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1a87dd0 a2=3 a3=1 items=0 ppid=1 pid=3352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:05.118000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:05.212042 kernel: audit: type=1327 audit(1696282085.118:1259): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:05.212127 kernel: audit: type=1105 audit(1696282085.178:1260): pid=3352 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.178000 audit[3352]: USER_START pid=3352 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.182000 audit[3354]: CRED_ACQ pid=3354 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.259983 kernel: audit: type=1103 audit(1696282085.182:1261): pid=3354 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.495163 sshd[3352]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:05.495000 audit[3352]: USER_END pid=3352 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.498482 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 21:28:05.499231 systemd[1]: sshd@19-10.200.20.16:22-10.200.12.6:49080.service: Deactivated successfully. Oct 2 21:28:05.496000 audit[3352]: CRED_DISP pid=3352 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.523435 systemd-logind[1361]: Session 22 logged out. Waiting for processes to exit. Oct 2 21:28:05.524314 systemd-logind[1361]: Removed session 22. Oct 2 21:28:05.544722 kernel: audit: type=1106 audit(1696282085.495:1262): pid=3352 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.544846 kernel: audit: type=1104 audit(1696282085.496:1263): pid=3352 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:05.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.16:22-10.200.12.6:49080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:08.216962 kubelet[2543]: E1002 21:28:08.216904 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:28:10.185906 kubelet[2543]: E1002 21:28:10.185881 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:15.187036 kubelet[2543]: E1002 21:28:15.187005 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:15.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.16:22-10.200.12.6:40656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:15.573234 systemd[1]: Started sshd@20-10.200.20.16:22-10.200.12.6:40656.service. Oct 2 21:28:15.578745 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:28:15.578857 kernel: audit: type=1130 audit(1696282095.572:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.16:22-10.200.12.6:40656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:16.028000 audit[3364]: USER_ACCT pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.029629 sshd[3364]: Accepted publickey for core from 10.200.12.6 port 40656 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:16.053545 sshd[3364]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:16.052000 audit[3364]: CRED_ACQ pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.076423 kernel: audit: type=1101 audit(1696282096.028:1266): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.076499 kernel: audit: type=1103 audit(1696282096.052:1267): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.090671 kernel: audit: type=1006 audit(1696282096.052:1268): pid=3364 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 21:28:16.052000 audit[3364]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4287e10 a2=3 a3=1 items=0 ppid=1 pid=3364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:16.114380 kernel: audit: type=1300 audit(1696282096.052:1268): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4287e10 a2=3 a3=1 items=0 ppid=1 pid=3364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:16.052000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:16.118143 systemd[1]: Started session-23.scope. Oct 2 21:28:16.123357 kernel: audit: type=1327 audit(1696282096.052:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:16.123410 systemd-logind[1361]: New session 23 of user core. Oct 2 21:28:16.126000 audit[3364]: USER_START pid=3364 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.154939 kernel: audit: type=1105 audit(1696282096.126:1269): pid=3364 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.155047 kernel: audit: type=1103 audit(1696282096.153:1270): pid=3366 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.153000 audit[3366]: CRED_ACQ pid=3366 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.482143 sshd[3364]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:16.482000 audit[3364]: USER_END pid=3364 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.483000 audit[3364]: CRED_DISP pid=3364 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.509121 systemd[1]: sshd@20-10.200.20.16:22-10.200.12.6:40656.service: Deactivated successfully. Oct 2 21:28:16.509902 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 21:28:16.529619 kernel: audit: type=1106 audit(1696282096.482:1271): pid=3364 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.529727 kernel: audit: type=1104 audit(1696282096.483:1272): pid=3364 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:16.530231 systemd-logind[1361]: Session 23 logged out. Waiting for processes to exit. Oct 2 21:28:16.508000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.16:22-10.200.12.6:40656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:16.531134 systemd-logind[1361]: Removed session 23. Oct 2 21:28:20.188614 kubelet[2543]: E1002 21:28:20.188579 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:20.217474 kubelet[2543]: E1002 21:28:20.217448 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:28:25.189211 kubelet[2543]: E1002 21:28:25.189160 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:26.560487 systemd[1]: Started sshd@21-10.200.20.16:22-10.200.12.6:42876.service. Oct 2 21:28:26.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.16:22-10.200.12.6:42876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:26.566145 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:28:26.566337 kernel: audit: type=1130 audit(1696282106.559:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.16:22-10.200.12.6:42876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:27.015000 audit[3378]: USER_ACCT pid=3378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.016354 sshd[3378]: Accepted publickey for core from 10.200.12.6 port 42876 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:27.018703 sshd[3378]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:27.017000 audit[3378]: CRED_ACQ pid=3378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.065513 kernel: audit: type=1101 audit(1696282107.015:1275): pid=3378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.065638 kernel: audit: type=1103 audit(1696282107.017:1276): pid=3378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.080043 kernel: audit: type=1006 audit(1696282107.017:1277): pid=3378 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 21:28:27.017000 audit[3378]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf60bcb0 a2=3 a3=1 items=0 ppid=1 pid=3378 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:27.083014 systemd[1]: Started session-24.scope. Oct 2 21:28:27.083537 systemd-logind[1361]: New session 24 of user core. Oct 2 21:28:27.103774 kernel: audit: type=1300 audit(1696282107.017:1277): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf60bcb0 a2=3 a3=1 items=0 ppid=1 pid=3378 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:27.017000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:27.112476 kernel: audit: type=1327 audit(1696282107.017:1277): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:27.087000 audit[3378]: USER_START pid=3378 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.138994 kernel: audit: type=1105 audit(1696282107.087:1278): pid=3378 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.091000 audit[3380]: CRED_ACQ pid=3380 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.161985 kernel: audit: type=1103 audit(1696282107.091:1279): pid=3380 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.431185 sshd[3378]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:27.432000 audit[3378]: USER_END pid=3378 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.435610 systemd-logind[1361]: Session 24 logged out. Waiting for processes to exit. Oct 2 21:28:27.437060 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 21:28:27.438287 systemd-logind[1361]: Removed session 24. Oct 2 21:28:27.439028 systemd[1]: sshd@21-10.200.20.16:22-10.200.12.6:42876.service: Deactivated successfully. Oct 2 21:28:27.432000 audit[3378]: CRED_DISP pid=3378 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.480371 kernel: audit: type=1106 audit(1696282107.432:1280): pid=3378 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.480511 kernel: audit: type=1104 audit(1696282107.432:1281): pid=3378 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:27.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.16:22-10.200.12.6:42876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:30.190456 kubelet[2543]: E1002 21:28:30.190424 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:31.683000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.689447 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:28:31.689527 kernel: audit: type=1400 audit(1696282111.683:1283): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.683000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.733300 kernel: audit: type=1400 audit(1696282111.683:1284): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.683000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001d4e930 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:31.762143 kernel: audit: type=1300 audit(1696282111.683:1284): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001d4e930 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:31.683000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:31.785700 kernel: audit: type=1327 audit(1696282111.683:1284): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:31.785816 kernel: audit: type=1300 audit(1696282111.683:1283): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40025bdf40 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:31.683000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40025bdf40 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:31.683000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:31.838433 kernel: audit: type=1327 audit(1696282111.683:1283): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:31.871000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.871000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008a8e390 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:28:31.922542 kernel: audit: type=1400 audit(1696282111.871:1285): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.922691 kernel: audit: type=1300 audit(1696282111.871:1285): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008a8e390 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:28:31.922729 kernel: audit: type=1327 audit(1696282111.871:1285): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:31.871000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:31.871000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.968153 kernel: audit: type=1400 audit(1696282111.871:1286): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.871000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008a8e3c0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:28:31.871000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:31.871000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.871000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400209fd20 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:28:31.871000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:31.896000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.896000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40081f6900 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:28:31.896000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:31.896000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.896000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400209fd80 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:28:31.896000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:31.897000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:31.897000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008a8e540 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:28:31.897000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:34.217322 kubelet[2543]: E1002 21:28:34.217287 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:28:35.100294 kubelet[2543]: W1002 21:28:35.100268 2543 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:28:35.192058 kubelet[2543]: E1002 21:28:35.192026 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:37.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.16:22-10.200.12.6:59012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:37.508917 systemd[1]: Started sshd@22-10.200.20.16:22-10.200.12.6:59012.service. Oct 2 21:28:37.514047 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:28:37.514135 kernel: audit: type=1130 audit(1696282117.508:1291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.16:22-10.200.12.6:59012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:37.969000 audit[3391]: USER_ACCT pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:37.970307 sshd[3391]: Accepted publickey for core from 10.200.12.6 port 59012 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:37.994582 sshd[3391]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:37.993000 audit[3391]: CRED_ACQ pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:37.994962 kernel: audit: type=1101 audit(1696282117.969:1292): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.031786 kernel: audit: type=1103 audit(1696282117.993:1293): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.031933 kernel: audit: type=1006 audit(1696282117.993:1294): pid=3391 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 21:28:37.993000 audit[3391]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7a60430 a2=3 a3=1 items=0 ppid=1 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:38.056362 kernel: audit: type=1300 audit(1696282117.993:1294): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7a60430 a2=3 a3=1 items=0 ppid=1 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:38.035059 systemd[1]: Started session-25.scope. Oct 2 21:28:38.035985 systemd-logind[1361]: New session 25 of user core. Oct 2 21:28:37.993000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:38.064703 kernel: audit: type=1327 audit(1696282117.993:1294): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:38.040000 audit[3391]: USER_START pid=3391 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.090867 kernel: audit: type=1105 audit(1696282118.040:1295): pid=3391 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.043000 audit[3393]: CRED_ACQ pid=3393 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.112048 kernel: audit: type=1103 audit(1696282118.043:1296): pid=3393 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.375131 sshd[3391]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:38.375000 audit[3391]: USER_END pid=3391 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.378939 systemd-logind[1361]: Session 25 logged out. Waiting for processes to exit. Oct 2 21:28:38.380149 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 21:28:38.381403 systemd-logind[1361]: Removed session 25. Oct 2 21:28:38.382065 systemd[1]: sshd@22-10.200.20.16:22-10.200.12.6:59012.service: Deactivated successfully. Oct 2 21:28:38.376000 audit[3391]: CRED_DISP pid=3391 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.421992 kernel: audit: type=1106 audit(1696282118.375:1297): pid=3391 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.422237 kernel: audit: type=1104 audit(1696282118.376:1298): pid=3391 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:38.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.16:22-10.200.12.6:59012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:40.192902 kubelet[2543]: E1002 21:28:40.192878 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:45.194022 kubelet[2543]: E1002 21:28:45.193990 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:46.217347 kubelet[2543]: E1002 21:28:46.217317 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:28:47.367622 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:28:47.367760 kernel: audit: type=1400 audit(1696282127.359:1300): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:47.359000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:47.359000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002571520 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:47.414891 kernel: audit: type=1300 audit(1696282127.359:1300): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002571520 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:47.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:47.438998 kernel: audit: type=1327 audit(1696282127.359:1300): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:47.439084 kernel: audit: type=1400 audit(1696282127.364:1301): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:47.364000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:47.364000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002571540 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:47.489067 kernel: audit: type=1300 audit(1696282127.364:1301): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002571540 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:47.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:47.511906 kernel: audit: type=1327 audit(1696282127.364:1301): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:47.511996 kernel: audit: type=1400 audit(1696282127.364:1302): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:47.364000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:47.364000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027ab600 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:47.561283 kernel: audit: type=1300 audit(1696282127.364:1302): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027ab600 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:47.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:47.584690 kernel: audit: type=1327 audit(1696282127.364:1302): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:47.584781 kernel: audit: type=1400 audit(1696282127.364:1303): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:47.364000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:47.364000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027ab620 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:28:47.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:48.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.16:22-10.200.12.6:58500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:48.445797 systemd[1]: Started sshd@23-10.200.20.16:22-10.200.12.6:58500.service. Oct 2 21:28:48.858000 audit[3403]: USER_ACCT pid=3403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:48.860574 sshd[3403]: Accepted publickey for core from 10.200.12.6 port 58500 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:48.860000 audit[3403]: CRED_ACQ pid=3403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:48.860000 audit[3403]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe10a7e70 a2=3 a3=1 items=0 ppid=1 pid=3403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:48.860000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:48.862469 sshd[3403]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:48.866768 systemd[1]: Started session-26.scope. Oct 2 21:28:48.867152 systemd-logind[1361]: New session 26 of user core. Oct 2 21:28:48.872000 audit[3403]: USER_START pid=3403 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:48.875000 audit[3405]: CRED_ACQ pid=3405 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:49.231113 sshd[3403]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:49.230000 audit[3403]: USER_END pid=3403 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:49.230000 audit[3403]: CRED_DISP pid=3403 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:49.234528 systemd-logind[1361]: Session 26 logged out. Waiting for processes to exit. Oct 2 21:28:49.235289 systemd[1]: sshd@23-10.200.20.16:22-10.200.12.6:58500.service: Deactivated successfully. Oct 2 21:28:49.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.16:22-10.200.12.6:58500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:49.236118 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 21:28:49.236832 systemd-logind[1361]: Removed session 26. Oct 2 21:28:50.195509 kubelet[2543]: E1002 21:28:50.195478 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:55.196250 kubelet[2543]: E1002 21:28:55.196217 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:58.216815 kubelet[2543]: E1002 21:28:58.216780 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:28:59.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.16:22-10.200.12.6:43518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:59.301167 systemd[1]: Started sshd@24-10.200.20.16:22-10.200.12.6:43518.service. Oct 2 21:28:59.306480 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:28:59.306562 kernel: audit: type=1130 audit(1696282139.300:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.16:22-10.200.12.6:43518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:59.717000 audit[3417]: USER_ACCT pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:59.718444 sshd[3417]: Accepted publickey for core from 10.200.12.6 port 43518 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:59.745036 kernel: audit: type=1101 audit(1696282139.717:1314): pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:59.745168 kernel: audit: type=1103 audit(1696282139.743:1315): pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:59.743000 audit[3417]: CRED_ACQ pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:59.745420 sshd[3417]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:59.785824 kernel: audit: type=1006 audit(1696282139.743:1316): pid=3417 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 21:28:59.743000 audit[3417]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef6c8130 a2=3 a3=1 items=0 ppid=1 pid=3417 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:59.809944 kernel: audit: type=1300 audit(1696282139.743:1316): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef6c8130 a2=3 a3=1 items=0 ppid=1 pid=3417 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:59.743000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:59.818161 kernel: audit: type=1327 audit(1696282139.743:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:59.820747 systemd-logind[1361]: New session 27 of user core. Oct 2 21:28:59.821254 systemd[1]: Started session-27.scope. Oct 2 21:28:59.824000 audit[3417]: USER_START pid=3417 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:59.828000 audit[3419]: CRED_ACQ pid=3419 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:59.880423 kernel: audit: type=1105 audit(1696282139.824:1317): pid=3417 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:59.880562 kernel: audit: type=1103 audit(1696282139.828:1318): pid=3419 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:00.147151 sshd[3417]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:00.147000 audit[3417]: USER_END pid=3417 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:00.151306 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 21:29:00.152138 systemd[1]: sshd@24-10.200.20.16:22-10.200.12.6:43518.service: Deactivated successfully. Oct 2 21:29:00.148000 audit[3417]: CRED_DISP pid=3417 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:00.197834 kubelet[2543]: E1002 21:29:00.197791 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:00.202628 kernel: audit: type=1106 audit(1696282140.147:1319): pid=3417 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:00.202719 kernel: audit: type=1104 audit(1696282140.148:1320): pid=3417 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:00.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.16:22-10.200.12.6:43518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:00.203046 systemd-logind[1361]: Session 27 logged out. Waiting for processes to exit. Oct 2 21:29:00.203725 systemd-logind[1361]: Removed session 27. Oct 2 21:29:05.198891 kubelet[2543]: E1002 21:29:05.198866 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:10.200557 kubelet[2543]: E1002 21:29:10.200532 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:10.217384 kubelet[2543]: E1002 21:29:10.217357 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:29:10.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.16:22-10.200.12.6:39272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:10.220886 systemd[1]: Started sshd@25-10.200.20.16:22-10.200.12.6:39272.service. Oct 2 21:29:10.226973 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:29:10.227118 kernel: audit: type=1130 audit(1696282150.220:1322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.16:22-10.200.12.6:39272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:10.643000 audit[3428]: USER_ACCT pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:10.645167 sshd[3428]: Accepted publickey for core from 10.200.12.6 port 39272 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:10.671034 kernel: audit: type=1101 audit(1696282150.643:1323): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:10.670000 audit[3428]: CRED_ACQ pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:10.672318 sshd[3428]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:10.712980 kernel: audit: type=1103 audit(1696282150.670:1324): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:10.713096 kernel: audit: type=1006 audit(1696282150.671:1325): pid=3428 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 21:29:10.671000 audit[3428]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbda6110 a2=3 a3=1 items=0 ppid=1 pid=3428 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:10.739859 kernel: audit: type=1300 audit(1696282150.671:1325): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbda6110 a2=3 a3=1 items=0 ppid=1 pid=3428 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:10.740106 kernel: audit: type=1327 audit(1696282150.671:1325): proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:10.671000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:10.755616 systemd[1]: Started session-28.scope. Oct 2 21:29:10.756219 systemd-logind[1361]: New session 28 of user core. Oct 2 21:29:10.759000 audit[3428]: USER_START pid=3428 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:10.763000 audit[3430]: CRED_ACQ pid=3430 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:10.811804 kernel: audit: type=1105 audit(1696282150.759:1326): pid=3428 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:10.812142 kernel: audit: type=1103 audit(1696282150.763:1327): pid=3430 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:11.081139 sshd[3428]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:11.081000 audit[3428]: USER_END pid=3428 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:11.084899 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 21:29:11.085644 systemd[1]: sshd@25-10.200.20.16:22-10.200.12.6:39272.service: Deactivated successfully. Oct 2 21:29:11.082000 audit[3428]: CRED_DISP pid=3428 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:11.130311 kernel: audit: type=1106 audit(1696282151.081:1328): pid=3428 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:11.130450 kernel: audit: type=1104 audit(1696282151.082:1329): pid=3428 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:11.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.16:22-10.200.12.6:39272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:11.130801 systemd-logind[1361]: Session 28 logged out. Waiting for processes to exit. Oct 2 21:29:11.132024 systemd-logind[1361]: Removed session 28. Oct 2 21:29:15.201789 kubelet[2543]: E1002 21:29:15.201757 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:20.202702 kubelet[2543]: E1002 21:29:20.202655 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:21.152589 systemd[1]: Started sshd@26-10.200.20.16:22-10.200.12.6:42802.service. Oct 2 21:29:21.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.16:22-10.200.12.6:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:21.162338 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:29:21.162436 kernel: audit: type=1130 audit(1696282161.151:1331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.16:22-10.200.12.6:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:21.576000 audit[3439]: USER_ACCT pid=3439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:21.578398 sshd[3439]: Accepted publickey for core from 10.200.12.6 port 42802 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:21.603972 kernel: audit: type=1101 audit(1696282161.576:1332): pid=3439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:21.603000 audit[3439]: CRED_ACQ pid=3439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:21.605379 sshd[3439]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:21.636326 systemd[1]: Started session-29.scope. Oct 2 21:29:21.639441 systemd-logind[1361]: New session 29 of user core. Oct 2 21:29:21.644585 kernel: audit: type=1103 audit(1696282161.603:1333): pid=3439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:21.644724 kernel: audit: type=1006 audit(1696282161.604:1334): pid=3439 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 21:29:21.604000 audit[3439]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe468f700 a2=3 a3=1 items=0 ppid=1 pid=3439 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:21.670395 kernel: audit: type=1300 audit(1696282161.604:1334): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe468f700 a2=3 a3=1 items=0 ppid=1 pid=3439 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:21.604000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:21.679633 kernel: audit: type=1327 audit(1696282161.604:1334): proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:21.645000 audit[3439]: USER_START pid=3439 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:21.711295 kernel: audit: type=1105 audit(1696282161.645:1335): pid=3439 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:21.648000 audit[3443]: CRED_ACQ pid=3443 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:21.733981 kernel: audit: type=1103 audit(1696282161.648:1336): pid=3443 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:21.974275 sshd[3439]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:21.974000 audit[3439]: USER_END pid=3439 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:22.002671 systemd[1]: sshd@26-10.200.20.16:22-10.200.12.6:42802.service: Deactivated successfully. Oct 2 21:29:21.976000 audit[3439]: CRED_DISP pid=3439 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:22.003519 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 21:29:22.024623 kernel: audit: type=1106 audit(1696282161.974:1337): pid=3439 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:22.024758 kernel: audit: type=1104 audit(1696282161.976:1338): pid=3439 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:22.024870 systemd-logind[1361]: Session 29 logged out. Waiting for processes to exit. Oct 2 21:29:22.025882 systemd-logind[1361]: Removed session 29. Oct 2 21:29:22.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.16:22-10.200.12.6:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:24.216836 kubelet[2543]: E1002 21:29:24.216803 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6)\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:29:25.203277 kubelet[2543]: E1002 21:29:25.203237 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:30.204295 kubelet[2543]: E1002 21:29:30.204271 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:31.684000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.690360 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:29:31.690465 kernel: audit: type=1400 audit(1696282171.684:1340): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.684000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010ea180 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:31.741967 kernel: audit: type=1300 audit(1696282171.684:1340): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010ea180 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:31.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:31.765738 kernel: audit: type=1327 audit(1696282171.684:1340): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:31.685000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.788596 kernel: audit: type=1400 audit(1696282171.685:1341): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.685000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40005f4840 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:31.818219 kernel: audit: type=1300 audit(1696282171.685:1341): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40005f4840 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:31.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:31.843148 kernel: audit: type=1327 audit(1696282171.685:1341): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:31.872000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.872000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.918185 kernel: audit: type=1400 audit(1696282171.872:1343): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.918295 kernel: audit: type=1400 audit(1696282171.872:1342): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.872000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400a170ae0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:29:31.944974 kernel: audit: type=1300 audit(1696282171.872:1343): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400a170ae0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:29:31.872000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4004a248d0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:29:31.972272 kernel: audit: type=1300 audit(1696282171.872:1342): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4004a248d0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:29:31.872000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:31.872000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:31.872000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.872000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400f70bf20 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:29:31.872000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:31.917000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.917000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4004a24b10 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:29:31.917000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:31.917000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.917000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400d352e60 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:29:31.917000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:31.917000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:31.917000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4004a24cf0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:29:31.917000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:32.044085 systemd[1]: Started sshd@27-10.200.20.16:22-10.200.12.6:47450.service. Oct 2 21:29:32.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.16:22-10.200.12.6:47450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:32.459000 audit[3452]: USER_ACCT pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:32.460405 sshd[3452]: Accepted publickey for core from 10.200.12.6 port 47450 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:32.461000 audit[3452]: CRED_ACQ pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:32.461000 audit[3452]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff98741b0 a2=3 a3=1 items=0 ppid=1 pid=3452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:32.461000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:32.462384 sshd[3452]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:32.466640 systemd[1]: Started session-30.scope. Oct 2 21:29:32.467090 systemd-logind[1361]: New session 30 of user core. Oct 2 21:29:32.469000 audit[3452]: USER_START pid=3452 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:32.472000 audit[3454]: CRED_ACQ pid=3454 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:32.832626 sshd[3452]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:32.832000 audit[3452]: USER_END pid=3452 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:32.832000 audit[3452]: CRED_DISP pid=3452 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:32.836432 systemd-logind[1361]: Session 30 logged out. Waiting for processes to exit. Oct 2 21:29:32.837056 systemd[1]: sshd@27-10.200.20.16:22-10.200.12.6:47450.service: Deactivated successfully. Oct 2 21:29:32.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.16:22-10.200.12.6:47450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:32.837785 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 21:29:32.838473 systemd-logind[1361]: Removed session 30. Oct 2 21:29:32.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.16:22-10.200.12.6:47458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:32.908707 systemd[1]: Started sshd@28-10.200.20.16:22-10.200.12.6:47458.service. Oct 2 21:29:33.359000 audit[3463]: USER_ACCT pid=3463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:33.360991 sshd[3463]: Accepted publickey for core from 10.200.12.6 port 47458 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:33.361000 audit[3463]: CRED_ACQ pid=3463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:33.361000 audit[3463]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee2d9670 a2=3 a3=1 items=0 ppid=1 pid=3463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:33.361000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:33.362820 sshd[3463]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:33.367221 systemd[1]: Started session-31.scope. Oct 2 21:29:33.367723 systemd-logind[1361]: New session 31 of user core. Oct 2 21:29:33.370000 audit[3463]: USER_START pid=3463 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:33.373000 audit[3465]: CRED_ACQ pid=3465 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:35.206342 kubelet[2543]: E1002 21:29:35.206302 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:35.219779 env[1374]: time="2023-10-02T21:29:35.219731802Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:6,}" Oct 2 21:29:35.241360 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount543942303.mount: Deactivated successfully. Oct 2 21:29:35.244889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2558001177.mount: Deactivated successfully. Oct 2 21:29:35.257917 env[1374]: time="2023-10-02T21:29:35.257854009Z" level=info msg="CreateContainer within sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" for &ContainerMetadata{Name:mount-cgroup,Attempt:6,} returns container id \"bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899\"" Oct 2 21:29:35.258614 env[1374]: time="2023-10-02T21:29:35.258583897Z" level=info msg="StartContainer for \"bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899\"" Oct 2 21:29:35.284297 systemd[1]: Started cri-containerd-bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899.scope. Oct 2 21:29:35.300277 systemd[1]: cri-containerd-bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899.scope: Deactivated successfully. Oct 2 21:29:35.343965 env[1374]: time="2023-10-02T21:29:35.343887687Z" level=info msg="shim disconnected" id=bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899 Oct 2 21:29:35.343965 env[1374]: time="2023-10-02T21:29:35.343965728Z" level=warning msg="cleaning up after shim disconnected" id=bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899 namespace=k8s.io Oct 2 21:29:35.344224 env[1374]: time="2023-10-02T21:29:35.343976728Z" level=info msg="cleaning up dead shim" Oct 2 21:29:35.356903 env[1374]: time="2023-10-02T21:29:35.356840025Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3501 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:29:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:29:35.357180 env[1374]: time="2023-10-02T21:29:35.357124468Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:29:35.358037 env[1374]: time="2023-10-02T21:29:35.357999358Z" level=error msg="Failed to pipe stdout of container \"bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899\"" error="reading from a closed fifo" Oct 2 21:29:35.358127 env[1374]: time="2023-10-02T21:29:35.358005318Z" level=error msg="Failed to pipe stderr of container \"bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899\"" error="reading from a closed fifo" Oct 2 21:29:35.362319 env[1374]: time="2023-10-02T21:29:35.362277603Z" level=error msg="StartContainer for \"bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:29:35.362536 kubelet[2543]: E1002 21:29:35.362511 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899" Oct 2 21:29:35.362663 kubelet[2543]: E1002 21:29:35.362628 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:29:35.362663 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:29:35.362663 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:29:35.362663 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wmp4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-ntdsz_kube-system(00cbbd64-54be-4d64-a931-b251fa39fdf6): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:29:35.362791 kubelet[2543]: E1002 21:29:35.362684 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ntdsz" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 Oct 2 21:29:35.427195 env[1374]: time="2023-10-02T21:29:35.427153616Z" level=info msg="StopContainer for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" with timeout 30 (s)" Oct 2 21:29:35.427784 env[1374]: time="2023-10-02T21:29:35.427748702Z" level=info msg="Stop container \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" with signal terminated" Oct 2 21:29:35.448524 systemd[1]: cri-containerd-a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8.scope: Deactivated successfully. Oct 2 21:29:35.447000 audit: BPF prog-id=122 op=UNLOAD Oct 2 21:29:35.453000 audit: BPF prog-id=125 op=UNLOAD Oct 2 21:29:35.488049 env[1374]: time="2023-10-02T21:29:35.486967174Z" level=info msg="shim disconnected" id=a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8 Oct 2 21:29:35.488049 env[1374]: time="2023-10-02T21:29:35.487012894Z" level=warning msg="cleaning up after shim disconnected" id=a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8 namespace=k8s.io Oct 2 21:29:35.488049 env[1374]: time="2023-10-02T21:29:35.487022654Z" level=info msg="cleaning up dead shim" Oct 2 21:29:35.499034 env[1374]: time="2023-10-02T21:29:35.498990662Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3532 runtime=io.containerd.runc.v2\n" Oct 2 21:29:35.503606 env[1374]: time="2023-10-02T21:29:35.503571071Z" level=info msg="StopContainer for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" returns successfully" Oct 2 21:29:35.504204 env[1374]: time="2023-10-02T21:29:35.504179598Z" level=info msg="StopPodSandbox for \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\"" Oct 2 21:29:35.504445 env[1374]: time="2023-10-02T21:29:35.504425080Z" level=info msg="Container to stop \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:29:35.513515 systemd[1]: cri-containerd-5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1.scope: Deactivated successfully. Oct 2 21:29:35.512000 audit: BPF prog-id=118 op=UNLOAD Oct 2 21:29:35.517000 audit: BPF prog-id=121 op=UNLOAD Oct 2 21:29:35.551568 env[1374]: time="2023-10-02T21:29:35.551513503Z" level=info msg="shim disconnected" id=5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1 Oct 2 21:29:35.551568 env[1374]: time="2023-10-02T21:29:35.551556783Z" level=warning msg="cleaning up after shim disconnected" id=5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1 namespace=k8s.io Oct 2 21:29:35.551568 env[1374]: time="2023-10-02T21:29:35.551566463Z" level=info msg="cleaning up dead shim" Oct 2 21:29:35.564118 env[1374]: time="2023-10-02T21:29:35.564044796Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3563 runtime=io.containerd.runc.v2\n" Oct 2 21:29:35.564403 env[1374]: time="2023-10-02T21:29:35.564377360Z" level=info msg="TearDown network for sandbox \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" successfully" Oct 2 21:29:35.564447 env[1374]: time="2023-10-02T21:29:35.564402840Z" level=info msg="StopPodSandbox for \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" returns successfully" Oct 2 21:29:35.665979 kubelet[2543]: I1002 21:29:35.665946 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f830f7b-778c-4f25-af7e-053949493398-cilium-config-path\") pod \"4f830f7b-778c-4f25-af7e-053949493398\" (UID: \"4f830f7b-778c-4f25-af7e-053949493398\") " Oct 2 21:29:35.666199 kubelet[2543]: I1002 21:29:35.666186 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-fdm74\" (UniqueName: \"kubernetes.io/projected/4f830f7b-778c-4f25-af7e-053949493398-kube-api-access-fdm74\") pod \"4f830f7b-778c-4f25-af7e-053949493398\" (UID: \"4f830f7b-778c-4f25-af7e-053949493398\") " Oct 2 21:29:35.666591 kubelet[2543]: W1002 21:29:35.666512 2543 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/4f830f7b-778c-4f25-af7e-053949493398/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:29:35.668732 kubelet[2543]: I1002 21:29:35.668702 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4f830f7b-778c-4f25-af7e-053949493398-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4f830f7b-778c-4f25-af7e-053949493398" (UID: "4f830f7b-778c-4f25-af7e-053949493398"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:29:35.670346 kubelet[2543]: I1002 21:29:35.670317 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4f830f7b-778c-4f25-af7e-053949493398-kube-api-access-fdm74" (OuterVolumeSpecName: "kube-api-access-fdm74") pod "4f830f7b-778c-4f25-af7e-053949493398" (UID: "4f830f7b-778c-4f25-af7e-053949493398"). InnerVolumeSpecName "kube-api-access-fdm74". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:29:35.768843 kubelet[2543]: I1002 21:29:35.767881 2543 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f830f7b-778c-4f25-af7e-053949493398-cilium-config-path\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:35.768843 kubelet[2543]: I1002 21:29:35.767915 2543 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-fdm74\" (UniqueName: \"kubernetes.io/projected/4f830f7b-778c-4f25-af7e-053949493398-kube-api-access-fdm74\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:35.857732 kubelet[2543]: I1002 21:29:35.857706 2543 scope.go:115] "RemoveContainer" containerID="338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa" Oct 2 21:29:35.859307 env[1374]: time="2023-10-02T21:29:35.859250026Z" level=info msg="StopPodSandbox for \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\"" Oct 2 21:29:35.859307 env[1374]: time="2023-10-02T21:29:35.859320427Z" level=info msg="Container to stop \"338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:29:35.859307 env[1374]: time="2023-10-02T21:29:35.859337027Z" level=info msg="Container to stop \"bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:29:35.866228 env[1374]: time="2023-10-02T21:29:35.866193980Z" level=info msg="RemoveContainer for \"338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa\"" Oct 2 21:29:35.873152 systemd[1]: Removed slice kubepods-besteffort-pod4f830f7b_778c_4f25_af7e_053949493398.slice. Oct 2 21:29:35.878579 env[1374]: time="2023-10-02T21:29:35.878542192Z" level=info msg="RemoveContainer for \"338b8d67ffbadb70bf5fe2b4689dd61e6cd749176022f405c8ac98e9d37ba6aa\" returns successfully" Oct 2 21:29:35.879978 kubelet[2543]: I1002 21:29:35.878948 2543 scope.go:115] "RemoveContainer" containerID="a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8" Oct 2 21:29:35.881312 env[1374]: time="2023-10-02T21:29:35.881272781Z" level=info msg="RemoveContainer for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\"" Oct 2 21:29:35.883000 audit: BPF prog-id=111 op=UNLOAD Oct 2 21:29:35.885000 audit: BPF prog-id=114 op=UNLOAD Oct 2 21:29:35.884127 systemd[1]: cri-containerd-4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683.scope: Deactivated successfully. Oct 2 21:29:35.890600 env[1374]: time="2023-10-02T21:29:35.890559040Z" level=info msg="RemoveContainer for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" returns successfully" Oct 2 21:29:35.891042 kubelet[2543]: I1002 21:29:35.890905 2543 scope.go:115] "RemoveContainer" containerID="a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8" Oct 2 21:29:35.891440 env[1374]: time="2023-10-02T21:29:35.891380569Z" level=error msg="ContainerStatus for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\": not found" Oct 2 21:29:35.891738 kubelet[2543]: E1002 21:29:35.891723 2543 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\": not found" containerID="a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8" Oct 2 21:29:35.891852 kubelet[2543]: I1002 21:29:35.891841 2543 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8} err="failed to get container status \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\": rpc error: code = NotFound desc = an error occurred when try to find container \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\": not found" Oct 2 21:29:35.929146 env[1374]: time="2023-10-02T21:29:35.929096291Z" level=info msg="shim disconnected" id=4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683 Oct 2 21:29:35.929146 env[1374]: time="2023-10-02T21:29:35.929145332Z" level=warning msg="cleaning up after shim disconnected" id=4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683 namespace=k8s.io Oct 2 21:29:35.929146 env[1374]: time="2023-10-02T21:29:35.929155892Z" level=info msg="cleaning up dead shim" Oct 2 21:29:35.942482 env[1374]: time="2023-10-02T21:29:35.942430034Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3595 runtime=io.containerd.runc.v2\n" Oct 2 21:29:35.942770 env[1374]: time="2023-10-02T21:29:35.942743357Z" level=info msg="TearDown network for sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" successfully" Oct 2 21:29:35.942837 env[1374]: time="2023-10-02T21:29:35.942770357Z" level=info msg="StopPodSandbox for \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" returns successfully" Oct 2 21:29:36.071838 kubelet[2543]: I1002 21:29:36.070655 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-cgroup\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.071838 kubelet[2543]: I1002 21:29:36.070738 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.071838 kubelet[2543]: I1002 21:29:36.070771 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-host-proc-sys-net\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.071838 kubelet[2543]: I1002 21:29:36.070799 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-config-path\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.071838 kubelet[2543]: I1002 21:29:36.070836 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.071838 kubelet[2543]: W1002 21:29:36.071050 2543 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/00cbbd64-54be-4d64-a931-b251fa39fdf6/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:29:36.072706 kubelet[2543]: I1002 21:29:36.072678 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:29:36.072759 kubelet[2543]: I1002 21:29:36.072725 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-wmp4p\" (UniqueName: \"kubernetes.io/projected/00cbbd64-54be-4d64-a931-b251fa39fdf6-kube-api-access-wmp4p\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.072759 kubelet[2543]: I1002 21:29:36.072755 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-etc-cni-netd\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.072810 kubelet[2543]: I1002 21:29:36.072782 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-xtables-lock\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.072810 kubelet[2543]: I1002 21:29:36.072804 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-hostproc\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.072861 kubelet[2543]: I1002 21:29:36.072821 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-bpf-maps\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.072861 kubelet[2543]: I1002 21:29:36.072841 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/00cbbd64-54be-4d64-a931-b251fa39fdf6-hubble-tls\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.072861 kubelet[2543]: I1002 21:29:36.072857 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-lib-modules\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.073042 kubelet[2543]: I1002 21:29:36.072877 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/00cbbd64-54be-4d64-a931-b251fa39fdf6-clustermesh-secrets\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.073042 kubelet[2543]: I1002 21:29:36.072893 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cni-path\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.073042 kubelet[2543]: I1002 21:29:36.072912 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-host-proc-sys-kernel\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.073042 kubelet[2543]: I1002 21:29:36.072955 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.073896 kubelet[2543]: I1002 21:29:36.073214 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-run\") pod \"00cbbd64-54be-4d64-a931-b251fa39fdf6\" (UID: \"00cbbd64-54be-4d64-a931-b251fa39fdf6\") " Oct 2 21:29:36.073896 kubelet[2543]: I1002 21:29:36.073276 2543 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-cgroup\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.073896 kubelet[2543]: I1002 21:29:36.073288 2543 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-host-proc-sys-net\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.073896 kubelet[2543]: I1002 21:29:36.073311 2543 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-config-path\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.073896 kubelet[2543]: I1002 21:29:36.073322 2543 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-bpf-maps\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.073896 kubelet[2543]: I1002 21:29:36.073343 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.074114 kubelet[2543]: I1002 21:29:36.073517 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.074114 kubelet[2543]: I1002 21:29:36.073723 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cni-path" (OuterVolumeSpecName: "cni-path") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.074114 kubelet[2543]: I1002 21:29:36.073742 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.074114 kubelet[2543]: I1002 21:29:36.073760 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.074114 kubelet[2543]: I1002 21:29:36.073774 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.074237 kubelet[2543]: I1002 21:29:36.073790 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-hostproc" (OuterVolumeSpecName: "hostproc") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:36.077866 kubelet[2543]: I1002 21:29:36.077824 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/00cbbd64-54be-4d64-a931-b251fa39fdf6-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:29:36.078120 kubelet[2543]: I1002 21:29:36.078101 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/00cbbd64-54be-4d64-a931-b251fa39fdf6-kube-api-access-wmp4p" (OuterVolumeSpecName: "kube-api-access-wmp4p") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "kube-api-access-wmp4p". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:29:36.081759 kubelet[2543]: I1002 21:29:36.081725 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/00cbbd64-54be-4d64-a931-b251fa39fdf6-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "00cbbd64-54be-4d64-a931-b251fa39fdf6" (UID: "00cbbd64-54be-4d64-a931-b251fa39fdf6"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:29:36.174487 kubelet[2543]: I1002 21:29:36.174438 2543 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-wmp4p\" (UniqueName: \"kubernetes.io/projected/00cbbd64-54be-4d64-a931-b251fa39fdf6-kube-api-access-wmp4p\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.174664 kubelet[2543]: I1002 21:29:36.174654 2543 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-etc-cni-netd\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.174737 kubelet[2543]: I1002 21:29:36.174728 2543 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-xtables-lock\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.174798 kubelet[2543]: I1002 21:29:36.174790 2543 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/00cbbd64-54be-4d64-a931-b251fa39fdf6-hubble-tls\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.174867 kubelet[2543]: I1002 21:29:36.174859 2543 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-hostproc\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.174950 kubelet[2543]: I1002 21:29:36.174940 2543 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/00cbbd64-54be-4d64-a931-b251fa39fdf6-clustermesh-secrets\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.175020 kubelet[2543]: I1002 21:29:36.175011 2543 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cni-path\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.175081 kubelet[2543]: I1002 21:29:36.175072 2543 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-lib-modules\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.175145 kubelet[2543]: I1002 21:29:36.175137 2543 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.175206 kubelet[2543]: I1002 21:29:36.175198 2543 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/00cbbd64-54be-4d64-a931-b251fa39fdf6-cilium-run\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:29:36.237132 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899-rootfs.mount: Deactivated successfully. Oct 2 21:29:36.237220 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8-rootfs.mount: Deactivated successfully. Oct 2 21:29:36.237273 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1-rootfs.mount: Deactivated successfully. Oct 2 21:29:36.237325 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1-shm.mount: Deactivated successfully. Oct 2 21:29:36.237384 systemd[1]: var-lib-kubelet-pods-4f830f7b\x2d778c\x2d4f25\x2daf7e\x2d053949493398-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dfdm74.mount: Deactivated successfully. Oct 2 21:29:36.237441 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683-rootfs.mount: Deactivated successfully. Oct 2 21:29:36.237491 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683-shm.mount: Deactivated successfully. Oct 2 21:29:36.237537 systemd[1]: var-lib-kubelet-pods-00cbbd64\x2d54be\x2d4d64\x2da931\x2db251fa39fdf6-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dwmp4p.mount: Deactivated successfully. Oct 2 21:29:36.237589 systemd[1]: var-lib-kubelet-pods-00cbbd64\x2d54be\x2d4d64\x2da931\x2db251fa39fdf6-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:29:36.237638 systemd[1]: var-lib-kubelet-pods-00cbbd64\x2d54be\x2d4d64\x2da931\x2db251fa39fdf6-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:29:36.872531 kubelet[2543]: I1002 21:29:36.872500 2543 scope.go:115] "RemoveContainer" containerID="bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899" Oct 2 21:29:36.873872 env[1374]: time="2023-10-02T21:29:36.873840360Z" level=info msg="RemoveContainer for \"bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899\"" Oct 2 21:29:36.877282 systemd[1]: Removed slice kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice. Oct 2 21:29:36.883188 env[1374]: time="2023-10-02T21:29:36.883152419Z" level=info msg="RemoveContainer for \"bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899\" returns successfully" Oct 2 21:29:37.218290 env[1374]: time="2023-10-02T21:29:37.218239587Z" level=info msg="StopContainer for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" with timeout 1 (s)" Oct 2 21:29:37.218449 env[1374]: time="2023-10-02T21:29:37.218290667Z" level=error msg="StopContainer for \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\": not found" Oct 2 21:29:37.218992 kubelet[2543]: E1002 21:29:37.218577 2543 remote_runtime.go:349] "StopContainer from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8\": not found" containerID="a7094b6c9a571b7ffd3f97e1fa221622db2f126090ecd238d962a9558d72f6a8" Oct 2 21:29:37.219078 env[1374]: time="2023-10-02T21:29:37.218632311Z" level=info msg="StopPodSandbox for \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\"" Oct 2 21:29:37.219078 env[1374]: time="2023-10-02T21:29:37.218714592Z" level=info msg="TearDown network for sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" successfully" Oct 2 21:29:37.219078 env[1374]: time="2023-10-02T21:29:37.218755472Z" level=info msg="StopPodSandbox for \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" returns successfully" Oct 2 21:29:37.219078 env[1374]: time="2023-10-02T21:29:37.218846873Z" level=info msg="StopPodSandbox for \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\"" Oct 2 21:29:37.219078 env[1374]: time="2023-10-02T21:29:37.218896114Z" level=info msg="TearDown network for sandbox \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" successfully" Oct 2 21:29:37.219078 env[1374]: time="2023-10-02T21:29:37.218939954Z" level=info msg="StopPodSandbox for \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" returns successfully" Oct 2 21:29:37.220004 kubelet[2543]: I1002 21:29:37.219888 2543 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=00cbbd64-54be-4d64-a931-b251fa39fdf6 path="/var/lib/kubelet/pods/00cbbd64-54be-4d64-a931-b251fa39fdf6/volumes" Oct 2 21:29:37.221386 kubelet[2543]: I1002 21:29:37.220913 2543 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=4f830f7b-778c-4f25-af7e-053949493398 path="/var/lib/kubelet/pods/4f830f7b-778c-4f25-af7e-053949493398/volumes" Oct 2 21:29:37.441867 sshd[3463]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:37.441000 audit[3463]: USER_END pid=3463 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:37.447742 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 21:29:37.447821 kernel: audit: type=1106 audit(1696282177.441:1369): pid=3463 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:37.452262 systemd[1]: sshd@28-10.200.20.16:22-10.200.12.6:47458.service: Deactivated successfully. Oct 2 21:29:37.453033 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 21:29:37.453203 systemd[1]: session-31.scope: Consumed 1.179s CPU time. Oct 2 21:29:37.454776 systemd-logind[1361]: Session 31 logged out. Waiting for processes to exit. Oct 2 21:29:37.456014 systemd-logind[1361]: Removed session 31. Oct 2 21:29:37.441000 audit[3463]: CRED_DISP pid=3463 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:37.473105 kernel: audit: type=1104 audit(1696282177.441:1370): pid=3463 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:37.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.16:22-10.200.12.6:47458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:37.515171 kernel: audit: type=1131 audit(1696282177.451:1371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.16:22-10.200.12.6:47458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:37.520353 systemd[1]: Started sshd@29-10.200.20.16:22-10.200.12.6:50010.service. Oct 2 21:29:37.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.16:22-10.200.12.6:50010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:37.543944 kernel: audit: type=1130 audit(1696282177.519:1372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.16:22-10.200.12.6:50010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:37.977000 audit[3613]: USER_ACCT pid=3613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:37.978291 sshd[3613]: Accepted publickey for core from 10.200.12.6 port 50010 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:38.005582 sshd[3613]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:38.004000 audit[3613]: CRED_ACQ pid=3613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:38.029370 kernel: audit: type=1101 audit(1696282177.977:1373): pid=3613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:38.029476 kernel: audit: type=1103 audit(1696282178.004:1374): pid=3613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:38.044751 kernel: audit: type=1006 audit(1696282178.004:1375): pid=3613 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 21:29:38.004000 audit[3613]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc549fbb0 a2=3 a3=1 items=0 ppid=1 pid=3613 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:38.070091 kernel: audit: type=1300 audit(1696282178.004:1375): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc549fbb0 a2=3 a3=1 items=0 ppid=1 pid=3613 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:38.004000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:38.073149 systemd[1]: Started session-32.scope. Oct 2 21:29:38.074789 systemd-logind[1361]: New session 32 of user core. Oct 2 21:29:38.078768 kernel: audit: type=1327 audit(1696282178.004:1375): proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:38.078000 audit[3613]: USER_START pid=3613 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:38.081000 audit[3615]: CRED_ACQ pid=3615 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:38.106035 kernel: audit: type=1105 audit(1696282178.078:1376): pid=3613 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:38.448297 kubelet[2543]: W1002 21:29:38.448237 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod00cbbd64_54be_4d64_a931_b251fa39fdf6.slice/cri-containerd-bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899.scope WatchSource:0}: container "bb154d1b6360d536af94d3ba00a94cfc2c2a6214a197ed6d680cb2c083733899" in namespace "k8s.io": not found Oct 2 21:29:39.229722 kubelet[2543]: I1002 21:29:39.229648 2543 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:29:39.229722 kubelet[2543]: E1002 21:29:39.229726 2543 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229722 kubelet[2543]: E1002 21:29:39.229736 2543 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4f830f7b-778c-4f25-af7e-053949493398" containerName="cilium-operator" Oct 2 21:29:39.229998 kubelet[2543]: E1002 21:29:39.229752 2543 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: E1002 21:29:39.229759 2543 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: E1002 21:29:39.229765 2543 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: E1002 21:29:39.229775 2543 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: E1002 21:29:39.229783 2543 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: I1002 21:29:39.229807 2543 memory_manager.go:346] "RemoveStaleState removing state" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: I1002 21:29:39.229813 2543 memory_manager.go:346] "RemoveStaleState removing state" podUID="4f830f7b-778c-4f25-af7e-053949493398" containerName="cilium-operator" Oct 2 21:29:39.229998 kubelet[2543]: I1002 21:29:39.229829 2543 memory_manager.go:346] "RemoveStaleState removing state" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: I1002 21:29:39.229835 2543 memory_manager.go:346] "RemoveStaleState removing state" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: I1002 21:29:39.229841 2543 memory_manager.go:346] "RemoveStaleState removing state" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: I1002 21:29:39.229849 2543 memory_manager.go:346] "RemoveStaleState removing state" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.229998 kubelet[2543]: E1002 21:29:39.229864 2543 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.230274 kubelet[2543]: I1002 21:29:39.229886 2543 memory_manager.go:346] "RemoveStaleState removing state" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.230274 kubelet[2543]: I1002 21:29:39.229917 2543 memory_manager.go:346] "RemoveStaleState removing state" podUID="00cbbd64-54be-4d64-a931-b251fa39fdf6" containerName="mount-cgroup" Oct 2 21:29:39.235850 systemd[1]: Created slice kubepods-burstable-podce0885e4_9f2f_4372_8373_e28ad2ff26d1.slice. Oct 2 21:29:39.313737 kubelet[2543]: I1002 21:29:39.313689 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cni-path\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.313737 kubelet[2543]: I1002 21:29:39.313744 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-host-proc-sys-net\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.313951 kubelet[2543]: I1002 21:29:39.313766 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-bpf-maps\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.313951 kubelet[2543]: I1002 21:29:39.313800 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-config-path\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.313951 kubelet[2543]: I1002 21:29:39.313823 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-host-proc-sys-kernel\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.313951 kubelet[2543]: I1002 21:29:39.313845 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b2vgx\" (UniqueName: \"kubernetes.io/projected/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-kube-api-access-b2vgx\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.313951 kubelet[2543]: I1002 21:29:39.313878 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-run\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.313951 kubelet[2543]: I1002 21:29:39.313900 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-lib-modules\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.314115 kubelet[2543]: I1002 21:29:39.313936 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-clustermesh-secrets\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.314115 kubelet[2543]: I1002 21:29:39.313975 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-ipsec-secrets\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.314115 kubelet[2543]: I1002 21:29:39.313997 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-hubble-tls\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.314115 kubelet[2543]: I1002 21:29:39.314106 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-cgroup\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.314204 kubelet[2543]: I1002 21:29:39.314128 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-xtables-lock\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.314204 kubelet[2543]: I1002 21:29:39.314147 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-hostproc\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.314279 kubelet[2543]: I1002 21:29:39.314260 2543 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-etc-cni-netd\") pod \"cilium-4jjtb\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " pod="kube-system/cilium-4jjtb" Oct 2 21:29:39.541028 env[1374]: time="2023-10-02T21:29:39.540366751Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4jjtb,Uid:ce0885e4-9f2f-4372-8373-e28ad2ff26d1,Namespace:kube-system,Attempt:0,}" Oct 2 21:29:39.582664 env[1374]: time="2023-10-02T21:29:39.582466598Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:29:39.582664 env[1374]: time="2023-10-02T21:29:39.582503959Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:29:39.582664 env[1374]: time="2023-10-02T21:29:39.582513679Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:29:39.582864 env[1374]: time="2023-10-02T21:29:39.582753361Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50 pid=3633 runtime=io.containerd.runc.v2 Oct 2 21:29:39.596643 systemd[1]: Started cri-containerd-6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50.scope. Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.615000 audit: BPF prog-id=126 op=LOAD Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3633 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:39.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333661366431373531336230333363353430656633626163343030 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3633 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:39.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333661366431373531336230333363353430656633626163343030 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit: BPF prog-id=127 op=LOAD Oct 2 21:29:39.616000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3633 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:39.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333661366431373531336230333363353430656633626163343030 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit: BPF prog-id=128 op=LOAD Oct 2 21:29:39.616000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3633 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:39.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333661366431373531336230333363353430656633626163343030 Oct 2 21:29:39.616000 audit: BPF prog-id=128 op=UNLOAD Oct 2 21:29:39.616000 audit: BPF prog-id=127 op=UNLOAD Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { perfmon } for pid=3644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit[3644]: AVC avc: denied { bpf } for pid=3644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:39.616000 audit: BPF prog-id=129 op=LOAD Oct 2 21:29:39.616000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3633 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:39.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333661366431373531336230333363353430656633626163343030 Oct 2 21:29:39.631480 env[1374]: time="2023-10-02T21:29:39.631434878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4jjtb,Uid:ce0885e4-9f2f-4372-8373-e28ad2ff26d1,Namespace:kube-system,Attempt:0,} returns sandbox id \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\"" Oct 2 21:29:39.635365 env[1374]: time="2023-10-02T21:29:39.635320759Z" level=info msg="CreateContainer within sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:29:39.664829 env[1374]: time="2023-10-02T21:29:39.664779112Z" level=info msg="CreateContainer within sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\"" Oct 2 21:29:39.667080 env[1374]: time="2023-10-02T21:29:39.666100166Z" level=info msg="StartContainer for \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\"" Oct 2 21:29:39.685882 systemd[1]: Started cri-containerd-449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb.scope. Oct 2 21:29:39.702602 systemd[1]: cri-containerd-449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb.scope: Deactivated successfully. Oct 2 21:29:39.795199 env[1374]: time="2023-10-02T21:29:39.795095055Z" level=info msg="shim disconnected" id=449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb Oct 2 21:29:39.795488 env[1374]: time="2023-10-02T21:29:39.795469979Z" level=warning msg="cleaning up after shim disconnected" id=449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb namespace=k8s.io Oct 2 21:29:39.795583 env[1374]: time="2023-10-02T21:29:39.795569340Z" level=info msg="cleaning up dead shim" Oct 2 21:29:39.808451 env[1374]: time="2023-10-02T21:29:39.808406317Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3694 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:29:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:29:39.808847 env[1374]: time="2023-10-02T21:29:39.808796361Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:29:39.809371 env[1374]: time="2023-10-02T21:29:39.809053204Z" level=error msg="Failed to pipe stdout of container \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\"" error="reading from a closed fifo" Oct 2 21:29:39.809460 env[1374]: time="2023-10-02T21:29:39.809326926Z" level=error msg="Failed to pipe stderr of container \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\"" error="reading from a closed fifo" Oct 2 21:29:39.814655 env[1374]: time="2023-10-02T21:29:39.814479061Z" level=error msg="StartContainer for \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:29:39.816567 kubelet[2543]: E1002 21:29:39.815474 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb" Oct 2 21:29:39.816567 kubelet[2543]: E1002 21:29:39.815566 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:29:39.816567 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:29:39.816567 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:29:39.816949 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b2vgx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:29:39.817648 kubelet[2543]: E1002 21:29:39.815599 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:29:39.884622 env[1374]: time="2023-10-02T21:29:39.884327523Z" level=info msg="CreateContainer within sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:29:39.911959 env[1374]: time="2023-10-02T21:29:39.911906135Z" level=info msg="CreateContainer within sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\"" Oct 2 21:29:39.912968 env[1374]: time="2023-10-02T21:29:39.912901786Z" level=info msg="StartContainer for \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\"" Oct 2 21:29:39.934549 systemd[1]: Started cri-containerd-0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6.scope. Oct 2 21:29:39.950050 systemd[1]: cri-containerd-0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6.scope: Deactivated successfully. Oct 2 21:29:39.966021 env[1374]: time="2023-10-02T21:29:39.965967829Z" level=info msg="shim disconnected" id=0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6 Oct 2 21:29:39.966021 env[1374]: time="2023-10-02T21:29:39.966017790Z" level=warning msg="cleaning up after shim disconnected" id=0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6 namespace=k8s.io Oct 2 21:29:39.966021 env[1374]: time="2023-10-02T21:29:39.966027870Z" level=info msg="cleaning up dead shim" Oct 2 21:29:39.977762 env[1374]: time="2023-10-02T21:29:39.977711434Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3729 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:29:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:29:39.978027 env[1374]: time="2023-10-02T21:29:39.977972197Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:29:39.979011 env[1374]: time="2023-10-02T21:29:39.978971847Z" level=error msg="Failed to pipe stderr of container \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\"" error="reading from a closed fifo" Oct 2 21:29:39.979011 env[1374]: time="2023-10-02T21:29:39.978972407Z" level=error msg="Failed to pipe stdout of container \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\"" error="reading from a closed fifo" Oct 2 21:29:39.983036 env[1374]: time="2023-10-02T21:29:39.982991410Z" level=error msg="StartContainer for \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:29:39.983451 kubelet[2543]: E1002 21:29:39.983270 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6" Oct 2 21:29:39.983451 kubelet[2543]: E1002 21:29:39.983392 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:29:39.983451 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:29:39.983451 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:29:39.983635 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b2vgx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:29:39.983867 kubelet[2543]: E1002 21:29:39.983426 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:29:40.207690 kubelet[2543]: E1002 21:29:40.207667 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:40.882440 kubelet[2543]: I1002 21:29:40.882417 2543 scope.go:115] "RemoveContainer" containerID="449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb" Oct 2 21:29:40.883416 kubelet[2543]: I1002 21:29:40.883399 2543 scope.go:115] "RemoveContainer" containerID="449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb" Oct 2 21:29:40.884320 env[1374]: time="2023-10-02T21:29:40.884280886Z" level=info msg="RemoveContainer for \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\"" Oct 2 21:29:40.884697 env[1374]: time="2023-10-02T21:29:40.884670450Z" level=info msg="RemoveContainer for \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\"" Oct 2 21:29:40.884783 env[1374]: time="2023-10-02T21:29:40.884750931Z" level=error msg="RemoveContainer for \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\" failed" error="failed to set removing state for container \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\": container is already in removing state" Oct 2 21:29:40.884904 kubelet[2543]: E1002 21:29:40.884890 2543 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\": container is already in removing state" containerID="449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb" Oct 2 21:29:40.885035 kubelet[2543]: E1002 21:29:40.885023 2543 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb": container is already in removing state; Skipping pod "cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1)" Oct 2 21:29:40.885351 kubelet[2543]: E1002 21:29:40.885338 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1)\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:29:40.894320 env[1374]: time="2023-10-02T21:29:40.894272112Z" level=info msg="RemoveContainer for \"449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb\" returns successfully" Oct 2 21:29:41.885917 kubelet[2543]: E1002 21:29:41.885891 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1)\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:29:42.899405 kubelet[2543]: W1002 21:29:42.899330 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podce0885e4_9f2f_4372_8373_e28ad2ff26d1.slice/cri-containerd-449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb.scope WatchSource:0}: container "449d02e71d918f0e1f5106669ecedae2fa75a48017247ec75d9c963d7713f4cb" in namespace "k8s.io": not found Oct 2 21:29:45.209115 kubelet[2543]: E1002 21:29:45.209081 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:46.005996 kubelet[2543]: W1002 21:29:46.005870 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podce0885e4_9f2f_4372_8373_e28ad2ff26d1.slice/cri-containerd-0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6.scope WatchSource:0}: task 0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6 not found: not found Oct 2 21:29:47.365000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:47.371618 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 21:29:47.371692 kernel: audit: type=1400 audit(1696282187.365:1396): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:47.365000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002680000 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:47.422358 kernel: audit: type=1300 audit(1696282187.365:1396): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002680000 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:47.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:47.446353 kernel: audit: type=1327 audit(1696282187.365:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:47.446434 kernel: audit: type=1400 audit(1696282187.365:1397): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:47.365000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:47.365000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002680020 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:47.497538 kernel: audit: type=1300 audit(1696282187.365:1397): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002680020 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:47.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:47.521262 kernel: audit: type=1327 audit(1696282187.365:1397): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:47.521390 kernel: audit: type=1400 audit(1696282187.366:1398): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:47.366000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:47.366000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002477aa0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:47.572042 kernel: audit: type=1300 audit(1696282187.366:1398): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002477aa0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:47.366000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:47.595883 kernel: audit: type=1327 audit(1696282187.366:1398): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:47.595988 kernel: audit: type=1400 audit(1696282187.366:1399): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:47.366000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:47.366000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002477ac0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:29:47.366000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:50.209740 kubelet[2543]: E1002 21:29:50.209715 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:54.219240 env[1374]: time="2023-10-02T21:29:54.219194598Z" level=info msg="CreateContainer within sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:29:54.239702 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4193257063.mount: Deactivated successfully. Oct 2 21:29:54.253573 env[1374]: time="2023-10-02T21:29:54.253527237Z" level=info msg="CreateContainer within sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\"" Oct 2 21:29:54.254239 env[1374]: time="2023-10-02T21:29:54.254206444Z" level=info msg="StartContainer for \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\"" Oct 2 21:29:54.280002 systemd[1]: Started cri-containerd-78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639.scope. Oct 2 21:29:54.295262 systemd[1]: cri-containerd-78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639.scope: Deactivated successfully. Oct 2 21:29:54.333904 env[1374]: time="2023-10-02T21:29:54.333856475Z" level=info msg="shim disconnected" id=78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639 Oct 2 21:29:54.334292 env[1374]: time="2023-10-02T21:29:54.334270919Z" level=warning msg="cleaning up after shim disconnected" id=78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639 namespace=k8s.io Oct 2 21:29:54.334388 env[1374]: time="2023-10-02T21:29:54.334374001Z" level=info msg="cleaning up dead shim" Oct 2 21:29:54.347642 env[1374]: time="2023-10-02T21:29:54.347594459Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3764 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:29:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:29:54.348129 env[1374]: time="2023-10-02T21:29:54.348069903Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:29:54.349292 env[1374]: time="2023-10-02T21:29:54.348349626Z" level=error msg="Failed to pipe stdout of container \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\"" error="reading from a closed fifo" Oct 2 21:29:54.351457 env[1374]: time="2023-10-02T21:29:54.351416338Z" level=error msg="Failed to pipe stderr of container \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\"" error="reading from a closed fifo" Oct 2 21:29:54.356148 env[1374]: time="2023-10-02T21:29:54.356099387Z" level=error msg="StartContainer for \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:29:54.357753 kubelet[2543]: E1002 21:29:54.356468 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639" Oct 2 21:29:54.357753 kubelet[2543]: E1002 21:29:54.356569 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:29:54.357753 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:29:54.357753 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:29:54.358147 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b2vgx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:29:54.358205 kubelet[2543]: E1002 21:29:54.356601 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:29:54.905441 kubelet[2543]: I1002 21:29:54.905416 2543 scope.go:115] "RemoveContainer" containerID="0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6" Oct 2 21:29:54.905962 kubelet[2543]: I1002 21:29:54.905947 2543 scope.go:115] "RemoveContainer" containerID="0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6" Oct 2 21:29:54.919955 env[1374]: time="2023-10-02T21:29:54.919856392Z" level=info msg="RemoveContainer for \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\"" Oct 2 21:29:54.921317 env[1374]: time="2023-10-02T21:29:54.920260836Z" level=info msg="RemoveContainer for \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\"" Oct 2 21:29:54.921317 env[1374]: time="2023-10-02T21:29:54.920342237Z" level=error msg="RemoveContainer for \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\" failed" error="failed to set removing state for container \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\": container is already in removing state" Oct 2 21:29:54.921443 kubelet[2543]: E1002 21:29:54.920492 2543 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\": container is already in removing state" containerID="0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6" Oct 2 21:29:54.921443 kubelet[2543]: E1002 21:29:54.920525 2543 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6": container is already in removing state; Skipping pod "cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1)" Oct 2 21:29:54.921443 kubelet[2543]: E1002 21:29:54.920788 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1)\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:29:54.930594 env[1374]: time="2023-10-02T21:29:54.930548063Z" level=info msg="RemoveContainer for \"0f5956a1a17c413257928f43d5549ab4b1129e46358a19f343a08fd4bb5513d6\" returns successfully" Oct 2 21:29:55.211521 kubelet[2543]: E1002 21:29:55.211425 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:55.236183 systemd[1]: run-containerd-runc-k8s.io-78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639-runc.iGHrJo.mount: Deactivated successfully. Oct 2 21:29:55.236290 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639-rootfs.mount: Deactivated successfully. Oct 2 21:29:57.438688 kubelet[2543]: W1002 21:29:57.438642 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podce0885e4_9f2f_4372_8373_e28ad2ff26d1.slice/cri-containerd-78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639.scope WatchSource:0}: task 78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639 not found: not found Oct 2 21:30:00.212617 kubelet[2543]: E1002 21:30:00.212594 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:05.214097 kubelet[2543]: E1002 21:30:05.214053 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:05.216941 kubelet[2543]: E1002 21:30:05.216904 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1)\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:30:10.214744 kubelet[2543]: E1002 21:30:10.214711 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:15.215811 kubelet[2543]: E1002 21:30:15.215775 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:20.217204 kubelet[2543]: E1002 21:30:20.217164 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:20.220029 env[1374]: time="2023-10-02T21:30:20.219837305Z" level=info msg="CreateContainer within sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:30:20.242400 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4139449683.mount: Deactivated successfully. Oct 2 21:30:20.256034 env[1374]: time="2023-10-02T21:30:20.255984074Z" level=info msg="CreateContainer within sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56\"" Oct 2 21:30:20.256674 env[1374]: time="2023-10-02T21:30:20.256650361Z" level=info msg="StartContainer for \"37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56\"" Oct 2 21:30:20.282145 systemd[1]: Started cri-containerd-37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56.scope. Oct 2 21:30:20.297727 systemd[1]: cri-containerd-37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56.scope: Deactivated successfully. Oct 2 21:30:20.331817 env[1374]: time="2023-10-02T21:30:20.331771008Z" level=info msg="shim disconnected" id=37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56 Oct 2 21:30:20.332117 env[1374]: time="2023-10-02T21:30:20.332098851Z" level=warning msg="cleaning up after shim disconnected" id=37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56 namespace=k8s.io Oct 2 21:30:20.332192 env[1374]: time="2023-10-02T21:30:20.332180532Z" level=info msg="cleaning up dead shim" Oct 2 21:30:20.345121 env[1374]: time="2023-10-02T21:30:20.345074344Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:30:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3802 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:30:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:30:20.345547 env[1374]: time="2023-10-02T21:30:20.345493708Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:30:20.346027 env[1374]: time="2023-10-02T21:30:20.345788911Z" level=error msg="Failed to pipe stderr of container \"37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56\"" error="reading from a closed fifo" Oct 2 21:30:20.346155 env[1374]: time="2023-10-02T21:30:20.345793151Z" level=error msg="Failed to pipe stdout of container \"37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56\"" error="reading from a closed fifo" Oct 2 21:30:20.350196 env[1374]: time="2023-10-02T21:30:20.350156196Z" level=error msg="StartContainer for \"37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:30:20.350515 kubelet[2543]: E1002 21:30:20.350487 2543 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56" Oct 2 21:30:20.352209 kubelet[2543]: E1002 21:30:20.350978 2543 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:30:20.352209 kubelet[2543]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:30:20.352209 kubelet[2543]: rm /hostbin/cilium-mount Oct 2 21:30:20.352209 kubelet[2543]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-b2vgx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:30:20.352420 kubelet[2543]: E1002 21:30:20.351062 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:30:20.948640 kubelet[2543]: I1002 21:30:20.948115 2543 scope.go:115] "RemoveContainer" containerID="78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639" Oct 2 21:30:20.948640 kubelet[2543]: I1002 21:30:20.948462 2543 scope.go:115] "RemoveContainer" containerID="78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639" Oct 2 21:30:20.950450 env[1374]: time="2023-10-02T21:30:20.950413647Z" level=info msg="RemoveContainer for \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\"" Oct 2 21:30:20.950730 env[1374]: time="2023-10-02T21:30:20.950701690Z" level=info msg="RemoveContainer for \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\"" Oct 2 21:30:20.950856 env[1374]: time="2023-10-02T21:30:20.950825091Z" level=error msg="RemoveContainer for \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\" failed" error="failed to set removing state for container \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\": container is already in removing state" Oct 2 21:30:20.951128 kubelet[2543]: E1002 21:30:20.951071 2543 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\": container is already in removing state" containerID="78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639" Oct 2 21:30:20.951128 kubelet[2543]: I1002 21:30:20.951110 2543 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639} err="rpc error: code = Unknown desc = failed to set removing state for container \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\": container is already in removing state" Oct 2 21:30:20.959371 env[1374]: time="2023-10-02T21:30:20.959322418Z" level=info msg="RemoveContainer for \"78891f23fd596caf371ce51d326ffbfbdaf0a14f9b30bda5e867596579bde639\" returns successfully" Oct 2 21:30:20.960276 kubelet[2543]: E1002 21:30:20.959943 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1)\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:30:21.238615 systemd[1]: run-containerd-runc-k8s.io-37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56-runc.MUvjPb.mount: Deactivated successfully. Oct 2 21:30:21.238711 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56-rootfs.mount: Deactivated successfully. Oct 2 21:30:23.438290 kubelet[2543]: W1002 21:30:23.438248 2543 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podce0885e4_9f2f_4372_8373_e28ad2ff26d1.slice/cri-containerd-37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56.scope WatchSource:0}: task 37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56 not found: not found Oct 2 21:30:25.217840 kubelet[2543]: E1002 21:30:25.217814 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:30.219226 kubelet[2543]: E1002 21:30:30.219159 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:31.685000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.690931 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:30:31.690994 kernel: audit: type=1400 audit(1696282231.685:1400): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.685000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010eb9b0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:31.743025 kernel: audit: type=1300 audit(1696282231.685:1400): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010eb9b0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:31.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:31.767498 kernel: audit: type=1327 audit(1696282231.685:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:31.767593 kernel: audit: type=1400 audit(1696282231.687:1401): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.687000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.687000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009dc140 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:31.818389 kernel: audit: type=1300 audit(1696282231.687:1401): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40009dc140 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:31.687000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:31.843419 kernel: audit: type=1327 audit(1696282231.687:1401): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:31.873000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.873000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.922074 kernel: audit: type=1400 audit(1696282231.873:1403): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.922180 kernel: audit: type=1400 audit(1696282231.873:1402): avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.873000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400276c940 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:30:31.949956 kernel: audit: type=1300 audit(1696282231.873:1402): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400276c940 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:30:31.950049 kernel: audit: type=1300 audit(1696282231.873:1403): arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=4008862bd0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:30:31.873000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=4008862bd0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:30:31.873000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:31.873000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:31.873000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.873000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=40081f6270 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:30:31.873000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:31.921000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.921000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4008862db0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:30:31.921000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:31.921000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.921000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4008862de0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:30:31.921000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:31.921000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:31.921000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400293e620 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:30:31.921000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:34.217449 kubelet[2543]: E1002 21:30:34.217402 2543 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4jjtb_kube-system(ce0885e4-9f2f-4372-8373-e28ad2ff26d1)\"" pod="kube-system/cilium-4jjtb" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 Oct 2 21:30:34.984357 update_engine[1364]: I1002 21:30:34.984311 1364 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 21:30:34.984357 update_engine[1364]: I1002 21:30:34.984362 1364 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 21:30:34.984794 update_engine[1364]: I1002 21:30:34.984555 1364 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 21:30:34.984934 update_engine[1364]: I1002 21:30:34.984896 1364 omaha_request_params.cc:62] Current group set to lts Oct 2 21:30:34.985047 update_engine[1364]: I1002 21:30:34.985031 1364 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 21:30:34.985047 update_engine[1364]: I1002 21:30:34.985042 1364 update_attempter.cc:638] Scheduling an action processor start. Oct 2 21:30:34.985096 update_engine[1364]: I1002 21:30:34.985057 1364 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 21:30:34.985096 update_engine[1364]: I1002 21:30:34.985082 1364 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 21:30:34.985457 locksmithd[1457]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 21:30:34.985842 update_engine[1364]: I1002 21:30:34.985821 1364 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 21:30:34.985842 update_engine[1364]: I1002 21:30:34.985837 1364 omaha_request_action.cc:269] Request: Oct 2 21:30:34.985842 update_engine[1364]: Oct 2 21:30:34.985842 update_engine[1364]: Oct 2 21:30:34.985842 update_engine[1364]: Oct 2 21:30:34.985842 update_engine[1364]: Oct 2 21:30:34.985842 update_engine[1364]: Oct 2 21:30:34.985842 update_engine[1364]: Oct 2 21:30:34.985842 update_engine[1364]: Oct 2 21:30:34.985842 update_engine[1364]: Oct 2 21:30:34.985842 update_engine[1364]: I1002 21:30:34.985843 1364 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 21:30:34.987418 update_engine[1364]: I1002 21:30:34.987396 1364 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 21:30:34.987606 update_engine[1364]: I1002 21:30:34.987587 1364 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 21:30:35.013699 env[1374]: time="2023-10-02T21:30:35.013653970Z" level=info msg="StopPodSandbox for \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\"" Oct 2 21:30:35.014057 env[1374]: time="2023-10-02T21:30:35.013748451Z" level=info msg="TearDown network for sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" successfully" Oct 2 21:30:35.014057 env[1374]: time="2023-10-02T21:30:35.013782651Z" level=info msg="StopPodSandbox for \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" returns successfully" Oct 2 21:30:35.014949 env[1374]: time="2023-10-02T21:30:35.014405537Z" level=info msg="RemovePodSandbox for \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\"" Oct 2 21:30:35.014949 env[1374]: time="2023-10-02T21:30:35.014441018Z" level=info msg="Forcibly stopping sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\"" Oct 2 21:30:35.014949 env[1374]: time="2023-10-02T21:30:35.014516058Z" level=info msg="TearDown network for sandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" successfully" Oct 2 21:30:35.024878 env[1374]: time="2023-10-02T21:30:35.024830923Z" level=info msg="RemovePodSandbox \"4161e8be55f1e89b8e162fc3614ac6f29d6312dd52dc632737841b459f095683\" returns successfully" Oct 2 21:30:35.025340 env[1374]: time="2023-10-02T21:30:35.025312688Z" level=info msg="StopPodSandbox for \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\"" Oct 2 21:30:35.025419 env[1374]: time="2023-10-02T21:30:35.025390328Z" level=info msg="TearDown network for sandbox \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" successfully" Oct 2 21:30:35.025449 env[1374]: time="2023-10-02T21:30:35.025422009Z" level=info msg="StopPodSandbox for \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" returns successfully" Oct 2 21:30:35.026633 env[1374]: time="2023-10-02T21:30:35.025687371Z" level=info msg="RemovePodSandbox for \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\"" Oct 2 21:30:35.026633 env[1374]: time="2023-10-02T21:30:35.025711892Z" level=info msg="Forcibly stopping sandbox \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\"" Oct 2 21:30:35.026633 env[1374]: time="2023-10-02T21:30:35.025768412Z" level=info msg="TearDown network for sandbox \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" successfully" Oct 2 21:30:35.033605 env[1374]: time="2023-10-02T21:30:35.033541251Z" level=info msg="RemovePodSandbox \"5572aedac0755e078bd3abbdc4f6b167ea6567cb104dee86e1ce6fc70e7023c1\" returns successfully" Oct 2 21:30:35.220040 kubelet[2543]: E1002 21:30:35.220013 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:36.165720 update_engine[1364]: I1002 21:30:36.165686 1364 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 21:30:36.166323 update_engine[1364]: I1002 21:30:36.166306 1364 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 21:30:36.166566 update_engine[1364]: I1002 21:30:36.166553 1364 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 21:30:36.548584 update_engine[1364]: I1002 21:30:36.548489 1364 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 21:30:36.550206 update_engine[1364]: I1002 21:30:36.550179 1364 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 21:30:36.550320 update_engine[1364]: I1002 21:30:36.550308 1364 omaha_request_action.cc:619] Omaha request response: Oct 2 21:30:36.550320 update_engine[1364]: Oct 2 21:30:36.799532 update_engine[1364]: I1002 21:30:36.799439 1364 omaha_request_action.cc:409] No update. Oct 2 21:30:36.799672 update_engine[1364]: I1002 21:30:36.799659 1364 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 21:30:36.799724 update_engine[1364]: I1002 21:30:36.799715 1364 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 21:30:36.799771 update_engine[1364]: I1002 21:30:36.799762 1364 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 21:30:36.799821 update_engine[1364]: I1002 21:30:36.799811 1364 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 21:30:36.799874 update_engine[1364]: I1002 21:30:36.799863 1364 update_attempter.cc:302] Processing Done. Oct 2 21:30:36.799974 update_engine[1364]: I1002 21:30:36.799962 1364 update_attempter.cc:338] No update. Oct 2 21:30:36.800040 update_engine[1364]: I1002 21:30:36.800029 1364 update_check_scheduler.cc:74] Next update check in 42m34s Oct 2 21:30:36.800394 locksmithd[1457]: LastCheckedTime=1696282236 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 21:30:40.221572 kubelet[2543]: E1002 21:30:40.221547 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:40.426371 env[1374]: time="2023-10-02T21:30:40.426316766Z" level=info msg="StopPodSandbox for \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\"" Oct 2 21:30:40.426768 env[1374]: time="2023-10-02T21:30:40.426404127Z" level=info msg="Container to stop \"37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:30:40.428079 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50-shm.mount: Deactivated successfully. Oct 2 21:30:40.446139 systemd[1]: cri-containerd-6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50.scope: Deactivated successfully. Oct 2 21:30:40.458967 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:30:40.459098 kernel: audit: type=1334 audit(1696282240.445:1408): prog-id=126 op=UNLOAD Oct 2 21:30:40.445000 audit: BPF prog-id=126 op=UNLOAD Oct 2 21:30:40.459000 audit: BPF prog-id=129 op=UNLOAD Oct 2 21:30:40.467242 kernel: audit: type=1334 audit(1696282240.459:1409): prog-id=129 op=UNLOAD Oct 2 21:30:40.497930 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50-rootfs.mount: Deactivated successfully. Oct 2 21:30:40.545329 env[1374]: time="2023-10-02T21:30:40.545251287Z" level=info msg="shim disconnected" id=6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50 Oct 2 21:30:40.545329 env[1374]: time="2023-10-02T21:30:40.545326088Z" level=warning msg="cleaning up after shim disconnected" id=6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50 namespace=k8s.io Oct 2 21:30:40.545329 env[1374]: time="2023-10-02T21:30:40.545336208Z" level=info msg="cleaning up dead shim" Oct 2 21:30:40.555121 sshd[3613]: pam_unix(sshd:session): session closed for user core Oct 2 21:30:40.556000 audit[3613]: USER_END pid=3613 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:30:40.565283 systemd[1]: sshd@29-10.200.20.16:22-10.200.12.6:50010.service: Deactivated successfully. Oct 2 21:30:40.566342 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 21:30:40.566514 systemd[1]: session-32.scope: Consumed 1.225s CPU time. Oct 2 21:30:40.567754 systemd-logind[1361]: Session 32 logged out. Waiting for processes to exit. Oct 2 21:30:40.568947 systemd-logind[1361]: Removed session 32. Oct 2 21:30:40.556000 audit[3613]: CRED_DISP pid=3613 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:30:40.607274 kernel: audit: type=1106 audit(1696282240.556:1410): pid=3613 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:30:40.607549 kernel: audit: type=1104 audit(1696282240.556:1411): pid=3613 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:30:40.607615 env[1374]: time="2023-10-02T21:30:40.607483675Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:30:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3837 runtime=io.containerd.runc.v2\n" Oct 2 21:30:40.607840 env[1374]: time="2023-10-02T21:30:40.607813998Z" level=info msg="TearDown network for sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" successfully" Oct 2 21:30:40.607904 env[1374]: time="2023-10-02T21:30:40.607839559Z" level=info msg="StopPodSandbox for \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" returns successfully" Oct 2 21:30:40.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.16:22-10.200.12.6:50010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:30:40.628811 kernel: audit: type=1131 audit(1696282240.564:1412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.16:22-10.200.12.6:50010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:30:40.719194 kubelet[2543]: I1002 21:30:40.718518 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-etc-cni-netd\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719194 kubelet[2543]: I1002 21:30:40.718559 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-hostproc\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719194 kubelet[2543]: I1002 21:30:40.718584 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-config-path\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719194 kubelet[2543]: I1002 21:30:40.718604 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-ipsec-secrets\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719194 kubelet[2543]: I1002 21:30:40.718621 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-lib-modules\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719194 kubelet[2543]: I1002 21:30:40.718638 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-cgroup\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719534 kubelet[2543]: I1002 21:30:40.718658 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-clustermesh-secrets\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719534 kubelet[2543]: I1002 21:30:40.718680 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-b2vgx\" (UniqueName: \"kubernetes.io/projected/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-kube-api-access-b2vgx\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719534 kubelet[2543]: I1002 21:30:40.718700 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-hubble-tls\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719534 kubelet[2543]: I1002 21:30:40.718718 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-xtables-lock\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719534 kubelet[2543]: I1002 21:30:40.718737 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-host-proc-sys-kernel\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719534 kubelet[2543]: I1002 21:30:40.718753 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-host-proc-sys-net\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719713 kubelet[2543]: I1002 21:30:40.718768 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-bpf-maps\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719713 kubelet[2543]: I1002 21:30:40.718785 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-run\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719713 kubelet[2543]: I1002 21:30:40.718803 2543 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cni-path\") pod \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\" (UID: \"ce0885e4-9f2f-4372-8373-e28ad2ff26d1\") " Oct 2 21:30:40.719713 kubelet[2543]: I1002 21:30:40.718862 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cni-path" (OuterVolumeSpecName: "cni-path") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.719713 kubelet[2543]: I1002 21:30:40.718887 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.719826 kubelet[2543]: I1002 21:30:40.718954 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-hostproc" (OuterVolumeSpecName: "hostproc") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.720963 kubelet[2543]: W1002 21:30:40.720030 2543 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/ce0885e4-9f2f-4372-8373-e28ad2ff26d1/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:30:40.721395 kubelet[2543]: I1002 21:30:40.721372 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.721503 kubelet[2543]: I1002 21:30:40.721490 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.721578 kubelet[2543]: I1002 21:30:40.721567 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.721648 kubelet[2543]: I1002 21:30:40.721637 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.721718 kubelet[2543]: I1002 21:30:40.721706 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.722603 kubelet[2543]: I1002 21:30:40.722581 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:30:40.722717 kubelet[2543]: I1002 21:30:40.722704 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.722795 kubelet[2543]: I1002 21:30:40.722782 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:40.725824 systemd[1]: var-lib-kubelet-pods-ce0885e4\x2d9f2f\x2d4372\x2d8373\x2de28ad2ff26d1-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2db2vgx.mount: Deactivated successfully. Oct 2 21:30:40.726778 kubelet[2543]: I1002 21:30:40.726756 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-kube-api-access-b2vgx" (OuterVolumeSpecName: "kube-api-access-b2vgx") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "kube-api-access-b2vgx". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:30:40.730004 systemd[1]: var-lib-kubelet-pods-ce0885e4\x2d9f2f\x2d4372\x2d8373\x2de28ad2ff26d1-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 21:30:40.731642 kubelet[2543]: I1002 21:30:40.731614 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:30:40.732990 systemd[1]: var-lib-kubelet-pods-ce0885e4\x2d9f2f\x2d4372\x2d8373\x2de28ad2ff26d1-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:30:40.733885 kubelet[2543]: I1002 21:30:40.733864 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:30:40.738023 kubelet[2543]: I1002 21:30:40.737985 2543 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "ce0885e4-9f2f-4372-8373-e28ad2ff26d1" (UID: "ce0885e4-9f2f-4372-8373-e28ad2ff26d1"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:30:40.819963 kubelet[2543]: I1002 21:30:40.819209 2543 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.819963 kubelet[2543]: I1002 21:30:40.819243 2543 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-host-proc-sys-net\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.819963 kubelet[2543]: I1002 21:30:40.819255 2543 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-bpf-maps\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.819963 kubelet[2543]: I1002 21:30:40.819290 2543 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-run\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.819963 kubelet[2543]: I1002 21:30:40.819300 2543 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cni-path\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.819963 kubelet[2543]: I1002 21:30:40.819310 2543 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-etc-cni-netd\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.819963 kubelet[2543]: I1002 21:30:40.819319 2543 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-hostproc\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.819963 kubelet[2543]: I1002 21:30:40.819328 2543 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-config-path\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.820248 kubelet[2543]: I1002 21:30:40.819337 2543 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.820248 kubelet[2543]: I1002 21:30:40.819346 2543 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-lib-modules\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.820248 kubelet[2543]: I1002 21:30:40.819356 2543 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-cilium-cgroup\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.820248 kubelet[2543]: I1002 21:30:40.819365 2543 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-clustermesh-secrets\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.820248 kubelet[2543]: I1002 21:30:40.819375 2543 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-b2vgx\" (UniqueName: \"kubernetes.io/projected/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-kube-api-access-b2vgx\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.820248 kubelet[2543]: I1002 21:30:40.819384 2543 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-hubble-tls\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.820248 kubelet[2543]: I1002 21:30:40.819394 2543 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ce0885e4-9f2f-4372-8373-e28ad2ff26d1-xtables-lock\") on node \"ci-3510.3.0-a-32a653638a\" DevicePath \"\"" Oct 2 21:30:40.984147 kubelet[2543]: I1002 21:30:40.984114 2543 scope.go:115] "RemoveContainer" containerID="37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56" Oct 2 21:30:40.989206 systemd[1]: Removed slice kubepods-burstable-podce0885e4_9f2f_4372_8373_e28ad2ff26d1.slice. Oct 2 21:30:40.990338 env[1374]: time="2023-10-02T21:30:40.990298699Z" level=info msg="RemoveContainer for \"37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56\"" Oct 2 21:30:41.000378 env[1374]: time="2023-10-02T21:30:41.000332161Z" level=info msg="RemoveContainer for \"37a6d67d588d1bade982b36a25b4f2bfe4c9a5018c181dd308c7617494f1cc56\" returns successfully" Oct 2 21:30:41.219273 kubelet[2543]: I1002 21:30:41.219247 2543 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=ce0885e4-9f2f-4372-8373-e28ad2ff26d1 path="/var/lib/kubelet/pods/ce0885e4-9f2f-4372-8373-e28ad2ff26d1/volumes" Oct 2 21:30:41.428085 systemd[1]: var-lib-kubelet-pods-ce0885e4\x2d9f2f\x2d4372\x2d8373\x2de28ad2ff26d1-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:30:45.222715 kubelet[2543]: E1002 21:30:45.222673 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:47.366000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:47.366000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e91ec0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:47.417746 kernel: audit: type=1400 audit(1696282247.366:1413): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:47.417862 kernel: audit: type=1300 audit(1696282247.366:1413): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e91ec0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:47.417892 kernel: audit: type=1327 audit(1696282247.366:1413): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:47.366000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:47.376000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:47.463185 kernel: audit: type=1400 audit(1696282247.376:1414): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:47.463254 kernel: audit: type=1300 audit(1696282247.376:1414): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e91ee0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:47.376000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e91ee0 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:47.376000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:47.516238 kernel: audit: type=1327 audit(1696282247.376:1414): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:47.376000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:47.539404 kernel: audit: type=1400 audit(1696282247.376:1415): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:47.539582 kernel: audit: type=1300 audit(1696282247.376:1415): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e91f00 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:47.376000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e91f00 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:47.376000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:47.592948 kernel: audit: type=1327 audit(1696282247.376:1415): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:47.376000 audit[2398]: AVC avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:47.614637 kernel: audit: type=1400 audit(1696282247.376:1416): avc: denied { watch } for pid=2398 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:47.376000 audit[2398]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000ef6020 a2=fc6 a3=0 items=0 ppid=2248 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:30:47.376000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:50.224039 kubelet[2543]: E1002 21:30:50.224004 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:55.225161 kubelet[2543]: E1002 21:30:55.225137 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:00.226393 kubelet[2543]: E1002 21:31:00.226370 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:05.228070 kubelet[2543]: E1002 21:31:05.228047 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:10.229448 kubelet[2543]: E1002 21:31:10.229416 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:15.230333 kubelet[2543]: E1002 21:31:15.230300 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:20.231828 kubelet[2543]: E1002 21:31:20.231799 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:25.233306 kubelet[2543]: E1002 21:31:25.233277 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:27.172064 systemd[1]: cri-containerd-df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6.scope: Deactivated successfully. Oct 2 21:31:27.172383 systemd[1]: cri-containerd-df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6.scope: Consumed 4.517s CPU time. Oct 2 21:31:27.173000 audit: BPF prog-id=77 op=UNLOAD Oct 2 21:31:27.180080 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:31:27.180186 kernel: audit: type=1334 audit(1696282287.173:1417): prog-id=77 op=UNLOAD Oct 2 21:31:27.173000 audit: BPF prog-id=106 op=UNLOAD Oct 2 21:31:27.193159 kernel: audit: type=1334 audit(1696282287.173:1418): prog-id=106 op=UNLOAD Oct 2 21:31:27.207887 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6-rootfs.mount: Deactivated successfully. Oct 2 21:31:27.226412 env[1374]: time="2023-10-02T21:31:27.226362547Z" level=info msg="shim disconnected" id=df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6 Oct 2 21:31:27.226412 env[1374]: time="2023-10-02T21:31:27.226409148Z" level=warning msg="cleaning up after shim disconnected" id=df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6 namespace=k8s.io Oct 2 21:31:27.226838 env[1374]: time="2023-10-02T21:31:27.226420428Z" level=info msg="cleaning up dead shim" Oct 2 21:31:27.239512 env[1374]: time="2023-10-02T21:31:27.239459077Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:31:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3873 runtime=io.containerd.runc.v2\n" Oct 2 21:31:27.634381 kubelet[2543]: E1002 21:31:27.633782 2543 controller.go:189] failed to update lease, error: rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.16:41220->10.200.20.14:2379: read: connection timed out Oct 2 21:31:27.638036 systemd[1]: cri-containerd-f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c.scope: Deactivated successfully. Oct 2 21:31:27.638323 systemd[1]: cri-containerd-f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c.scope: Consumed 2.333s CPU time. Oct 2 21:31:27.641000 audit: BPF prog-id=85 op=UNLOAD Oct 2 21:31:27.641000 audit: BPF prog-id=90 op=UNLOAD Oct 2 21:31:27.656507 kernel: audit: type=1334 audit(1696282287.641:1419): prog-id=85 op=UNLOAD Oct 2 21:31:27.656638 kernel: audit: type=1334 audit(1696282287.641:1420): prog-id=90 op=UNLOAD Oct 2 21:31:27.669387 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c-rootfs.mount: Deactivated successfully. Oct 2 21:31:27.688064 env[1374]: time="2023-10-02T21:31:27.688010290Z" level=info msg="shim disconnected" id=f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c Oct 2 21:31:27.688312 env[1374]: time="2023-10-02T21:31:27.688295372Z" level=warning msg="cleaning up after shim disconnected" id=f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c namespace=k8s.io Oct 2 21:31:27.688426 env[1374]: time="2023-10-02T21:31:27.688411613Z" level=info msg="cleaning up dead shim" Oct 2 21:31:27.700773 env[1374]: time="2023-10-02T21:31:27.700738416Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:31:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3898 runtime=io.containerd.runc.v2\n" Oct 2 21:31:28.056969 kubelet[2543]: I1002 21:31:28.056913 2543 scope.go:115] "RemoveContainer" containerID="df8383169f197cf7874f318b68143dc103ad6bdd16994bf19a9c6a47a4cd06f6" Oct 2 21:31:28.060514 env[1374]: time="2023-10-02T21:31:28.060479626Z" level=info msg="CreateContainer within sandbox \"68140449a20610047f7b2f6499ecb422b30c5df3f6980b6f824c6cfb96b2d9b6\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 21:31:28.061106 kubelet[2543]: I1002 21:31:28.061086 2543 scope.go:115] "RemoveContainer" containerID="f02447acd3bce1a8965ad4e057de0a03044fe940d3f11f746ef4d1ce3167649c" Oct 2 21:31:28.063388 env[1374]: time="2023-10-02T21:31:28.063359695Z" level=info msg="CreateContainer within sandbox \"ca19e67d6b4cdc1776b452e52866a07a2ad34d365387f51376c84fa276640329\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 21:31:28.085770 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1605676067.mount: Deactivated successfully. Oct 2 21:31:28.105245 env[1374]: time="2023-10-02T21:31:28.105188470Z" level=info msg="CreateContainer within sandbox \"ca19e67d6b4cdc1776b452e52866a07a2ad34d365387f51376c84fa276640329\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"4eca3e40fce45b66fc9a241b34bd1e90d074a464da2ebee7394b1478fd0508d2\"" Oct 2 21:31:28.105718 env[1374]: time="2023-10-02T21:31:28.105688915Z" level=info msg="StartContainer for \"4eca3e40fce45b66fc9a241b34bd1e90d074a464da2ebee7394b1478fd0508d2\"" Oct 2 21:31:28.109134 env[1374]: time="2023-10-02T21:31:28.109099589Z" level=info msg="CreateContainer within sandbox \"68140449a20610047f7b2f6499ecb422b30c5df3f6980b6f824c6cfb96b2d9b6\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"675600eaaf5e0cffa7afdca145f218122d47a2c40d436345ea1d87a78f0fd616\"" Oct 2 21:31:28.109608 env[1374]: time="2023-10-02T21:31:28.109584874Z" level=info msg="StartContainer for \"675600eaaf5e0cffa7afdca145f218122d47a2c40d436345ea1d87a78f0fd616\"" Oct 2 21:31:28.134472 systemd[1]: Started cri-containerd-675600eaaf5e0cffa7afdca145f218122d47a2c40d436345ea1d87a78f0fd616.scope. Oct 2 21:31:28.140343 systemd[1]: Started cri-containerd-4eca3e40fce45b66fc9a241b34bd1e90d074a464da2ebee7394b1478fd0508d2.scope. Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.199110 kernel: audit: type=1400 audit(1696282288.160:1421): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.199274 kernel: audit: type=1400 audit(1696282288.160:1422): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.223025 kernel: audit: type=1400 audit(1696282288.160:1423): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.223127 kernel: audit: type=1400 audit(1696282288.160:1424): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.222297 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3446217803.mount: Deactivated successfully. Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.262513 kernel: audit: type=1400 audit(1696282288.160:1425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.262966 kernel: audit: type=1400 audit(1696282288.160:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.179000 audit: BPF prog-id=130 op=LOAD Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2248 pid=3926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353630306561616635653063666661376166646361313435663231 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2248 pid=3926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353630306561616635653063666661376166646361313435663231 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.198000 audit: BPF prog-id=131 op=LOAD Oct 2 21:31:28.198000 audit[3926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2248 pid=3926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353630306561616635653063666661376166646361313435663231 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.220000 audit: BPF prog-id=132 op=LOAD Oct 2 21:31:28.220000 audit[3926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2248 pid=3926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353630306561616635653063666661376166646361313435663231 Oct 2 21:31:28.241000 audit: BPF prog-id=132 op=UNLOAD Oct 2 21:31:28.241000 audit: BPF prog-id=131 op=UNLOAD Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit[3926]: AVC avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.241000 audit: BPF prog-id=133 op=LOAD Oct 2 21:31:28.241000 audit[3926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2248 pid=3926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353630306561616635653063666661376166646361313435663231 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.283000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.283000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2233 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636133653430666365343562363666633961323431623334626431 Oct 2 21:31:28.283000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.283000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2233 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636133653430666365343562363666633961323431623334626431 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit: BPF prog-id=135 op=LOAD Oct 2 21:31:28.285000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2233 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636133653430666365343562363666633961323431623334626431 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit: BPF prog-id=136 op=LOAD Oct 2 21:31:28.285000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2233 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636133653430666365343562363666633961323431623334626431 Oct 2 21:31:28.285000 audit: BPF prog-id=136 op=UNLOAD Oct 2 21:31:28.285000 audit: BPF prog-id=135 op=UNLOAD Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:31:28.285000 audit: BPF prog-id=137 op=LOAD Oct 2 21:31:28.285000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2233 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:31:28.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636133653430666365343562363666633961323431623334626431 Oct 2 21:31:28.324470 env[1374]: time="2023-10-02T21:31:28.324310844Z" level=info msg="StartContainer for \"675600eaaf5e0cffa7afdca145f218122d47a2c40d436345ea1d87a78f0fd616\" returns successfully" Oct 2 21:31:28.328127 env[1374]: time="2023-10-02T21:31:28.328080242Z" level=info msg="StartContainer for \"4eca3e40fce45b66fc9a241b34bd1e90d074a464da2ebee7394b1478fd0508d2\" returns successfully" Oct 2 21:31:29.869000 audit[3946]: AVC avc: denied { watch } for pid=3946 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:31:29.869000 audit[3946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000308c00 a2=fc6 a3=0 items=0 ppid=2248 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:31:29.869000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:31:29.870000 audit[3946]: AVC avc: denied { watch } for pid=3946 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:31:29.870000 audit[3946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400031c780 a2=fc6 a3=0 items=0 ppid=2248 pid=3946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c265,c999 key=(null) Oct 2 21:31:29.870000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:31:30.234274 kubelet[2543]: E1002 21:31:30.234155 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:31.873000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:31:31.873000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:31:31.873000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400f0e3640 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:31:31.873000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:31:31.874000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:31:31.874000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400f5f1e00 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:31:31.874000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:31:31.873000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=400d00d2c0 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:31:31.873000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:31:31.922000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:31:31.922000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:31:31.922000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=400d00d350 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:31:31.922000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:31:31.922000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400f0e3760 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:31:31.922000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:31:31.922000 audit[2405]: AVC avc: denied { watch } for pid=2405 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:31:31.922000 audit[2405]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=400f5f1f20 a2=fc6 a3=0 items=0 ppid=2266 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c838 key=(null) Oct 2 21:31:31.922000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:31:35.035527 env[1374]: time="2023-10-02T21:31:35.035482113Z" level=info msg="StopPodSandbox for \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\"" Oct 2 21:31:35.036084 env[1374]: time="2023-10-02T21:31:35.036035438Z" level=info msg="TearDown network for sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" successfully" Oct 2 21:31:35.036190 env[1374]: time="2023-10-02T21:31:35.036173600Z" level=info msg="StopPodSandbox for \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" returns successfully" Oct 2 21:31:35.036492 env[1374]: time="2023-10-02T21:31:35.036464283Z" level=info msg="RemovePodSandbox for \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\"" Oct 2 21:31:35.036552 env[1374]: time="2023-10-02T21:31:35.036497003Z" level=info msg="Forcibly stopping sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\"" Oct 2 21:31:35.036584 env[1374]: time="2023-10-02T21:31:35.036558484Z" level=info msg="TearDown network for sandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" successfully" Oct 2 21:31:35.046289 env[1374]: time="2023-10-02T21:31:35.046245060Z" level=info msg="RemovePodSandbox \"6036a6d17513b033c540ef3bac400edae267335e9278ab28a8919888a9332a50\" returns successfully" Oct 2 21:31:35.234638 kubelet[2543]: E1002 21:31:35.234609 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:31:37.634449 kubelet[2543]: E1002 21:31:37.634373 2543 controller.go:189] failed to update lease, error: Put "https://10.200.20.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-32a653638a?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 21:31:40.235950 kubelet[2543]: E1002 21:31:40.235905 2543 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"